{"as_of":"2026-08-06T21:48:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9e9dbf8e5722b44243266ff31e2e2f78bbaf1c15e8a090ce5ce989c1c4357854","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-14T00:24:22.292451Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-06T06:34:29.942622+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-25T20:12:50.848080Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-04T20:20:07.895964Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"cited_work":{"arxiv_id":"2603.29328","doi":null,"metadata_source":"pith","pith_arxiv_id":"2603.29328","snapshot_observed_at":"2026-07-04T20:20:07.895964Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","venue":"cs.CR","work_id":"d4e8e5e4-dbd8-467b-b79a-40cbcc7be6c9","year":2026},"citing_paper":{"arxiv_id":"2606.25858","last_updated":"2026-06-24T14:07:10Z","snapshot_observed_at":"2026-07-07T00:00:17.090702Z","submitted_at":"2026-06-24T14:07:10Z","title":"Color Matters: Trigger Color Affects Success in Federated Backdoor Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-25T20:12:50.848080Z"},"links":{"cited_paper":"/paper/2603.29328","citing_paper":"/paper/2606.25858"},"observation_digest":"sha256:2fa182def462947f3954c8253f3584000d31186ecbce143d8494a8c6c134c4cf","observation_id":"b2616209-47eb-4f4f-9373-a8702bc9eac5","resolution":{"observed_at":"2026-07-04T20:20:07.897326Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2603.29328/citation-record","integrity":"/paper/2603.29328/integrity","json":"/paper/2603.29328/citation-record.json","paper":"/paper/2603.29328"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Communication-efficient learning of deep networks from decentralized data","venue":null,"work_id":"2d26c967-2c3b-4d4c-8039-ec27cbfeb3c6","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:6226a5e98ad8a5ca354325e43f8f3f5382214ed736f53b45e8915ec2906b5993","observation_id":"882dfbaa-0c26-42ec-af41-a6c45864f567","resolution":{"observed_at":"2026-05-14T00:28:30.854488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Advances and open problems in federated learning","venue":null,"work_id":"8ad5704e-edce-4608-87e0-59f6d3031d4a","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:11a154027a19a0b9da246ecd0c0f14db4334e9245a9568bfe53535f21c3bf92e","observation_id":"18a3c7ab-f9ee-4ad7-b5fb-cba104c62473","resolution":{"observed_at":"2026-05-14T00:28:30.913122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on federated learning: The journey from centralized to distributed on-site learning and beyond","venue":null,"work_id":"db108f0d-367f-48af-ad68-c1d8fe17a56c","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:097c07f2daec21dafcd5657d6404cdc66543dd636d100a49e3a5ab811b1b2b48","observation_id":"ce1b503d-c64b-44b9-b8e9-5ac81377a531","resolution":{"observed_at":"2026-05-14T00:28:30.916475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The federation strikes back: A survey of federated learning privacy attacks, defenses, applications, and policy landscape","venue":null,"work_id":"69ee5956-e53d-4f51-8bc1-e1d40523cae3","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:3bddc8eac6dab47412fe55200bc04fb778f99eee811b790fa4029ebb97a8e49f","observation_id":"7663c081-3309-47fe-9a6e-bc499a68218b","resolution":{"observed_at":"2026-05-14T00:28:30.920668Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Leak and learn: An attacker’s cookbook to train using leaked data from federated learning","venue":null,"work_id":"b8a9843b-79cb-4a38-8079-c1458f5fa0cb","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8af7d1397584c77ff768df01442a19d98eb91588eadce9d0d12c391042adaebc","observation_id":"9a1ef0c6-b1d9-42c8-a197-b7d9237d5ef2","resolution":{"observed_at":"2026-05-14T00:28:30.909490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Federated learning: Strategies for improving communication efficiency","venue":null,"work_id":"a6eb5e92-f8e3-49d8-a06d-8daccdf4396b","year":2016},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:111aba20b6d97c1637aae444f0ad8402bc431a231dd1249452ed8f205b1c52bd","observation_id":"afe8aa4a-5f71-45c7-b256-36a92c0e315c","resolution":{"observed_at":"2026-05-14T00:28:30.901659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.03604","last_updated":"2019-02-28T21:07:51Z","snapshot_observed_at":"2026-07-06T07:13:34.019157Z","submitted_at":"2018-11-08T18:37:03Z","title":"Federated