{"as_of":"2026-08-09T03:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:056132cc3e38b74504386373df70a9d4ffe229b28ac07cd02967c4aa40a183cb","coverage":[{"denominator":13,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":13,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T22:06:30.939408Z","state":"measured"},{"denominator":16,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":16,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":3,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":3,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T21:55:21.464980Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T11:28:04.481664Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"cited_work":{"arxiv_id":"2509.07504","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.07504","snapshot_observed_at":"2026-07-03T11:28:04.481664Z","title":"Backdoor attacks and defenses in computer vision domain: A survey","venue":null,"work_id":"22a13bec-74e2-44d2-8484-6385db6a5ba7","year":2025},"citing_paper":{"arxiv_id":"2605.13214","last_updated":"2026-06-19T15:05:06Z","snapshot_observed_at":"2026-08-05T06:58:19.361616Z","submitted_at":"2026-05-13T09:06:25Z","title":"Backdoor Channels Hidden in Latent Space: Cryptographic Undetectability in Modern Neural Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-14T18:38:02.065187Z"},"links":{"cited_paper":"/paper/2509.07504","citing_paper":"/paper/2605.13214"},"observation_digest":"sha256:b620d2eb90c4f0605e480eede2c4104485c19813e4eb694bebbccb2298e28bcc","observation_id":"b800213f-5d5e-40cc-899b-3ddb7cd2453b","resolution":{"observed_at":"2026-05-14T18:39:22.325484Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"cited_work":{"arxiv_id":"2509.07504","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.07504","snapshot_observed_at":"2026-07-03T11:28:04.481664Z","title":"Backdoor attacks and defenses in computer vision domain: A survey","venue":null,"work_id":"22a13bec-74e2-44d2-8484-6385db6a5ba7","year":2025},"citing_paper":{"arxiv_id":"2605.13214","last_updated":"2026-06-19T15:05:06Z","snapshot_observed_at":"2026-08-05T06:58:19.361616Z","submitted_at":"2026-05-13T09:06:25Z","title":"Backdoor Channels Hidden in Latent Space: Cryptographic Undetectability in Modern Neural Networks","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-30T21:55:21.464980Z"},"links":{"cited_paper":"/paper/2509.07504","citing_paper":"/paper/2605.13214"},"observation_digest":"sha256:1f222be82949424b22ccd10d6a6f50c8340b98b815e6c8e51018d12fb898ca42","observation_id":"a198a014-46f7-4b1c-880c-045d532aa16b","resolution":{"observed_at":"2026-06-30T22:05:06.204378Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"cited_work":{"arxiv_id":"2509.07504","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.07504","snapshot_observed_at":"2026-07-03T11:28:04.481664Z","title":"Backdoor attacks and defenses in computer vision domain: A survey","venue":null,"work_id":"22a13bec-74e2-44d2-8484-6385db6a5ba7","year":2025},"citing_paper":{"arxiv_id":"2606.11648","last_updated":"2026-06-10T04:26:57Z","snapshot_observed_at":"2026-07-06T23:50:39.386691Z","submitted_at":"2026-06-10T04:26:57Z","title":"Dummy Backdoor as a Defense: Removing Unknown Backdoors via Shared Internal Mechanisms for Generative LLMs","version":1},"reference_index":42,"source":"arxiv_source","source_observed_at":"2026-06-27T09:33:45.042071Z"},"links":{"cited_paper":"/paper/2509.07504","citing_paper":"/paper/2606.11648"},"observation_digest":"sha256:dd3e17e9bc561c3fc5171b2e10d4827d4b8a1e8994ed9fbe6f33b23f3f58973a","observation_id":"068a9414-0971-4065-b1df-7f6dabc78ba1","resolution":{"observed_at":"2026-07-03T11:28:04.483125Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2509.07504/citation-record","integrity":"/paper/2509.07504/integrity","json":"/paper/2509.07504/citation-record.json","paper":"/paper/2509.07504"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.15439","last_updated":"2024-11-23T03:46:45Z","snapshot_observed_at":"2026-08-07T04:06:44.615081Z","submitted_at":"2024-11-23T03:46:45Z","title":"Twin Trigger Generative Networks for Backdoor Attacks against Object Detection","version":1},"cited_work":{"arxiv_id":"2411.15439","doi":null,"metadata_source":"pith","pith_arxiv_id":"2411.15439","snapshot_observed_at":"2026-08-04T22:06:31.206220Z","title":"Twin Trigger Generative Networks for Backdoor Attacks against Object Detection","venue":"cs.CV","work_id":"2c2944ec-5292-4217-bf32-4bdafd1f870a","year":2024},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.608544Z"},"links":{"cited_paper":"/paper/2411.15439","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:76835802990050e86a30403b25dfcbde499a0afc7262d5c3d9159c8ab1649024","observation_id":"e3d43d82-36aa-4a08-a3e6-63f72ee796f6","resolution":{"observed_at":"2026-08-04T22:06:31.251196Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.08577","last_updated":"2024-02-13T16:28:28Z","snapshot_observed_at":"2026-08-03T16:35:46.376448Z","submitted_at":"2024-02-13T16:28:28Z","title":"Test-Time