{"as_of":"2026-08-19T03:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4c834d7de8df2b21a1293cb504312e7e4c2c6f23c623be057fc0cbc83eab9bec","coverage":[{"denominator":28,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":28,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T15:17:08.589033Z","state":"measured"},{"denominator":32,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":32,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":4,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":4,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T02:21:51.767054Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-11T17:11:12.509703Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"cited_work":{"arxiv_id":"2509.20714","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2509.20714","snapshot_observed_at":"2026-06-09T02:05:21.445841Z","title":"Crypto- graphic backdoor for neural networks: Boon and bane","venue":null,"work_id":"2e56593e-8094-4c05-83d4-0c5e81398a20","year":2025},"citing_paper":{"arxiv_id":"2605.04209","last_updated":"2026-07-03T13:26:00Z","snapshot_observed_at":"2026-07-12T17:35:51.837508Z","submitted_at":"2026-05-05T18:48:09Z","title":"Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T17:50:49.951655Z"},"links":{"cited_paper":"/paper/2509.20714","citing_paper":"/paper/2605.04209"},"observation_digest":"sha256:633eba132177e58d6ec5bdb0a9fc03cfbcbe2e1f18e8a9c719c65672e695b884","observation_id":"78f367ee-521e-41ce-8295-a49c2fc00fdc","resolution":{"observed_at":"2026-06-09T02:05:21.445841Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.20714","snapshot_observed_at":"2026-07-12T17:35:56.649298Z","title":"Cryptographic backdoor for neural networks: Boon and bane","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.04209","last_updated":"2026-07-03T13:26:00Z","snapshot_observed_at":"2026-07-12T17:35:51.837508Z","submitted_at":"2026-05-05T18:48:09Z","title":"Undetectable Backdoors in Model Parameters: Hiding Sparse Secrets in High Dimensions","version":2},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-07-12T17:35:56.649298Z"},"links":{"cited_paper":"/paper/2509.20714","citing_paper":"/paper/2605.04209"},"observation_digest":"sha256:5d2ab918d17386bbbe0cf4cfe8a9536c140065ccf35f83160325ddbb2ecbc7f8","observation_id":"1b03b9a3-6339-42ce-b6d1-b1ba2111797a","resolution":{"observed_at":"2026-07-12T17:35:56.649298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.20714","snapshot_observed_at":"2026-07-13T02:21:51.767054Z","title":"CoRR , volume =","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09532","last_updated":"2026-07-10T15:37:32Z","snapshot_observed_at":"2026-08-14T18:25:12.921000Z","submitted_at":"2026-07-10T15:37:32Z","title":"Statistically Undetectable Backdoors in Deep Neural Networks","version":1},"reference_index":60,"source":"arxiv_source","source_observed_at":"2026-07-13T02:21:51.767054Z"},"links":{"cited_paper":"/paper/2509.20714","citing_paper":"/paper/2607.09532"},"observation_digest":"sha256:c5e2b62fb9652aa6965f122f920604c3741379087725d6ca12c274e6b7b5d190","observation_id":"08eecdbb-5528-4588-9146-1acba95f5757","resolution":{"observed_at":"2026-07-13T02:21:51.767054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2509.20714","snapshot_observed_at":"2026-07-13T02:21:51.767054Z","title":"Cryptographic backdoor for neural networks: Boon and bane","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.09532","last_updated":"2026-07-10T15:37:32Z","snapshot_observed_at":"2026-08-14T18:25:12.921000Z","submitted_at":"2026-07-10T15:37:32Z","title":"Statistically Undetectable Backdoors in Deep Neural Networks","version":1},"reference_index":98,"source":"arxiv_source","source_observed_at":"2026-07-13T02:21:51.767054Z"},"links":{"cited_paper":"/paper/2509.20714","citing_paper":"/paper/2607.09532"},"observation_digest":"sha256:e94eb869b622823502d500560452fabee462d78cab85df030569bc9ceee4b2dc","observation_id":"7e8b215c-0354-43d3-8706-e243b1684e3a","resolution":{"observed_at":"2026-07-13T02:21:51.767054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2509.20714/citation-record","integrity":"/paper/2509.20714/integrity","json":"/paper/2509.20714/citation-record.json","paper":"/paper/2509.20714"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.507333Z","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.507333Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:35ba4d892df759a321d15b4b07904fd82db7bc5cad647f99bd79f6694fd69509","observation_id":"199c4f71-9835-4e66-b52f-970211bee9c9","resolution":{"observed_at":"2026-08-04T15:17:08.507333Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.511034Z","title":"Certified neural network watermarks with randomized smoothing,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.511034Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:34bec13f2e1b3978f5be99e61a730ef60cba395efd81533deefbf6bf3bc0074b","observation_id":"d2bb9950-aaa3-4f0e-9352-5cc1d05358b6","resolution":{"observed_at":"2026-08-04T15:17:08.511034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.514148Z","title":"Towards Robust Model Watermark via Reducing Parametric Vulnerability,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.514148Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:d458d4b53ea9a67f4d54447d556747f57a7a9ef13ba05eea3d29ee715c8f7057","observation_id":"aa66051b-a9de-4ac5-b43c-53962cde0881","resolution":{"observed_at":"2026-08-04T15:17:08.514148Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.517232Z","title":"Entangled Watermarks as a Defense against Model