{"as_of":"2026-08-16T08:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5b63a692d7acff80078e589b65c395c52bb65fa755a51257e7f35ebdc0344b9f","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-28T06:29:34.540587Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2606.04317/citation-record","integrity":"/paper/2606.04317/integrity","json":"/paper/2606.04317/citation-record.json","paper":"/paper/2606.04317"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:1c89fddd8171c6ba420dd75d8b4843b395d4142a5289d9c30410edd50feb3a35","observation_id":"1d161c61-8a1f-499e-9ffe-e59749e9fb96","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Learning deep structured semantic models for web search using clickthrough data,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:bf450aff477c2d0e9065d26677404da171c2b7e498b51d2b6890faf702b41aeb","observation_id":"a04340f9-0822-483d-9a48-113d4551cdfd","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Wide & deep learning for recommender systems,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:44a18521803fd9da3d6e565ead3a4d3774a1509c99c781b419b5f404bf7e4429","observation_id":"562acf56-727d-480f-afe2-10d4363128d9","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Deep neural networks for youtube recommendations,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:f79a587428d63cc9ebc1bc6d60c7d63ec985d5489e27e9e24a0774b38ea2c4f5","observation_id":"1e9cff5d-c348-4355-aa4a-03734af1fb14","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Clipper: A low- latency online prediction serving system,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:f49286b9f555224315f9fee14a78dfe7beaff088b527393bde962acc25a12665","observation_id":"b38ab979-c599-472a-b2e9-f690db1c1ecb","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Model inversion attacks via prediction error reduction,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:9b7dc8d2f02b79fd4a8d93455adc8b3ac6980c3c19f5e988c685757ff8166827","observation_id":"cc3dc184-01b5-4fc5-bf4a-e84f9e06e506","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Trusted deep neural execution—a survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:b5b877aca8afca6f681c954cb5e7f6b2e4b18f5839de9ff46033b9c61ddd7ec2","observation_id":"bce403ce-fb80-46a1-bdf3-4e8824ad95ea","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Supply-chain attacks in machine learning pipelines: A survey of threats and mitigations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:dde216e7d08a48c2923a575ca810ec1a1a4a72fd54a901e7640f6d5403102a3b","observation_id":"25e7fdb1-216b-4f27-9bb6-80a0a8a8a162","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Weight poisoning attacks on pre- trained models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:d425ff0daa111b33b3d8dea737fe077629ced5e67b19bebba4152713afaabef9","observation_id":"34abac19-05d4-4504-b727-60419da3e4b2","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.09523","last_updated":"2024-11-14T15:40:04Z","snapshot_observed_at":"2026-08-14T07:59:07.134456Z","submitted_at":"2024-11-14T15:40:04Z","title":"Navigating the Risks: A Survey of Security, Privacy, and Ethics Threats in LLM-Based Agents","version":1},"cited_work":{"arxiv_id":"2411.09523","doi":"10.48550/arxiv.2411.09523","metadata_source":"arxiv_reference","pith_arxiv_id":"2411.09523","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Navigating the risks: A survey of security, privacy, and ethics threats in llm-based agents","venue":"arXiv (Cornell University)","work_id":"25f787e9-0cb0-484e-b623-05046c78f166","year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"cited_paper":"/paper/2411.09523","citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:759b9a5a4ee9a42a1d420f7b57ad283fe93bc0c9bea849a82124925a946de1d0","observation_id":"2c1ec01c-ded8-4d69-91cc-98bdb22417cf","resolution":{"observed_at":"2026-07-02T07:56:47.706814Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Pickle’s hidden perils: A systematic study of insecure model serialization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:433a78005ab47e236bd8d82ceabab0dbc55dd24fbfcfe778c412080e72bdcec7","observation_id":"53cfab94-db6c-4c3e-88e6-e5cc80942c97","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Morello: Security analysis of ml model registries and pipelines,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:c6d91d1790cc8f237b05f90cffd55a127f6d2c2044736388df52810d2b983914","observation_id":"d693baa7-46ed-4d0e-92fc-ebead99a7a33","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2405.09786","last_updated":"2024-06-02T15:06:02Z","snapshot_observed_at":"2026-08-13T00:06:10.070301Z","submitted_at":"2024-05-16T03:19:52Z","title":"IBD-PSC: