{"as_of":"2026-08-16T17:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:115f67fcfb4b239d2bfd07ce17539058fb17e7d1a36b0bd845d2ce8a3033d483","coverage":[{"denominator":43,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":43,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T00:31:12.301022Z","state":"measured"},{"denominator":43,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":43,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.08100/citation-record","integrity":"/paper/2608.08100/integrity","json":"/paper/2608.08100/citation-record.json","paper":"/paper/2608.08100"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.254591Z","title":"PoisonedRAG: Knowledge Cor- ruption Attacks to Retrieval-Augmented Generation,","venue":null,"work_id":"93ff42c5-bfd9-46a8-b902-8394e0f35634","year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.097473Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:95017d003622e375d5443ac21054bb355b2f83109c0db654f1571c9deceb931d","observation_id":"d9f87155-605a-4a4e-8f91-f11e4a9b37d5","resolution":{"observed_at":"2026-08-12T00:31:13.259350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.239570Z","title":"Temporal Dynamics of Memory Poisoning in Web3-Style LLM Agents,","venue":null,"work_id":"cd763cd1-079a-46a6-98ad-c5f6361aabab","year":2026},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.103121Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:13cd645cc603704baf7722aef75872746637e7cce0fdca5feb3723b0aa8bd6fb","observation_id":"5a289b0a-04ae-4529-80e9-ac804b968193","resolution":{"observed_at":"2026-08-12T00:31:13.244285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.223912Z","title":"Not What You’ve Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injec- tion,","venue":null,"work_id":"ce98d87b-03e7-4999-afbb-3b6617a61910","year":2023},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.108287Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:b732bef809c28aaea287c3a6cd467d33415e263e775b9c36e2d294bdbc8378fb","observation_id":"561603f7-a009-4921-8046-9a3abd40da30","resolution":{"observed_at":"2026-08-12T00:31:13.229170Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.209191Z","title":"SafeRAG: Benchmarking Security in Retrieval- Augmented Generation of Large Language Models,","venue":null,"work_id":"90d7ff94-36eb-4839-b986-23a4f888824b","year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.113209Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:950708a5784497101d5a42c6ebaa5bde448f4e9ab9543f75046ed6e375885fe9","observation_id":"c7273308-16ed-4f82-b79e-48bf680f61df","resolution":{"observed_at":"2026-08-12T00:31:13.213985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.194433Z","title":"Outside the Closed World: On Using Machine Learning for Network Intrusion Detection,","venue":null,"work_id":"72fa3516-e7a0-47ad-8829-01515b28aabf","year":2010},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.118571Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:5ae82778d989fc2c0da1f27f6826df73c2f3dfae89e8580d348528f2cf15bbe4","observation_id":"b73f9c55-69f3-404b-a939-15df1af7edce","resolution":{"observed_at":"2026-08-12T00:31:13.199712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.179894Z","title":"The Base-Rate Fallacy and Its Implications for the Difficulty of Intrusion Detection,","venue":null,"work_id":"61000cf1-1c33-40df-aff7-d4bca9d8991d","year":2000},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.123542Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:fcd2493539553d5858a434fc47625f46e174716be333b5e315791c812df63952","observation_id":"cca24721-3864-411a-8314-ee4f19ee2b22","resolution":{"observed_at":"2026-08-12T00:31:13.184556Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.165208Z","title":"UNSW-NB15: A Comprehensive Data Set for Network Intrusion Detection Systems,","venue":null,"work_id":"925e9d4f-910d-4f1e-8fa1-2d09ebc498d5","year":2015},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.129119Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:504dc3625958483dd9e6b3ecd440d5c7b3cbe7df91a8add643fc63a41b230cd2","observation_id":"52be8446-2ee7-4867-a18e-ddb1825b6f21","resolution":{"observed_at":"2026-08-12T00:31:13.170082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.150118Z","title":"Poisoning and Evasion: Deep Learning-Based NIDS under Adversarial Attacks,","venue":null,"work_id":"23b62d21-1b5a-4e0b-9be2-89a7e30560c4","year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.134075Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:05f47a816c5f4c0022ff91618c1de5b51b416a5f4c9e8b4f5460335baa4cadfa","observation_id":"7e653bc4-b1b5-4b29-9a99-af385e6d08d3","resolution":{"observed_at":"2026-08-12T00:31:13.155096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.135488Z","title":"Retrieval-Augmented Generation for Knowledge- Intensive NLP