Extraction,","venue":null,"work_id":null,"year":1937},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.517232Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:84677b69700d95c10f1e9bcf97af5002a92f36b5df4981af151c220098a93cdc","observation_id":"5a61d05a-47f4-4018-9c12-57b0b9b14c14","resolution":{"observed_at":"2026-08-04T15:17:08.517232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.520639Z","title":"Deep Neural Network Fingerprinting by Conferrable Adversarial Examples,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.520639Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:2f400f90a75513f1c1696ac0cf5da1bad2b3adb76d251c7a9f825816827fdb46","observation_id":"bc20b28b-c232-4cbc-bb3f-32ade8f26826","resolution":{"observed_at":"2026-08-04T15:17:08.520639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.523997Z","title":"Copy, Right? A Testing Framework for Copyright Protection of Deep Learning Models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.523997Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:b904cbc8bff35aa4d7e35682b7d240b00c5355220758d0b873b6e09955572930","observation_id":"2181c1cd-1e92-4bdf-893c-fccf34a3e624","resolution":{"observed_at":"2026-08-04T15:17:08.523997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.527125Z","title":"Are you stealing my model? sample correlation for fingerprinting deep neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.527125Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:e5d9869e52ecd44e1d4ce891430330868ea53c61ddc89580da9c9b1132d84d32","observation_id":"d733c701-e0e4-4c57-be22-f3c86c6ca772","resolution":{"observed_at":"2026-08-04T15:17:08.527125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.530294Z","title":"United we stand, divided we fall: Fingerprinting deep neural networks via adversarial trajectories,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.530294Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:8fbca8f77a7fa72026c99e9b569bf6136d0e33fc10fd52f2f8ff4ead9d8a3ef7","observation_id":"0c4a9689-c6be-41b9-81a0-ea882c22890b","resolution":{"observed_at":"2026-08-04T15:17:08.530294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.533399Z","title":"BadNets: Evaluating Back- dooring Attacks on Deep Neural Networks,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.533399Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:ff24c89e662efe38ba82eb6fd5a42c4bdfe5edd6254dd39ea266f496e599ccc8","observation_id":"c4c98679-e10a-4ba2-b07d-2b7924e4659e","resolution":{"observed_at":"2026-08-04T15:17:08.533399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.536383Z","title":"Planting Undetectable Backdoors in Machine Learning Models : [Extended Abstract],","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.536383Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:16688a427bc335b7bf7bef4970470ddeef55e16ef89892be886e6e43ff851942","observation_id":"a63b608e-e549-4875-864e-2de30e78a2e9","resolution":{"observed_at":"2026-08-04T15:17:08.536383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-04T15:17:08.539208Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.539208Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:c99dbba14cc5f03a84c1b35129fdc5148558735cb398be60b76229f156bc44a9","observation_id":"1b962306-7a86-4eea-967c-dcf7d1c7532c","resolution":{"observed_at":"2026-08-04T15:17:08.539208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-10T18:11:31.253134Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-08-04T15:17:08.542648Z","title":"Turner, D","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.542648Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:9103f4370273195d91be05443607152d3e676b5b4180acc417c547df7ccaa4a5","observation_id":"d917fba3-c264-4a8f-8991-abcbf1ff0c09","resolution":{"observed_at":"2026-08-04T15:17:08.542648Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.546345Z","title":"Hidden Trigger Backdoor Attacks,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.546345Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:3bb4878f033f40980c799964a1a537d504a2b57e0126129eb5bb990ae42508bf","observation_id":"608b0eb3-5bcf-47aa-a672-94a3893eb245","resolution":{"observed_at":"2026-08-04T15:17:08.546345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.549445Z","title":"Trojaning Attack on Neural Networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.549445Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:2ce07d10265c90ec8bbc09b724505b9d7374f0530ba6fb0830f7f3f37cccf873","observation_id":"d88840dd-58be-4b48-b296-75331b250d40","resolution":{"observed_at":"2026-08-04T15:17:08.549445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.552265Z","title":"An Embarrassingly Simple Approach for Trojan Attack in Deep Neural Networks,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.552265Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:b839a45b34a8b448e3fd3642d6e3c5697eef58da748a29265759f9928ae1601a","observation_id":"4ba0ebce-5be3-4570-aca5-55a65c15c8cd","resolution":{"observed_at":"2026-08-04T15:17:08.552265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.555528Z","title":"Latent Backdoor Attacks on Deep Neural Networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.555528Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:ffb33468ee01dccfe4957373e029ccf1ba4d2f50c22b56479cf189fb49339a61","observation_id":"e20269c6-ed12-4b03-80d9-061249c0eb53","resolution":{"observed_at":"2026-08-04T15:17:08.555528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.558308Z","title":"Backdoor Attacks Against Transfer