Pith. sign in

Paper Citation Record · LEDGER

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs

As of 12 August 2026, this Paper Citation Record lists 53 of 53 outbound references and 0 inbound Pith citation observations for arXiv:2608.10959.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.10959 v1

Coverage vector

measured 53 of 53 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T13:30:42.658810Z

measured 53 of 53 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-12T06:34:41.77262+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

53 of 53 outbound references displayed

  • verified exact0
  • verified fuzzy16
  • unresolved37
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 554b489c-ae18-48d1-85e7-d5e0b011d2e7 · outbound

This paper cites International conference on machine learning , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs International conference on machine learning , pages=

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.419777Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.419777Z digest=sha256:7b9796dcb0166ad349fe41c9941911e2f927915fd7e9ad08f34517cf854af3ff

Observation 7053a043-4d10-4572-a344-63d7a0e92ce1 · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.426967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.426967Z digest=sha256:698cc66880a0227db69a5b4e9ccb695dbf582ad4841cf448eb9c1c92b3c9f4d4

Observation 93ccb3ba-2175-410f-8890-6e75889f0062 · outbound

This paper cites 2023 , howpublished =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2023 , howpublished =

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.501235Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.431472Z digest=sha256:8794b1dc143079f5aee58334eacb49d9b7cca4f3f40561ea26b6dc8f5c1799f0

Observation 3f44c86d-d7b5-457a-af16-f7f7a3e76db3 · outbound

This paper cites International conference on machine learning , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs International conference on machine learning , pages=

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.435807Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.435807Z digest=sha256:3a5a3ce7c090bd386064e9680d3b886557d5ca182c65e76040fa5d19dfa40a8b

Observation fc52403d-8bb5-4d5d-b476-adad42db2ec1 · outbound

This paper cites International conference on machine learning , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs International conference on machine learning , pages=

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.440247Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.440247Z digest=sha256:68728669048b167455ae06923ec40ecc5697e3f63d112cb7d0dd6e96248056b7

Observation b1f69bb6-59a5-4782-96b9-5c2848e5d3d1 · outbound

This paper cites MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.445128Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.445128Z digest=sha256:887af1ba221dedd7404d2c3bbfd1f9d91dd03ff3988f84e8233c608b0eedbb17

Observation 6cf7906e-8736-4956-b579-4757c6d84432 · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.449431Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.449431Z digest=sha256:ab2c6ec69ab90050c78d20107c0eb0b68974e2a781a5202e735a6018e2817c2b

Observation bc8fdbfb-c157-4ec9-9443-e0f8e0485df9 · outbound

This paper cites BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.453459Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.453459Z digest=sha256:d47c02252f3b97de12a9b0b7428c204173f450cb998822d13cc2066110b01f4d

Observation ebd253f1-f093-4cd3-b34a-89b5ff6bd20d · outbound

This paper cites 25th Annual Network And Distributed System Security Symposium (NDSS 2018) , year=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 25th Annual Network And Distributed System Security Symposium (NDSS 2018) , year=

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.459230Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.458663Z digest=sha256:6ca575b3d147d7198cb86e55ef792c03b105644e58c1ab24956074d9b8d196d4

Observation 02b10a5c-b324-490f-ae48-037285668399 · outbound

This paper cites Label-Consistent Backdoor Attacks.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Label-Consistent Backdoor Attacks

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.462917Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.462917Z digest=sha256:bbfd737f7d30f8a520b659ab6b2bee9c37c51c8f5b7c2d173cdd8da9af5cc425

Observation 547672c3-03f6-4a58-8c7a-73347b5454a5 · outbound

This paper cites Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security , pages=

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.444838Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.467973Z digest=sha256:f86c3dceb92481e66caf0c9b9b0ca0f865a50fe01649b35a18e5b823499031c4

Observation d7ae921c-8b1e-4196-a084-b17168b37075 · outbound

This paper cites Proceedings of the 37th Annual Computer Security Applications Conference , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the 37th Annual Computer Security Applications Conference , pages=

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.430384Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.471940Z digest=sha256:2a1fc47855cb11aba6823ff9e1eee2b5bded01ece9a7b6523e544c95f751e9f7

Observation 299ca60b-e8a7-4607-a504-2ba657fcb376 · outbound

This paper cites Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Hidden Killer: Invisible Textual Backdoor Attacks with Syntactic Trigger

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.476776Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.476776Z digest=sha256:dc1370a1eb1be63a39e1c98fc12f2fc96499d9209f42f8e9a2dad98e3daacea4