Tasks,","venue":null,"work_id":"261e02c2-9303-49b5-ae65-5128abfaa3f3","year":2020},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.139224Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:5fded12dc8fe0c877a1d1af54c21736c0bb5807bbde4a6b6f5c7fa0a5a4d7458","observation_id":"5f237742-4fd8-4159-841a-8f6b88100e99","resolution":{"observed_at":"2026-08-12T00:31:13.140259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.120909Z","title":"RAGAS: Automated Evaluation of Retrieval Augmented Generation,","venue":null,"work_id":"fc11dd57-7ebf-42fb-b4a3-94b0e69c73ed","year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.144334Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:fe3ab13df17bc61a76cf75b81648eacc3326469f5cded8485b8441fc7deae38c","observation_id":"bb0e40b1-9d54-4e7d-a8a8-56c5aadf11a0","resolution":{"observed_at":"2026-08-12T00:31:13.126045Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.07597","last_updated":"2024-09-24T03:01:25Z","snapshot_observed_at":"2026-08-14T00:16:39.034955Z","submitted_at":"2023-09-14T10:57:50Z","title":"C-Pack: Packed Resources For General Chinese Embeddings","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.07597","snapshot_observed_at":"2026-08-12T00:31:12.149279Z","title":"BGE M3-Embedding: Multi-Lingual, Multi- Functionality, Multi-Granularity Text Embeddings,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.149279Z"},"links":{"cited_paper":"/paper/2309.07597","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:fb808b501feb312bd88a44c0759c97a29e3b08134e6a4a1f7794cbb04bbdb347","observation_id":"ac4b5711-b39b-4dea-b3bc-0e1ba64e23b0","resolution":{"observed_at":"2026-08-12T00:31:12.149279Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.106410Z","title":"The Probabilistic Relevance Framework: BM25 and Beyond,","venue":null,"work_id":"2c41d589-f681-48d4-9bbb-26c2bbbc43d6","year":2009},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.154615Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:9dd49441cb630c0bff2e61cca0e93e6e53544edc75afba89ca0adf0b0ba49002","observation_id":"11a0d23d-e37a-4681-8f28-ee0dc4d4b295","resolution":{"observed_at":"2026-08-12T00:31:13.111018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.091984Z","title":"Reciprocal Rank Fusion Outperforms Condorcet and Individual Rank Learning Methods,","venue":null,"work_id":"f608e606-2b6e-482d-8e4f-1233900a9ede","year":2009},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.159628Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:a4fe778af9051e6cac67e4ab4d21c1dbc5a33a3f35fc4e441ae03634d54f8658","observation_id":"05764f3d-66c4-4952-9341-195e06de55f5","resolution":{"observed_at":"2026-08-12T00:31:13.096700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.077199Z","title":"Random Forests,","venue":null,"work_id":"bf84606d-016c-404c-b1f0-c0d6e539ca06","year":2001},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.164222Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:fbc5534bd7d294b7feb66d750da6ad01c3714ebbac952f91a3d47f2e744c7ebf","observation_id":"9409e9d3-3259-4e1b-bc51-299fbc4f6cce","resolution":{"observed_at":"2026-08-12T00:31:13.082297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.062801Z","title":"XGBoost: A Scalable Tree Boosting System,","venue":null,"work_id":"33c59e1a-b412-49d2-9096-e7b6adb3b8f8","year":2016},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.168852Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:5e84c62822b8d603f140da28fbbb50a97887701741edb69a4ecfd0a1e4452e75","observation_id":"b5f1b1d6-e1bd-412a-bf2f-7bdc53f14bdf","resolution":{"observed_at":"2026-08-12T00:31:13.067570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.048464Z","title":"A Survey of Network-Based Intrusion Detection Data Sets,","venue":null,"work_id":"10410ef3-1508-4c49-9f7b-4074ee395327","year":2019},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.173054Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:a79830ad7050c7370feed220655cfa0ebf2aa148aa7c292cdc75e564463f384b","observation_id":"076c0105-16a0-4fea-9be4-fbb019bb89e4","resolution":{"observed_at":"2026-08-12T00:31:13.053240Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.033273Z","title":"Cy- berRAG: An Agentic RAG Cyber Attack Classification and Reporting Tool,","venue":null,"work_id":"8620969c-2f6a-4680-be97-f819552fa07b","year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.177147Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:8c8a3d46cdaf5492aa473c2e5cb7612ebafd6ee863a1e9a5f8b86c655c554822","observation_id":"8a7aa011-9f27-4fb9-9ad8-bbf344820433","resolution":{"observed_at":"2026-08-12T00:31:13.038318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2604.05458","last_updated":"2026-04-07T05:41:10Z","snapshot_observed_at":"2026-08-07T01:40:43.049269Z","submitted_at":"2026-04-07T05:41:10Z","title":"MA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2604.05458","snapshot_observed_at":"2026-08-12T00:31:12.181329Z","title":"MA-IDS: Multi-Agent RAG Framework for IoT Network Intrusion Detection with an Experience Library,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.181329Z"},"links":{"cited_paper":"/paper/2604.05458","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:90dc582f7b5eef0d56d995b81103729cc58bfa9d098b2417221736513404e28b","observation_id":"c8769d73-ef09-4c12-b4fd-3ccce4480f7e","resolution":{"observed_at":"2026-08-12T00:31:12.181329Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18684","last_updated":"2026-06-23T04:40:30Z","snapshot_observed_at":"2026-08-14T18:16:04.413210Z","submitted_at":"2025-08-26T05:08:53Z","title":"FALCON: Transforming Cyber Threat Intelligence into Deployable IDS Rules with Self-Reflection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2508.18684","snapshot_observed_at":"2026-08-12T00:31:12.186108Z","title":"FALCON: Autonomous Cyber Threat Intelligence Mining with LLMs for IDS Rule Generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.186108Z"},"links":{"cited_paper":"/paper/2508.18684","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:d7d0259cd376535d09d3307080c0765da5aa4ae2cd4f4a2cfdd5e24caac1a4bf","observation_id":"e197c7b7-70ff-429b-acd6-f795017b843a","resolution":{"observed_at":"2026-08-12T00:31:12.186108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.018052Z","title":"FlowTransformer: A Transformer Framework for Flow-Based Network Intrusion Detection Systems,","venue":null,"work_id":"b2e659f6-9655-4c1a-8ab3-e41a56b35346","year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.190636Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:5069eb11f36aaa93fb52d06a5337a99980aafd09e8fca57b1d27ba9af5a5681d","observation_id":"962c72b9-fb6e-4970-907c-99d332ae06d6","resolution":{"observed_at":"2026-08-12T00:31:13.023103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:13.001696Z","title":"Billion-Scale Similarity Search with GPUs,","venue":null,"work_id":"beab67bf-e8f7-447c-8601-7e55cafab2eb","year":2021},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.195134Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:3cef39908fcdaaf7e783e7873629cfad6dfb3d23eaaea2031cce2db27ff2558f","observation_id":"c94b06fd-b20a-4bf6-b0c4-3ae309e1ed46","resolution":{"observed_at":"2026-08-12T00:31:13.007490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.986218Z","title":"SMOTE: Synthetic Minority Over-sampling Technique,","venue":null,"work_id":"b1e7c021-46fb-403e-b094-79112b24a59c","year":2002},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.200140Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:a02ae2cdedb405105df156de7d349cf2f4dca7b8e919e3581fa1565c468a1bcc","observation_id":"c1d94f46-8613-4045-9723-3885c6784161","resolution":{"observed_at":"2026-08-12T00:31:12.991141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14197","last_updated":"2025-01-27T08:51:16Z","snapshot_observed_at":"2026-08-16T14:32:46.197562Z","submitted_at":"2023-12-21T01:08:39Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on Large Language Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14197","snapshot_observed_at":"2026-08-12T00:31:12.204782Z","title":"Benchmarking and Defending Against Indirect Prompt Injection Attacks on LLMs,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.204782Z"},"links":{"cited_paper":"/paper/2312.14197","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:667a1b9e25cb6efb728aa5bc4e14a9cfedd673dd17ea353f715a173545964cf7","observation_id":"e4dbfa03-50bc-46cc-8727-ca6b6d7243b0","resolution":{"observed_at":"2026-08-12T00:31:12.204782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.971050Z","title":"Basic Con- cepts and Taxonomy of Dependable and Secure Computing,","venue":null,"work_id":"5d85a6d0-24c1-4da3-b7fa-a92215241cef","year":2004},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.210069Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:672a6530e463895bc9bda4dc0e230dda8161fddf907f18dd7ce7b79bcd466a93","observation_id":"6073300e-9ef7-48e0-95cd-99ddb8e0f477","resolution":{"observed_at":"2026-08-12T00:31:12.976006Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.955494Z","title":"Security Evaluation of Pattern Classifiers under Attack,","venue":null,"work_id":"79b25000-aa55-4b1f-8299-ba8d7cf1cd7c","year":2014},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.214428Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:1ffa782358bfccd09960dc5187f99058fe0f9a9d71ea701e3cd985074a9fe0c9","observation_id":"2adfcbbb-2611-4ee3-84ad-9e711c8bf373","resolution":{"observed_at":"2026-08-12T00:31:12.960727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.939573Z","title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning,","venue":null,"work_id":"f2f55081-90b7-4ebe-b924-692319229839","year":2018},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.219011Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:b0bb3c772fc97152d8387537736bf901fae035ba26819fafb166e035326d7e4b","observation_id":"02f17696-ed1e-4511-82f2-0f1b4280aa15","resolution":{"observed_at":"2026-08-12T00:31:12.944754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.923809Z","title":"Dense