Learning for Mobile Keyboard Prediction","version":2},"cited_work":{"arxiv_id":"1811.03604","doi":"10.48550/arxiv.1811.03604","metadata_source":"pith","pith_arxiv_id":"1811.03604","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Federated Learning for Mobile Keyboard Prediction","venue":"cs.CL","work_id":"bee947a7-dcaf-4762-81a5-b75eead51908","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1811.03604","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:dbadaf1b1fcf25852fbb09e6336973d50830962afb67b1e2bc6c836ffc42e723","observation_id":"1d4b439e-b777-4b40-8173-112fd3137d91","resolution":{"observed_at":"2026-05-14T00:28:30.114183Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The resource problem of using linear layer leakage attack in federated learning","venue":null,"work_id":"a9dae59d-e567-4172-8d75-2016b1c3562c","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:540bb5a086842e88075d8e2e94d92521097b2d17d2abcee8a1e7a8738ac4bef4","observation_id":"b2a2e21c-d935-4022-9ef8-3b57a90935fb","resolution":{"observed_at":"2026-05-14T00:28:30.898069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Loki: Large-scale data reconstruction attack against federated learning through model manipulation","venue":null,"work_id":"6c1a3a23-a4a0-4040-bc69-c1fad01094e9","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:50c544251f3014b3f81594f8724a2668d427ac95ea68b4ed77cb2c8aef9e3b6e","observation_id":"2bfbdfdb-3fdf-4b79-9870-3956f4a19992","resolution":{"observed_at":"2026-05-14T00:28:30.905358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Federated opti- mization in heterogeneous networks","venue":null,"work_id":"0a0f8f45-6030-41b6-bc99-8fedbe0bff94","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:eaad306f713e53f0e387d79b795f8b2d465815b006b1925b1dc1a424cc8caec2","observation_id":"67deb057-6817-4f94-a370-82bb9d0288fc","resolution":{"observed_at":"2026-05-14T00:28:30.924562Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How to backdoor federated learning","venue":null,"work_id":"7d76fdf8-fc73-41f4-84c9-86eee247655c","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:e479930a8fa230208140ad5ac944ef4de6958663fc0957d800576e5081230f7d","observation_id":"aea4b210-bc7f-43ce-ae6f-61e45537079c","resolution":{"observed_at":"2026-05-14T00:28:30.932694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Analyzing federated learning through an adversarial lens","venue":null,"work_id":"d4e370e1-4781-48f9-ab11-2de8f54716ed","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:37f28cdc51fdf5d0c700d3306a9eedf0f409154a63b4b6db84e633d769119db5","observation_id":"081048ff-c413-4953-8fe3-74e187f5c97c","resolution":{"observed_at":"2026-05-14T00:28:30.894472Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Attack of the tails: Yes, you really can backdoor federated learning","venue":null,"work_id":"a35bec0e-2549-4734-a8d7-81de46d5c241","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8973705cf203936e2d557d9a1be3ba0171d30dd245b8d61e92b9d973f22cc413","observation_id":"ebcd0ea0-cda3-4a0c-8050-8d1b8ed9964e","resolution":{"observed_at":"2026-05-14T00:28:30.886445Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Badnets: Identifying vulnerabilities in the machine learning model supply chain","venue":null,"work_id":"9ec77b11-1ddb-4561-91c4-3a195eccc41c","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a4109383ba6ded69e33101c9c0403ff6f1687e5cd33f24603cd1a917a0c504a9","observation_id":"3eeb1038-8ca5-4d3d-97f0-493989dada61","resolution":{"observed_at":"2026-05-14T00:28:30.890781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.05526","last_updated":"2017-12-15T04:26:26Z","snapshot_observed_at":"2026-07-06T06:14:30.795326Z","submitted_at":"2017-12-15T04:26:26Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","version":1},"cited_work":{"arxiv_id":"1712.05526","doi":"10.48550/arxiv.1712.05526","metadata_source":"pith","pith_arxiv_id":"1712.05526","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning","venue":"cs.CR","work_id":"bb1fb326-f0f6-4c72-a4d2-eb7f0707b971","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1712.05526","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:df74e9eb3d6ded70666f4736a4dbbe8f7d2ebc5f8e8f38891ac9267c37d113ce","observation_id":"d36fc115-86fc-4216-b2aa-d37ceb9ee808","resolution":{"observed_at":"2026-05-14T00:38:55.062440Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Trojaning