Observation 704da8ed-8af0-444b-a794-7b4473450774 · outbound

This paper cites Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Turn the Combination Lock: Learnable Textual Backdoor Attacks via Word Substitution

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.482375Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.482375Z digest=sha256:1d83731356518e9fa0651ce761c94760f29214c914f4b5a338dde04c29d25910

Observation 68ded116-27da-43c4-a963-c1dc25b342f7 · outbound

This paper cites IEEE Access , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs IEEE Access , volume=

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.415539Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.487222Z digest=sha256:06cc57f1e39c126740c46aa8321811d94f9c1cbf3b86cdf813dadd67a2f9ac2e

Observation 324afe12-d240-4812-bb28-f04be4509168 · outbound

This paper cites Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition , pages=

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.399843Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.491978Z digest=sha256:3172fdf057b6664defae8a3d0a6e63ccefede4f9d26089479dcea30c7dc322d6

Observation 79985251-2d9f-40e7-9103-fac6e8894327 · outbound

This paper cites European Conference on Computer Vision , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs European Conference on Computer Vision , pages=

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.496855Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.496855Z digest=sha256:be07139403660e83ec3019b6715bfbce7a437ebd0a4baa4d166eb65ccae7c4aa

Observation c205018d-df97-49fb-9706-a1443441a4d1 · outbound

This paper cites International Journal of Computer Vision , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs International Journal of Computer Vision , pages=

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.502051Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.502051Z digest=sha256:79cf8c39a7bf1f72d38d0b3ff5392184e101f23a594b94db28327f03dc913df7

Observation 902ccc4e-1efb-4677-894f-7397c227a1b2 · outbound

This paper cites Advances in Neural Information Processing Systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in Neural Information Processing Systems , volume=

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.506548Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.506548Z digest=sha256:07cc800b9b90458b72bc81cd7752bf3c941866cee52422d2422d9aa281bff796

Observation 1241b8b2-94f3-423f-a3d2-4ff4941cc377 · outbound

This paper cites Proceedings of the Computer Vision and Pattern Recognition Conference , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the Computer Vision and Pattern Recognition Conference , pages=

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.510991Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.510991Z digest=sha256:ca9bce58b541a820678e71a2fb882f805eb7d9d540a53181742ebdcc8516b188

Observation 81b8753d-9c0c-484e-8178-306721bf63b6 · outbound

This paper cites Backdooring Vision-Language Models with Out-Of-Distribution Data.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Backdooring Vision-Language Models with Out-Of-Distribution Data

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.515830Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.515830Z digest=sha256:70826d6382b75b7a87cc67f7ed0063639d7f41260ccf8d0d4bbe2a6249573cef

Observation ebd51b3a-0c85-4a21-b1ea-0a5faaac5430 · outbound

This paper cites Journal of Artificial Intelligence Research , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Journal of Artificial Intelligence Research , volume=

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.346696Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.521814Z digest=sha256:99fbe6c25538f4db0876784eeaeedd053169be3c4587b61fa333b0ff2b363287

Observation d59a2ae8-b1f9-4617-8092-26b2b2fed029 · outbound

This paper cites Transactions of the association for computational linguistics , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Transactions of the association for computational linguistics , volume=

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.526888Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.526888Z digest=sha256:1bd683d43d8db3c769cc4751fddd6770e18c0af1dad569d2bde79165d263919a

Observation 98e6d868-670e-4960-b59e-a7a83ae6cec0 · outbound

This paper cites Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.531559Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.531559Z digest=sha256:5146558a73d065f12e260607aba363d33ae93d6b6f0a79e023be016062fe46c9

Observation 78a86828-5dd7-416a-b402-baa89382d55f · outbound

This paper cites , author=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs , author=

Reference 25

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.536102Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.536102Z digest=sha256:1832e95acabc793618fd0d67465d6d4f4463fc912e73a8099707092136a717c9

Observation c25d8b2f-9eab-42dc-b129-42278dc8a776 · outbound

This paper cites 2009 , publisher=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2009 , publisher=

Reference 26

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.540453Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.540453Z digest=sha256:058fc3ce3862888b8a0365ef00bd442dd9de62689f433dac7beb52936571a964

Observation 512507b4-d3a8-41cb-a011-1264b8dff2ae · outbound

This paper cites an unresolved cited work.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Unresolved cited work

Reference 27

Resolution
unresolved
raw_fallback, observed 2026-08-12T13:30:43.292078Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.544788Z digest=sha256:aef1b585ef6fa70e3d892f3f1bad09ca762724ad5c9b1dca37febb990d823737