Backdoor Attacks on Multimodal Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.08577","snapshot_observed_at":"2026-08-04T22:06:30.759059Z","title":"Ma, H.; Li, Y .; Gao, Y .; Abuadbba, A.; Zhang, Z.; Fu, A.; Kim, H.; Al-Sarawi, S","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.759059Z"},"links":{"cited_paper":"/paper/2402.08577","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:3d8e70aa25a0a30e6c826d43c5d745eee853f482186c20e9a9dd020699711f39","observation_id":"fae53a06-553d-41e2-8406-81334b9ae269","resolution":{"observed_at":"2026-08-04T22:06:30.759059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.00197","last_updated":"2021-10-30T07:11:24Z","snapshot_observed_at":"2026-07-06T12:03:42.294180Z","submitted_at":"2021-10-30T07:11:24Z","title":"Backdoor Pre-trained Models Can Transfer to All","version":1},"cited_work":{"arxiv_id":"2111.00197","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.00197","snapshot_observed_at":"2026-08-04T22:06:31.109200Z","title":"Backdoor Pre-trained Models Can Transfer to All","venue":"cs.CL","work_id":"3c2a5978-95f4-4acb-9c31-9181f4c80a92","year":2021},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.802159Z"},"links":{"cited_paper":"/paper/2111.00197","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:6667a00ef5af80b49e5d823d5dc0bb221dda5a5919895d047fcbfb7f97b88798","observation_id":"689de4ec-8014-4fcf-9866-f90f10626039","resolution":{"observed_at":"2026-08-04T22:06:31.150127Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:06:31.523937Z","title":"InProceedings of the AAAI Conference on Artificial Intelligence, volume 38, 21850–21858","venue":null,"work_id":"eb98600b-c644-41fe-beac-0a0f538a0c14","year":2019},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.939408Z"},"links":{"citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:9b2e5f3a1b7f95db5849215618542376152c72dbf266756ef8eb692d36d78901","observation_id":"a80bd4f1-c510-4b9c-8336-8e8744f069d3","resolution":{"observed_at":"2026-08-04T22:06:31.568063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T22:06:31.670099Z","title":"Lu, D.; Pang, T.; Du, C.; Liu, Q.; Yang, X.; and Lin, M","venue":null,"work_id":"a9e5d9e7-1fe8-4adc-bef1-14fb6cc8dcb9","year":null},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":199,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.713791Z"},"links":{"citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:6f3c7403c332cae81dbb6cf29eb66c855cca53ae3df799f6343c24721b619076","observation_id":"76b638e5-550c-45cb-ab96-746e2fafd12c","resolution":{"observed_at":"2026-08-04T22:06:31.712998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.01763","last_updated":"2019-08-08T22:59:45Z","snapshot_observed_at":"2026-08-05T10:11:29.519917Z","submitted_at":"2019-08-02T22:46:03Z","title":"TABOR: A Highly Accurate Approach to Inspecting and Restoring Trojan Backdoors in AI Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.01763","snapshot_observed_at":"2026-08-04T22:06:30.346108Z","title":"Han, B.; Yao, Q.; Yu, X.; Niu, G.; Xu, M.; Hu, W.; Tsang, I.; and Sugiyama, M","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.346108Z"},"links":{"cited_paper":"/paper/1908.01763","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:273c866f5d2842f6ac447de2560ffa0772e02aab7c369e71bb171d0a83e13263","observation_id":"76d91001-a3f6-4954-a453-900ac11b2e6d","resolution":{"observed_at":"2026-08-04T22:06:30.346108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2108.13888","last_updated":"2021-08-31T14:47:37Z","snapshot_observed_at":"2026-07-06T11:43:05.180555Z","submitted_at":"2021-08-31T14:47:37Z","title":"Backdoor Attacks on Pre-trained Models by Layerwise Weight Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.13888","snapshot_observed_at":"2026-08-04T22:06:30.519979Z","title":"InProceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition, 301–310","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.519979Z"},"links":{"cited_paper":"/paper/2108.13888","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:a2f963ddf8eee362d8654108d4ba73f395a0da0177d9641fcaf2d3b86d673865","observation_id":"49054270-2e5f-447c-8195-13bd8347558f","resolution":{"observed_at":"2026-08-04T22:06:30.519979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.10991","last_updated":"2021-11-30T03:25:52Z","snapshot_observed_at":"2026-07-06T12:10:42.498280Z","submitted_at":"2021-11-22T05:13:12Z","title":"Backdoor Attack through Frequency Domain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.10991","snapshot_observed_at":"2026-08-04T22:06:30.892675Z","title":"Wei, C.; Lee, Y .; Chen, K.; Meng, G.; and Lv, P","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.892675Z"},"links":{"cited_paper":"/paper/2111.10991","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:abea8940cecd324156b0393adb4a61bb8d9c2683ef5a995cf94269f6d3d024cf","observation_id":"2e97473f-aba8-4531-987f-9e434916e590","resolution":{"observed_at":"2026-08-04T22:06:30.892675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03728","last_updated":"2018-11-09T01:08:00Z","snapshot_observed_at":"2026-07-06T07:13:39.005894Z","submitted_at":"2018-11-09T01:08:00Z","title":"Detecting