attack on neural networks","venue":null,"work_id":"68070aa6-03dc-4763-bc99-d79b0f2d3ba7","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:8b5925443bc1088fa0ff8d64209026cfa4bd52e3ca9629a568a8c93e6ae1bf02","observation_id":"683a7912-a443-44cd-b088-12142551425c","resolution":{"observed_at":"2026-05-14T00:28:30.929136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"DBA: Distributed backdoor attacks against federated learning","venue":null,"work_id":"a2dc5b10-d7a2-4dce-b342-a375617bde83","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:bc9b95ce2f2c80cd9e96d55883806fc3fba100d7a439e23efd6b5b2842c35828","observation_id":"a9768e4a-ea32-4277-aa2a-354c0fcda4f8","resolution":{"observed_at":"2026-05-14T00:28:30.874600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Machine learning with adversaries: Byzantine-tolerant gradient descent","venue":null,"work_id":"1e8444ba-f399-4452-84a4-8284630667d5","year":2017},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:6403136f89dc0acdd34e15dc67010e6957bf45284fa1033f11385532e2bcfd87","observation_id":"f88f8bd4-ce56-4c76-9efa-bad66b655547","resolution":{"observed_at":"2026-05-14T00:28:30.851234Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Byzantine- robust distributed learning: Towards optimal statistical rates","venue":null,"work_id":"fb58c2d5-2562-46aa-b0c2-c0936a480fdb","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:044578fcf35fc04d4a5c44a48c0903a3cd4437534e701fbb8e3df5005d264041","observation_id":"6455a628-35d4-4114-871f-84816da11218","resolution":{"observed_at":"2026-05-14T00:28:30.878436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hidden trigger backdoor attacks","venue":null,"work_id":"69a27bd2-5c32-4749-ae44-411dbcb2ea9e","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:d638e4ead1d83a9c72221a446e94e0e73d935cc68877dd6684a16074a16c135b","observation_id":"e7ccd6c7-06ed-47c8-9680-1ee7c543dfc7","resolution":{"observed_at":"2026-05-14T00:28:30.836335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Back- door attacks against deep learning systems in the physical world","venue":null,"work_id":"2f32ebc6-b5d8-49a4-90e7-5ec6dc9a38d5","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:674cde1115ecbc3f1288f8413ed05f28423bb978f711fad1321b145c80fe35eb","observation_id":"73a6dc7f-1038-4e91-9437-11e535534d62","resolution":{"observed_at":"2026-05-14T00:28:30.825121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"How to backdoor diffu- sion models?","venue":null,"work_id":"0eb12188-2b92-44dd-97df-e92efb14ec2e","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:60096040c06efc3dd9d7d64d24aadc433c995474f3a89baab6ddb386aea85b25","observation_id":"8a0e8f75-af7b-48fa-8268-47451f8f011c","resolution":{"observed_at":"2026-05-14T00:28:30.828636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Just how toxic is data poisoning? a unified bench- mark for backdoor and data poisoning attacks","venue":null,"work_id":"1b322a3d-262e-4555-95d8-8ed3e814217c","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:a9ae18fcce7293cfa31c10593323f68e8d0d37d3f2f4ff0165f9b64f13b8c4fc","observation_id":"433190c1-956b-4574-bd7f-5e6029fe1322","resolution":{"observed_at":"2026-05-14T00:28:30.817652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoorbench: A comprehensive benchmark of back- door learning","venue":null,"work_id":"6cdadce6-2904-4786-ab46-59cc94177e73","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f2930c87598de0b3896ae167a16467e78c1f6264c545ea70672fb0382c8390aa","observation_id":"f9d6480a-7f99-4bcf-b94d-b4bd1396c21e","resolution":{"observed_at":"2026-05-14T00:28:30.821530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.02771","last_updated":"2019-12-06T23:16:45Z","snapshot_observed_at":"2026-08-04T11:47:47.518305Z","submitted_at":"2019-12-05T18:05:59Z","title":"Label-Consistent Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"1912.02771","doi":null,"metadata_source":"pith","pith_arxiv_id":"1912.02771","snapshot_observed_at":"2026-07-11T02:37:46.303787Z","title":"Label-Consistent