Passage Retrieval for Open-Domain Ques- tion Answering,","venue":null,"work_id":"e5f0fd64-a98b-4565-b931-2c3d75742a30","year":2020},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.223649Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:48dbeffdd0db296eee4a4898dfdcac18c8dc8c2b90bc2d434edc16ab97eec903","observation_id":"d10bb2a6-df30-445c-a118-37436469834f","resolution":{"observed_at":"2026-08-12T00:31:12.928443Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.10997","last_updated":"2024-03-27T09:16:57Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-12-18T07:47:33Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.10997","snapshot_observed_at":"2026-08-12T00:31:12.228187Z","title":"Retrieval-Augmented Generation for Large Language Models: A Survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.228187Z"},"links":{"cited_paper":"/paper/2312.10997","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:de32c662b6628d9a37d512de39ef7953c9309f6527626a9b71c225c7981803aa","observation_id":"3805553e-b315-4433-9892-a5aabd11d051","resolution":{"observed_at":"2026-08-12T00:31:12.228187Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.907700Z","title":"Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations,","venue":null,"work_id":"5fbf4ac1-bfae-40be-a6c4-91302b48a47d","year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.234019Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:4b2a77f3baa419da1903d123613bf309c73538b9625cd80470a5b8b6f498a3a7","observation_id":"3193cebe-57b4-44f0-9a87-16bb569380dd","resolution":{"observed_at":"2026-08-12T00:31:12.913023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.891354Z","title":"Kitsune: An Ensemble of Autoencoders for Online Network Intrusion Detection,","venue":null,"work_id":"50de67cc-791f-4158-a939-96d2b542772d","year":2018},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.238968Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:f151123a27898e1df54765a727c853a53f1dcd7ae0f92edf93eebc674b7fdc13","observation_id":"0d8821d1-c191-44fa-955e-f9a06a7602c9","resolution":{"observed_at":"2026-08-12T00:31:12.896184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.875855Z","title":"On the Effectiveness of Machine and Deep Learning for Cyber Secu- rity,","venue":null,"work_id":"bf3f067a-e79d-4e6d-96fa-52bd332c14b4","year":2018},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.244159Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:aa4e28f96fbaf184cb5105ba6a82dd838b35507cd2d1b59039634b7c5436778f","observation_id":"d766553c-6d5d-42cd-a901-7cb5578c4a13","resolution":{"observed_at":"2026-08-12T00:31:12.880861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.859981Z","title":"Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characteriza- tion,","venue":null,"work_id":"834bca49-bb09-4a4e-a5f5-98a2006b6d98","year":2018},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.248982Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:a1d0d3cf5ba91f97dd716bc39f2bdc9e5d661a1cd94ec1bb2c4b3810b5aa3b95","observation_id":"59bd10ca-a856-4463-80d2-2ff910165dad","resolution":{"observed_at":"2026-08-12T00:31:12.864964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.842752Z","title":"The Evaluation of Network Anomaly Detec- tion Systems: Statistical Analysis of the UNSW-NB15 Data Set,","venue":null,"work_id":"c7e9e16f-d731-45d0-bdca-09d22b621b91","year":2016},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.253686Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:1a6a8c6e415a8e864072fc717274b369fcac1bf98e17e373ed96a2241f1ba7e3","observation_id":"993d9eee-5f9a-4be0-ad7a-e240d406ba78","resolution":{"observed_at":"2026-08-12T00:31:12.848844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.258416Z","title":"Phantom: General Trigger Attacks on Retrieval Augmented Language Generation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.258416Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:5d28b6c28edc33ed541f5999072dc963d94d4d512dd6d4611e6ad9dfb07282eb","observation_id":"95ac9cca-b663-4072-89a1-72c76f51a39f","resolution":{"observed_at":"2026-08-12T00:31:12.258416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.263349Z","title":"Practical Poisoning Attacks against Retrieval- Augmented Generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.263349Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:b93d5295b01c81a005e29e7cfba527d8317c5c60d2adf7183df5bf668f14f8c6","observation_id":"272564cc-6dee-4971-b26c-ba64eeebd544","resolution":{"observed_at":"2026-08-12T00:31:12.263349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.268147Z","title":"Defending