Input-level Backdoor Detection via Parameter-oriented Scaling Consistency","version":3},"cited_work":{"arxiv_id":"2405.09786","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.09786","snapshot_observed_at":"2026-07-02T07:56:47.700798Z","title":"Ibd-psc: Input-level backdoor detection via parameter-oriented scaling consis- tency,","venue":null,"work_id":"bc554c8c-8d51-4d5b-a239-84e0ff7f36d2","year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"cited_paper":"/paper/2405.09786","citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:e16e8de6aeb28d1d0cd4afa246f35f15073478b31d8b0c23c814435c64fb2ef7","observation_id":"eae3d96d-8c96-4012-a61d-092a8f6af3a9","resolution":{"observed_at":"2026-07-02T07:56:47.702252Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Bit-flip attack: Crushing neural network with progressive bit search,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:68d78582bd5916fa70c87dfde9994562fc78b6d86031537f5393b57c34342d54","observation_id":"3596b189-161f-4f9c-84b1-1a000d096577","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Fault sneaking attack: A stealthy framework for misleading deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:e5ef912db1a8e88aca0b1ce19594a35ef94d9dee7b233e32e60443b7fcb7a41f","observation_id":"0a7cf3bc-1b47-458d-a8cc-f14e09b46e9d","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Verification of bit-flip attacks against quantized neural networks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:578013615689584e7bb5f42d777b831a6b2a7a11a18f69fab5e9dc08bc5b130c","observation_id":"87245735-47d0-4b73-af0c-0d5b8322ba25","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Deep- hammer: Depleting the intelligence of deep neural networks through targeted chain of bit flips,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:cabbb37df3ea851112b252896660b008b3c15e890d12b41953e90938bb37a70e","observation_id":"75efa3ef-3d66-43dd-8aea-77e5715c7d50","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Flip it once: Bfa attacks with single weight perturbation,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:1320d9a5c4c8db4be5797d193cb23a90c592af8499589af5400fec2d6c365535","observation_id":"1eebeda7-4a5c-4ee9-b885-99b8626bc92c","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"3sat: A simple self-supervised adversarial training framework,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:6e0a6d42b777f4d72ae58e6fd121e94429eb0a664bc4732c966b789f206bd1f1","observation_id":"6719f0f7-498e-4cfc-b9a4-448a061e0055","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Towards security threats of deep learning systems: A survey,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:772756da93bd808877335b0d016a9b0bba290fded260c4fe775f31c49893be02","observation_id":"97710faa-ae87-4cfa-946c-0abf0026db35","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Rise of inspectron: Automated black-box auditing of cross-platform electron apps,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:8c2e929b80af3e60958f1ff1105cbfcf0004e28379713a4a0cf1800c892320f0","observation_id":"0718d9e5-16e5-48cb-b275-0b1f85590958","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Defending against web application attacks: Approaches, challenges and implications,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:168279240378233f3e979d5c4a59dfb8f548ed8615874be2619873b0a31c526a","observation_id":"8b997596-96e4-44c8-ba0e-92d5029dc65c","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Bit-flip attack: Crushing neural network with progressive bit search,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:f533f0e0f37bd5d32722e761a718bd5b0663f6d9dc43b3fd7cbce1c4728be433","observation_id":"ccc61352-1f3e-4dfe-80f3-d8da56b965ae","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Defending and harnessing the bit-flip based adversarial weight attack,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:2be29d4987df65e92420f66b25606f40492cbeb11e05ae15ea9d95c8a6b4df80","observation_id":"3917478c-a2b9-4448-a644-e55ec6fb1429","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Aegis: Mitigating targeted bit-flip attacks against deep neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:4c6547d163883708dd03fde54ce88e251e5e6c74045193b0cc4b9152e4b90fe0","observation_id":"5e33af48-eb9d-427c-a658-211235dadbeb","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Efficient encoding of quasi-cyclic low-density parity-check