Backdoor Attacks, December 2019","venue":"stat.ML","work_id":"6b7221ce-154c-4e93-bdc4-fd4f65672799","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1912.02771","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:4142b91780225a746afa37988a5da040d6e0150b9dca15b53506ff960c118952","observation_id":"ee4264ed-e04b-4241-b40f-26e3399898ad","resolution":{"observed_at":"2026-05-14T00:28:30.127480Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor learning: A survey","venue":null,"work_id":"7e2ab31f-3574-4839-b058-2ed73be3530d","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:06a526fd9565ae7be36986307d42824f8e37db55f420ff8d51d88ddae252f4ad","observation_id":"110d5a18-c0a1-4813-b006-5f588f374e06","resolution":{"observed_at":"2026-05-14T00:28:30.839913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reflection backdoor: A natural backdoor attack on deep neural networks","venue":null,"work_id":"bf2de28a-ba2c-4a42-959c-c340bd939bb4","year":2020},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:4822542abd1917942db0df5673b6cafafe90e0083ffe768004b0e81eeae76f78","observation_id":"aaa57585-477e-4ee7-a804-edb3dfc2e844","resolution":{"observed_at":"2026-05-14T00:28:30.813713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lira: Learnable, im- perceptible and robust backdoor attacks","venue":null,"work_id":"a18f9834-60f1-4aed-9751-805e1ab168fb","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:2d8b1b40d7fbcf91d35dc82b01e97d640645fff21f8197cc3b96bf56b83fe6cd","observation_id":"68fcf10b-cefb-4679-9712-480c50a42cf8","resolution":{"observed_at":"2026-05-14T00:28:30.843531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Invisible backdoor attacks on deep neural networks via steganography and poisoning","venue":null,"work_id":"6536115b-a408-4935-9330-ceb635fa64c5","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:3a70ef23e45cc76d0adc9381063c388aa22f9b935b5d9005a7872c37999d3751","observation_id":"0e15fe37-74ca-4b1a-bcfb-f3a33e6a8021","resolution":{"observed_at":"2026-05-14T00:28:30.832211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.07963","last_updated":"2019-12-02T19:00:11Z","snapshot_observed_at":"2026-08-06T20:09:23.048652Z","submitted_at":"2019-11-18T21:25:03Z","title":"Can You Really Backdoor Federated Learning?","version":2},"cited_work":{"arxiv_id":"1911.07963","doi":null,"metadata_source":"pith","pith_arxiv_id":"1911.07963","snapshot_observed_at":"2026-07-11T00:47:43.820961Z","title":"Can you really backdoor federated learning?","venue":"cs.LG","work_id":"e3828d1f-038f-4371-a8d9-73a2916ee4b5","year":2019},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1911.07963","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:19a71d0b78003495a5443a99ce799a0ca50de8108f653e5a54d4bdd19db35b20","observation_id":"56f4525e-cead-4cf7-902e-e5fac457a333","resolution":{"observed_at":"2026-05-14T00:28:30.102453Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2207.05286","last_updated":"2023-04-22T15:31:55Z","snapshot_observed_at":"2026-08-03T00:36:23.848594Z","submitted_at":"2022-07-12T03:42:05Z","title":"Know Your Space: Inlier and Outlier Construction for Calibrating Medical OOD Detectors","version":2},"cited_work":{"arxiv_id":"2207.05286","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2207.05286","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks and defenses in federated learning: Survey, challenges and future research directions","venue":null,"work_id":"bab55352-70d4-4350-b678-c51fe1d7a3e0","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/2207.05286","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:672369ec468392391ca42f22710a9b2d95e38338176a2928a7644bb9a37d12d9","observation_id":"43f70365-b310-40fe-a532-d50ecb287027","resolution":{"observed_at":"2026-05-14T00:28:30.138133Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The hidden vulnerability of distributed learning in