Against Knowledge Poisoning Attacks During Retrieval-Augmented Generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.268147Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:ba82a22bbd77e7e66cb177bd04b53bcdb43375f75ed63c686cfd551d2e37175b","observation_id":"493cb7af-da58-49ae-b1ef-462bc84e77d7","resolution":{"observed_at":"2026-08-12T00:31:12.268147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.825654Z","title":"A Detailed Analysis of the KDD CUP 99 Data Set,","venue":null,"work_id":"2b3a6712-3936-48d3-bf9e-33124b295b2e","year":2009},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.273212Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:e4ee5f5aa1fc4d94b9d6ffd6a5904f4c9062d3665bfe666d28f00e17f0e5fbb1","observation_id":"89ab000e-6796-42c2-8a62-71f4e4cc5586","resolution":{"observed_at":"2026-08-12T00:31:12.830894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.277789Z","title":"Long Short-Term Memory,","venue":null,"work_id":null,"year":1997},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.277789Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:b46dc5e225adbd37cabde7be83383fbe72543675a14a07bc4959a80ae1343ef8","observation_id":"c8b67d59-6e17-4a83-9ea4-5546578c94ac","resolution":{"observed_at":"2026-08-12T00:31:12.277789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.796370Z","title":"Intrusion Detection System: A Comprehensive Review,","venue":null,"work_id":"ed2acbb7-2787-4c20-b190-c0e1401c8898","year":2013},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.282356Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:9411dd2183dc6a99edc314aa85e3d32f7fe0fce9fc746fd50b7f61509cb99bd7","observation_id":"c9504cd2-7b1a-413b-885a-e31c21afab06","resolution":{"observed_at":"2026-08-12T00:31:12.801239Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.780764Z","title":"A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection,","venue":null,"work_id":"5b841386-fefe-4bc8-b6d5-eb385dbacef8","year":2016},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.286992Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:7fed4be6c588ac3c6dd3ad3d5162bad3c31fbd596ad4c2c819b5db15b212b1e0","observation_id":"285bc6a6-34ed-4d32-9aea-79c230a2b942","resolution":{"observed_at":"2026-08-12T00:31:12.785595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.765047Z","title":"A Survey on Hallucination in Large Language Models: Principles, Taxonomy, Challenges, and Open Questions,","venue":null,"work_id":"b9c63015-6a5f-4797-b831-25817615ce90","year":2024},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.291663Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:20c890653f483f4676584a5f6919b4e2d76b951bd19a12ce8097ad2a1b65f94c","observation_id":"e411a902-c511-4677-9922-70a89cbf5c26","resolution":{"observed_at":"2026-08-12T00:31:12.770005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T00:31:12.746802Z","title":"Traceback of Poisoning Attacks to Retrieval- Augmented Generation,","venue":null,"work_id":"9350ce77-631f-4ca4-92ab-77c9a118ab6b","year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.296399Z"},"links":{"citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:802d7c7a1c237ac20f33690781a35c2d5e63c3645fe985874e9f00c10af8f7a5","observation_id":"a4bade74-f5a5-487a-9c84-5cad1712eaa6","resolution":{"observed_at":"2026-08-12T00:31:12.754204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2505.19864","last_updated":"2025-05-26T11:48:32Z","snapshot_observed_at":"2026-08-12T16:47:40.444867Z","submitted_at":"2025-05-26T11:48:32Z","title":"CPA-RAG:Covert Poisoning Attacks on Retrieval-Augmented Generation in Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.19864","snapshot_observed_at":"2026-08-12T00:31:12.301022Z","title":"CPA-RAG: Covert Poisoning Attacks on Retrieval- Augmented Generation in Large Language Models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T00:31:12.301022Z"},"links":{"cited_paper":"/paper/2505.19864","citing_paper":"/paper/2608.08100"},"observation_digest":"sha256:b9a00d0e0aad8ddeaff46a1b04903d39c6799c3e364926a21c807b246e5e3734","observation_id":"fef6f70f-e3ab-4355-b74e-1b7df5ac0591","resolution":{"observed_at":"2026-08-12T00:31:12.301022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.08100","last_updated":"2026-08-08T12:29:47Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T16:47:51.217320Z","submitted_at":"2026-08-08T12:29:47Z","title":"Defending Retrieval-Augmented Intrusion Detection Against Knowledge Poisoning and Prompt Injection"},"reference_resolution":{"displayed":43,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":0,"verified_fuzzy":33},"total_outbound_references":43},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 43 of 43 outbound references and 0 inbound Pith citation observations for arXiv:2608.08100."}