codes,","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:a99b29c076c56bdb63a66ff0653af96aa1d862668952b2c39683885396699b3b","observation_id":"5a799168-4fa7-43d9-99d9-3abc68bcb5f4","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:e328221edffe3e18540c678a30ff46482428be13efcc2f4325acf765a9ae8e4f","observation_id":"17096136-1588-4b68-b561-1ed3b67b749b","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:5d67cc4cc0c3acd3d6ec9ed359d34aa14ed75806e32523dbc48dbb4613bb8eb2","observation_id":"1d20faf9-1170-434c-a051-e26e7e290e88","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"(2026) https://github.com/beanduan22/pardef","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:5b70d91a715aa94ad09cb305929fd1d6026a0846c84211c173dbdb0250e1673d","observation_id":"1b624299-9699-44c4-bdee-f9387cba7829","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Malicious ai models undermine software supply-chain security,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:8c8709c143138663ac183e2cf6b7411af0e318691a5dfb298d8db0322ce16407","observation_id":"e549feb4-94ce-4864-9bcb-f815b4dbb341","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Threat modeling ai/ml with the attack tree,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:efe8e56c7fc80ae376501c82501c6042a0d2ff1d2e7b6b0ce273d3cd19c48348","observation_id":"d12e7956-4721-42fc-a440-b6652ea00661","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"A com- prehensive survey on non-invasive fault injection attacks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:dbd8b676f31d8382c33ef0688cec4703ccc92cc66471d01dc1b33ba48cfb620f","observation_id":"de01a606-7334-425f-81bc-cdc692f881c1","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Proflip: Targeted bit-flip attack with probabilistic search,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:2d804a624aa614da514c26973598c8c4a4156e033980475a5ca42e7392a2deb3","observation_id":"1ab0c1cd-b9c8-4ac7-bef0-d6294cc1adcc","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Fault injection attack on deep neural network,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:9bf42cf49f43c2e2a0751898946aef6d9f0dee00b1f8edfc6f240a90a5ee7a5f","observation_id":"5eee07bf-5872-4704-903d-6c06b3525a88","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Terminal: Terminating bit-flip attack via end-to-end bit corruption detection,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:f49b43f6c667da930b2aff7beb67ca3cc56a5c64d04c2d38009cb677acf9f983","observation_id":"5331468c-aca7-4d40-9928-84d3885fd5dd","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Bitshield: Defending against bit-flip attacks on dnn executables,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:0bd4afd78f01994285a054b8840059ea28aa1d06494eb53476ba08fddc85c7cb","observation_id":"8804b3b3-ec01-40b0-b652-e21c64f1a698","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Slalom: Fast, verifiable and private execution of neural networks in trusted hardware,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:a0c468ce5d821500267cf1405908594527649c2959a303f86f6027e19f9e5075","observation_id":"a83e2c87-32d1-48ae-a4af-ce78fd3341e0","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"DarkneTZ: Towards model privacy at the edge using trusted execution environments,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:96cb430d93ce53081c66aeea2db47a18425279d6170ea744be22fe1e3ed2b5ac","observation_id":"f5f20cb1-aacd-47eb-877b-3121137b60d8","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Intel® software guard extensions (intel® sgx) support for dynamic memory management inside an enclave,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:c070186f80ca5deefa45de5530e1e0398678a0c2affbbc784ec8b62e8dde7c2b","observation_id":"91a2770f-9da1-4ed0-82f6-9c2d9aac3139","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Sok: Understanding the prevailing security vulnerabilities in trustzone-assisted tee systems,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:6a4cfebb79870ceb64a0b0db750301278606b3d9ab55d035ef5bd9ba908d3a45","observation_id":"c4722795-d981-4a7a-94f7-cdb005f78536","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Privacy risk in machine learning: Analyzing the connection to overfitting,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:ccf2718dfa32ccb24f04db31e8a9213674988de6651affd342ffe440570c0b8e","observation_id":"3b6e376a-9b29-48f7-91bf-114d9ab93fb1","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Toward confidential cloud