byzantium","venue":null,"work_id":"121fa671-d956-401d-8b85-7efcdb284533","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:651bcac229e18e0b0093d06e0ab745e15b8c76932d53037573389ace67bb78ba","observation_id":"426f5c5a-d4bc-447c-a4f3-978316fba770","resolution":{"observed_at":"2026-05-14T00:28:30.806073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flame: Taming backdoors in federated learning","venue":null,"work_id":"b0ea1f4f-0be5-4015-9203-a22af44df344","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:c455f2f24f68e347c6bbe727652fe5645cfccb775fcbefaba70e3c9ba65ab5a2","observation_id":"86f7f1d4-37f7-4995-92f2-1b8f151a849b","resolution":{"observed_at":"2026-05-14T00:28:30.802100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flair: Defense against model poisoning attack in federated learning","venue":null,"work_id":"c257e521-662c-4fb8-a2ae-06d8cc1a1733","year":2023},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:bf9932e4228c1a34ee241b14ed0bd38ad964c213161ccb039c90b341244ba3d9","observation_id":"01ee5491-584f-41fc-b28d-2d3276252fc5","resolution":{"observed_at":"2026-05-14T00:28:30.863160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2012.13995","last_updated":"2022-04-12T01:56:47Z","snapshot_observed_at":"2026-07-06T10:28:06.533127Z","submitted_at":"2020-12-27T18:43:39Z","title":"FLTrust: Byzantine-robust Federated Learning via Trust Bootstrapping","version":3},"cited_work":{"arxiv_id":"2012.13995","doi":"10.48550/arxiv.2012.13995","metadata_source":"arxiv_reference","pith_arxiv_id":"2012.13995","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"arXiv preprint arXiv:2012.13995 , year=","venue":"arXiv (Cornell University)","work_id":"0364103d-9db6-4c1c-a200-06789828f79f","year":2012},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/2012.13995","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:18989c57d43579ed1b2c29bbe5d6b5b925dc686678558b2cf0580b979c476e84","observation_id":"3efdbad0-4901-45f2-a955-2fd743209ac9","resolution":{"observed_at":"2026-05-14T00:28:30.108404Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fedinv: Byzantine- robust federated learning by inversing local model updates","venue":null,"work_id":"13d833ec-b0e9-4640-b70a-c3a6a7bf2d0e","year":2022},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f736579b99a31ff74222b2c4dc3e5624514735f1528b925f92b866c20f054a5c","observation_id":"53a3821b-d806-415e-b469-6940298a1018","resolution":{"observed_at":"2026-05-14T00:28:30.867248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sear: Secure and efficient aggregation for byzantine-robust federated learning","venue":null,"work_id":"fcae5fb8-5080-4486-99bf-6f3673c4bc58","year":2021},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:9a6951b12bef8e03f910ce721f12abab9478ab258d37e4466053544918f52dd4","observation_id":"1e230d13-6e28-44b3-8696-23a3f1ffff6b","resolution":{"observed_at":"2026-05-14T00:28:30.847709Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Byzantine-robust decentralized federated learning","venue":null,"work_id":"8b098d08-9162-4cd9-9c01-2fb8aa91282b","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:34fa65dbcda8101f77a575afa59f5efd426fcd02d12ea9d839a4130d189e05a2","observation_id":"c152e7f4-b672-4ff4-9651-88f6b182ecc4","resolution":{"observed_at":"2026-05-14T00:28:30.797880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Filterfl: Knowledge filtering-based data-free backdoor defense for federated learning","venue":null,"work_id":"2a42a8cf-0c9d-49f4-b15b-e0d53c52b051","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f9a279f5195fd4803bb184c49caacdfc0f4ea3061f4487e609fb513c4b9caae4","observation_id":"6198d40c-c662-4d06-b7b9-397850fecd4a","resolution":{"observed_at":"2026-05-14T00:28:30.794016Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Guiding instruction-based image editing via multimodal large language models","venue":null,"work_id":"e79d4650-2bae-4a42-9ccc-8bab794e84b9","year":2024},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:bfd1d3c210e1d170072ac6e07748762b66035ac658ac1da7382c49bd9e26d3d8","observation_id":"f2617ed1-995f-4ea2-98ea-59a1ec99b12e","resolution":{"observed_at":"2026-05-14T00:28:30.870943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2509.13219","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On the out-of-distribution backdoor attack for federated