Backdoor Attacks on Deep Neural Networks by Activation Clustering","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.03728","snapshot_observed_at":"2026-08-04T22:06:30.176645Z","title":"InEu- ropean conference on computer vision, 396–412","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.176645Z"},"links":{"cited_paper":"/paper/1811.03728","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:4218150b98c5fbf46b0c15789835006397e4b996b428406f4fadff25292ba2e7","observation_id":"954ddab0-abca-4431-922c-d811d22c7901","resolution":{"observed_at":"2026-08-04T22:06:30.176645Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2306.00816","last_updated":"2024-06-24T15:40:01Z","snapshot_observed_at":"2026-08-07T05:15:07.673660Z","submitted_at":"2023-06-01T15:42:06Z","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","version":4},"cited_work":{"arxiv_id":"2306.00816","doi":null,"metadata_source":"pith","pith_arxiv_id":"2306.00816","snapshot_observed_at":"2026-08-04T22:06:31.011876Z","title":"Versatile Backdoor Attack with Visible, Semantic, Sample-Specific, and Compatible Triggers","venue":"cs.CV","work_id":"82848868-cbfa-4dfe-9693-63de9721b059","year":2023},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.848267Z"},"links":{"cited_paper":"/paper/2306.00816","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:b1c1d254a11c6827e8759f5404c62f3e30652b24b257e22d61d808b0f697a1ec","observation_id":"4115fc25-3942-45d7-b6b6-a52cca6289e7","resolution":{"observed_at":"2026-08-04T22:06:31.058416Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.04776","last_updated":"2024-12-06T04:39:41Z","snapshot_observed_at":"2026-08-07T13:00:07.385515Z","submitted_at":"2024-12-06T04:39:41Z","title":"Megatron: Evasive Clean-Label Backdoor Attacks against Vision Transformer","version":1},"cited_work":{"arxiv_id":"2412.04776","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.04776","snapshot_observed_at":"2026-08-04T22:06:31.323519Z","title":"Megatron: Evasive Clean-Label Backdoor Attacks against Vision Transformer","venue":"cs.CV","work_id":"1cd8942c-9a50-452b-bf79-8dd76fff9c0a","year":2024},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.251900Z"},"links":{"cited_paper":"/paper/2412.04776","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:62d943be7975cd0829dd1a4ee39ea999c261cc630697d01e884295977c474714","observation_id":"e42f754c-8f96-458b-a00b-f2403f7ac63b","resolution":{"observed_at":"2026-08-04T22:06:31.369512Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.20925","last_updated":"2025-03-26T18:58:53Z","snapshot_observed_at":"2026-08-08T08:07:35.360999Z","submitted_at":"2025-03-26T18:58:53Z","title":"Prototype Guided Backdoor Defense","version":1},"cited_work":{"arxiv_id":"2503.20925","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.20925","snapshot_observed_at":"2026-08-04T22:06:31.428150Z","title":"Prototype Guided Backdoor Defense","venue":"cs.CV","work_id":"baa47526-fbeb-4f9f-8837-b7b033fa74b1","year":2025},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.142065Z"},"links":{"cited_paper":"/paper/2503.20925","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:3d27d212cd491345de25fbfe4af3c2018549f460106c1435136eb56621f8e862","observation_id":"20aa64e7-d081-4dc8-b2b9-f46b2b5a5f35","resolution":{"observed_at":"2026-08-04T22:06:31.474018Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.03423","last_updated":"2022-02-05T03:34:01Z","snapshot_observed_at":"2026-08-08T06:24:33.137819Z","submitted_at":"2022-02-05T03:34:01Z","title":"Backdoor Defense via Decoupling the Training Process","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.03423","snapshot_observed_at":"2026-08-04T22:06:30.445063Z","title":"Hou, R.; Huang, T.; Yan, H.; Ke, L.; and Tang, W","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey","version":1},"reference_index":4139,"source":"pdf_text","source_observed_at":"2026-08-04T22:06:30.445063Z"},"links":{"cited_paper":"/paper/2202.03423","citing_paper":"/paper/2509.07504"},"observation_digest":"sha256:e16e7606fbdbe9bc4f55c8a93b9cec05ccb1736632ad314c1e8b471b50b49272","observation_id":"97a4fd20-8b7b-4764-9585-f76648535994","resolution":{"observed_at":"2026-08-04T22:06:30.445063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.07504","last_updated":"2025-09-09T08:38:05Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T22:07:12.797062Z","submitted_at":"2025-09-09T08:38:05Z","title":"Backdoor Attacks and Defenses in Computer Vision Domain: A Survey"},"reference_resolution":{"displayed":13,"state_counts":{"malformed_identifier":0,"metadata_mismatch":5,"parse_uncertain":0,"unresolved":6,"verified_exact":0,"verified_fuzzy":2},"total_outbound_references":13},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 13 of 13 outbound references and 3 inbound Pith citation observations for arXiv:2509.07504."}