computing,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:0a275b492d62f6740106f9ede2e0627d2ad1aef894981a1140d5661ea95a4fc4","observation_id":"2a104c1d-0994-4111-a97e-c6c3adbd691b","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2107.04252","last_updated":"2024-03-02T22:21:06Z","snapshot_observed_at":"2026-08-10T13:36:31.033117Z","submitted_at":"2021-07-09T06:52:44Z","title":"A Tight Max-Flow Min-Cut Duality Theorem for Non-Linear Multicommodity Flows","version":2},"cited_work":{"arxiv_id":"2107.04252","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2107.04252","snapshot_observed_at":"2026-07-02T07:56:47.702387Z","title":"Cryptanalytic extraction of neural network models,","venue":null,"work_id":"22f94d2b-7ea6-42e0-a97a-64171b32b53f","year":2021},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"cited_paper":"/paper/2107.04252","citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:0a40d1134e7c767996807757c3fea44bedb90ed1dbfaa953c0309ab9483f83ff","observation_id":"a246183e-7b65-4357-97e9-37c44bb8098f","resolution":{"observed_at":"2026-07-02T07:56:47.703807Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Polynomial time cryptanalytic extraction of neural network models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:87078906ce1360de5feb8a38b20f82095a7ca7d189c02df026268125b3c69dbe","observation_id":"317e13bd-0ba2-4a88-837a-b06a6f1b0e73","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"A review on machine learning for channel coding,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:4eeb7410d30955f892f57b13d0ecbd6e74f650b3234cf38e98f6fb889c123af3","observation_id":"56f8524c-9544-4cd9-a178-fbf76d5f2c18","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Memory system optimization for fpga-based implementation of quasi-cyclic ldpc codes decoders,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:670488882a600fb0993e6e8bf8ca7ae17e85ed27c9d01168bffc80b3b14cebfe","observation_id":"0dd19573-0e51-4632-a73d-cdabc7182270","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Training data-efficient image transformers & distillation through attention,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:3c9069d30dbc6dd620fc5d67e3fcfd3d9b77fa16222be7b433798504fedca039","observation_id":"2d624c86-4e93-4efa-bc3b-8d3fb4c5c3a4","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Advanced Encryption Standard (AES) Key Wrap Algorithm,","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:4303a5415dd5f769f2ef235971e2aef3810c272e8601a0dbdc13591d298b37d9","observation_id":"2b8a7139-6d15-4191-9960-308a5529f427","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"A secure and reliable bootstrap architecture,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:7085909a532227f0b76a311d5f0dd4b242accf6aa4658deb66d4fca4a058b41a","observation_id":"634a41d9-baf4-40ae-8d01-f6a3a158f202","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2204.06790","last_updated":"2022-04-16T01:40:29Z","snapshot_observed_at":"2026-08-14T12:57:16.368331Z","submitted_at":"2022-04-14T07:04:31Z","title":"An Exploratory Study of Attestation Mechanisms for Trusted Execution Environments","version":2},"cited_work":{"arxiv_id":"2204.06790","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2204.06790","snapshot_observed_at":"2026-07-02T07:56:47.698441Z","title":"An exploratory study of attestation mechanisms for trusted execution en- vironments,","venue":null,"work_id":"a115f9ad-7824-4917-aa54-9aaa94c5d07e","year":2022},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"cited_paper":"/paper/2204.06790","citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:b4496e7b02e606d11d936b2939ee14c83cfe329a04f258f487bc2b8178a4fb3c","observation_id":"fa9261e9-f65b-4a16-a98b-0ed8221d6347","resolution":{"observed_at":"2026-07-02T07:56:47.699814Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-06-28T06:29:34.540587Z","title":"Intel trust domain extensions (TDX) architec- ture specification,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-06-28T06:29:34.540587Z"},"links":{"citing_paper":"/paper/2606.04317"},"observation_digest":"sha256:7a421fea0ff527bdc638892e10f32aff516923959fa63e80e4ba8c663f90d000","observation_id":"fa60c19e-6617-471a-9ef1-4f7da3c08bc5","resolution":{"observed_at":"2026-06-28T06:29:34.540587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2606.04317","last_updated":"2026-06-03T00:47:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T22:36:48.984470Z","submitted_at":"2026-06-03T00:47:11Z","title":"Toward a Generalized Defense Across Sparse, Continuous, and Structured Parameter Attacks"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":4,"verified_fuzzy":0},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2606.04317."}