learning","venue":null,"work_id":"0c03c6d2-2364-4f30-a482-6d3fc7eb5da6","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:f9b46261fcd6b6b1fce968e7840cf5dace395c7522ffc7c4dda351bfdecb6344","observation_id":"94d733f7-2d5f-4cf0-9d15-5dd6e13c691a","resolution":{"observed_at":"2026-05-14T00:28:30.090201Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A physical backdoor attack against practical federated learning","venue":null,"work_id":"a00ad680-f298-4048-ad38-72636959901d","year":2025},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:ea851a13b94aa4958365e8589187dadb21583c99d94e1d4f2d04e9a2f3246933","observation_id":"c3627de6-714b-48dd-9c46-d726735ad760","resolution":{"observed_at":"2026-05-14T00:28:30.790205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T12:17:04.525324Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"e36aa800-b42c-4273-94d4-d1cbbbbbef81","year":2016},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:9e70eb7a9e7d29216082c0a5637c4a25843105ba06bb9a878dcbc0308ebaab47","observation_id":"847248ef-723d-4159-abde-9d6d19d98996","resolution":{"observed_at":"2026-05-14T00:28:30.882487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":"1409.1556","doi":"10.48550/arxiv.1409.1556","metadata_source":"pith","pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","venue":"cs.CV","work_id":"1c4b4409-c14b-488b-a086-c57a5aab8a29","year":2014},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:4c27cf431490676d3313b8d6346fed07bcbecd34156f708d781cb1274ce3ebe5","observation_id":"ea61691e-c6e8-45fc-b606-1492c185665c","resolution":{"observed_at":"2026-05-14T00:28:30.132480Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-07-12T23:51:07.915518+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T23:51:07.915518+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep learning face attributes in the wild","venue":null,"work_id":"3a851295-4e24-46d9-9568-6ed32c462108","year":2015},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:53fb91dc5a5619f6dd4ca4329036a3a4f6108100718560cc452ebec17cd176a2","observation_id":"13fcee32-7ebe-4438-b6be-a8c03ec1a60e","resolution":{"observed_at":"2026-05-14T00:28:30.809926Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition","venue":null,"work_id":"0b4cb227-e88b-441b-93f6-47a48e61f021","year":2012},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:0607dca054f149502d17f155e6286597f6ba9e257edc8ad1796aaa7a2eba6973","observation_id":"cb1ccd3e-011a-4e17-9873-4d0f1e5346aa","resolution":{"observed_at":"2026-05-14T00:28:30.785752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03426","last_updated":"2020-09-18T01:56:41Z","snapshot_observed_at":"2026-08-02T15:32:07.466568Z","submitted_at":"2018-02-09T19:39:33Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","version":3},"cited_work":{"arxiv_id":"1802.03426","doi":"10.1037/adb0001138","metadata_source":"pith","pith_arxiv_id":"1802.03426","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"UMAP: Uniform Manifold Approximation and Projection for Dimension Reduction","venue":"stat.ML","work_id":"54c15172-6304-4008-a3b6-c4cc0803c054","year":2018},"citing_paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-14T00:24:22.292451Z"},"links":{"cited_paper":"/paper/1802.03426","citing_paper":"/paper/2603.29328"},"observation_digest":"sha256:18937ac110d2e947b291119980096e35a5e5794f2841347da434ae2146dff93e","observation_id":"3a919862-062a-4b48-aa91-1c7e02282044","resolution":{"observed_at":"2026-05-14T00:28:30.096008Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-06T06:34:29.942622+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T15:24:07.856203+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2603.29328","last_updated":"2026-04-07T04:38:05Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-03T15:47:55.167323Z","submitted_at":"2026-03-31T06:48:25Z","title":"Beyond Corner Patches: Semantics-Aware Backdoor Attack in Federated Learning"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":8,"verified_fuzzy":38},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-06T06:34:29.942622+00:00","source":"crossref"},{"observed_at":"2026-08-06T06:34:23.284952+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 1 inbound Pith citation observation for arXiv:2603.29328."}