Learning With Pre-Trained Deep Learning Models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.558308Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:cdb040b01958b744c06ecc0cee563dbeaaf6f1e2ed98ab1c52422c2aab22e483","observation_id":"ccd5a724-2aee-49c0-b5d5-b55ed9760936","resolution":{"observed_at":"2026-08-04T15:17:08.558308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.560974Z","title":"Handcrafted Backdoors in Deep Neural Networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.560974Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:fd27205dcad2b6e15aab25c9c89831466ec930a246498ba9a12009288ed576e0","observation_id":"b612b69c-9308-41bf-8f28-069c58747cb3","resolution":{"observed_at":"2026-08-04T15:17:08.560974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.563764Z","title":"Protecting Intellectual Property of Deep Neural Networks with Watermarking,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.563764Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:64b80da8bccb7176df1bd814eb0f595f895d5b24cd062860a30b40f29977101c","observation_id":"c5904b45-b740-464d-b30d-b015b0df7f9e","resolution":{"observed_at":"2026-08-04T15:17:08.563764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.566520Z","title":"How to Securely Implement Cryptography in Deep Neural Networks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.566520Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:f847319338fee458e9dba08fbfb7aa5703153b19ef8dd5fc7ab4dca84a946584","observation_id":"39e0b62d-8df1-4ba8-9b6a-5838059d72c0","resolution":{"observed_at":"2026-08-04T15:17:08.566520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.569426Z","title":"Unelic- itable Backdoors via Cryptographic Transformer Circuits,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.569426Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:23068d2c5a1ea025a47e470392447a9e14ec5ff8ea95ffa1b858e0b5cf96beb8","observation_id":"8dbd881f-be0e-4e02-befa-54322f0c53a4","resolution":{"observed_at":"2026-08-04T15:17:08.569426Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.572230Z","title":"Injecting Undetectable Backdoors in Obfuscated Neural Networks and Language Models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.572230Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:99d549d27cdc7ff1f643c27219c46717dc8144b3293f5813777f708dfd8d325d","observation_id":"64958d84-c8f1-453f-b949-2c8fcd31b55f","resolution":{"observed_at":"2026-08-04T15:17:08.572230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.574885Z","title":"Cryptanalytic Extraction of Neural Network Models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.574885Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:e2c908b80ffd6ad55d679c6640cb0e7aa3e7bd236d807f8d2dc8c4fa0fc40537","observation_id":"0635a0fd-f3e8-4b69-b1bb-188fcf76001c","resolution":{"observed_at":"2026-08-04T15:17:08.574885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.577863Z","title":"High- speed high-security signatures,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.577863Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:1941eaa22b0ffb18d472c5dbbbfc262240870df57b4c71757eea323bbd281171","observation_id":"4215a4a9-a6bb-47eb-9b8b-8240662ca3a9","resolution":{"observed_at":"2026-08-04T15:17:08.577863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.580904Z","title":"CRYSTALS – Dilithium: Digital Signatures from Module Lattices,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.580904Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:5404d01b9da1c6ca82d6935b93e302e02c79bb0739059d53a9fc7e46808f8138","observation_id":"de4181de-4c98-4f9b-93f0-3a32cfbdccab","resolution":{"observed_at":"2026-08-04T15:17:08.580904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.583686Z","title":"Keying Hash Functions for Message Authentication,","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.583686Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:d64ce07c074817f48944532c587ced50c5683dfbe454e82b7342cb6d6a51fe1b","observation_id":"8d204c26-2555-42b7-b037-ba318ae6febc","resolution":{"observed_at":"2026-08-04T15:17:08.583686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.586512Z","title":"Mnist handwritten digit database,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.586512Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:59cf88ed94bf0dd7a1c218246daa6b63d092b34f917182c88a975dce76c5913c","observation_id":"0db70d61-23dd-4c71-8779-062932e6a15c","resolution":{"observed_at":"2026-08-04T15:17:08.586512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T15:17:08.589033Z","title":"Random Features for Large-Scale Kernel Machines,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T15:17:08.589033Z"},"links":{"citing_paper":"/paper/2509.20714"},"observation_digest":"sha256:c863f9cfc003db97f85258cd9b57edfb9c25bd4e0bcf50b2f2419bd8f3c21fc2","observation_id":"da959118-46ee-4d82-81cc-849fe7c6bac1","resolution":{"observed_at":"2026-08-04T15:17:08.589033Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.20714","last_updated":"2026-06-06T03:01:16Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T02:58:13.813058Z","submitted_at":"2025-09-25T03:27:46Z","title":"Cryptographic Backdoor for Neural Networks: Boon and Bane"},"reference_resolution":{"displayed":28,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":28,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":28},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 28 of 28 outbound references and 4 inbound Pith citation observations for arXiv:2509.20714."}