Observation 36f7eeb9-abe4-42d2-9122-89bb9cffe0cd · outbound

This paper cites Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.549149Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.549149Z digest=sha256:88abd9e9d50995bb992ce48298337ab9a7255952dfbdd93dddbef80404c9951a

Observation 463ba706-175e-4c91-9a09-c511f1e605f1 · outbound

This paper cites The Thirty-ninth Annual Conference on Neural Information Processing Systems Datasets and Benchmarks Track , year=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs The Thirty-ninth Annual Conference on Neural Information Processing Systems Datasets and Benchmarks Track , year=

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.267802Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.553380Z digest=sha256:cb0d5fc85e408c7fcb9b2d14036014d305f2ffdf1a1087e6ab044820c195a61f

Observation 83f7dc83-1901-4638-854e-25ae0896bdb4 · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.557709Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.557709Z digest=sha256:e75383d46429a2d6609d8e2f7652608809f2c439409d76418035f5442e86ba0a

Observation a250caf7-7c80-44a7-844a-7ab9ec092171 · outbound

This paper cites Gemini: A Family of Highly Capable Multimodal Models.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Gemini: A Family of Highly Capable Multimodal Models

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.561713Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.561713Z digest=sha256:e049e4a97c37d4725d53dd14e9359dcb8e23ab116c1c930ce99b62cdc783a585

Observation 7e9e77fe-bf52-498b-ad65-b32a38b9e97e · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 32

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.565747Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.565747Z digest=sha256:844838e9a3a9103327f8b23e25466fdb818c1177e28f9ac9889300b3927537d8

Observation 2033c4d0-c1ed-4af3-853c-2453340bef37 · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.569696Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.569696Z digest=sha256:19b55805edad93ba37c9579291c398339be08fa57ac9d518f63095c0f3fd249c

Observation 6534bc38-0b9b-4845-80a6-7ce3041ab167 · outbound

This paper cites Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the IEEE/CVF conference on computer vision and pattern recognition , pages=

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.573773Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.573773Z digest=sha256:c77b57c38436cfb9b6e8e2b34af3c63d0862abcce020bd4837ff2e5ff2d5b75e

Observation af7e367b-604b-48ff-a033-7ce83adf71cf · outbound

This paper cites SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs SDXL: Improving Latent Diffusion Models for High-Resolution Image Synthesis

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.577994Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.577994Z digest=sha256:2d948b72353277eeeb62ddb130cef0104f36db0a41040e799ab028e3ce06bc53

Observation 80e2d0b9-4618-42fe-a54d-b8bc2845d1d9 · outbound

This paper cites Poisoning and Backdooring Contrastive Learning.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Poisoning and Backdooring Contrastive Learning

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.582232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.582232Z digest=sha256:03cd0b1b7954895207c37319b591cdde2c29a11bf241c6e22424ea6d84998251

Observation 002c11d4-3c19-4d24-a9e3-0a75b735830a · outbound

This paper cites 2022 IEEE Symposium on Security and Privacy (SP) , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2022 IEEE Symposium on Security and Privacy (SP) , pages=

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.209879Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.586439Z digest=sha256:83a83e46b7e7bb77f3475bf4a928fe9cad839a07c485339eded696a0f2d686e4

Observation 1cae4c8f-a49d-401e-b044-4624c8a3e5a5 · outbound

This paper cites Proceedings of the Computer Vision and Pattern Recognition Conference , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the Computer Vision and Pattern Recognition Conference , pages=

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.590589Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.590589Z digest=sha256:d3ad26043ca35d259240a7858830133e3223d22c2ff7fca7a973703bc2b282fc

Observation c54ac235-9d27-4c08-916c-682a518f073f · outbound

This paper cites 2025 , eprint=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2025 , eprint=

Reference 39

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.594791Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.594791Z digest=sha256:0a5c2c503fb3a22f2020fdf54e6b1012a025c7eda3d18485f49744ce97226d28

Observation 1ae54888-a3e2-4244-b78c-34fce7eeb8b1 · outbound

This paper cites MiniGPT-v2: large language model as a unified interface for vision-language multi-task learning.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs MiniGPT-v2: large language model as a unified interface for vision-language multi-task learning

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.599072Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.599072Z digest=sha256:7c00b618d66b9c5c9eb8932e03be86d7a856a4fedc59e4025fa767f70bbbd8f0

Observation 58705ef3-142e-4935-b6b2-c7f85d873995 · outbound

This paper cites Backdoor Attack in the Physical World.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Backdoor Attack in the Physical World

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.604091Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.604091Z digest=sha256:6b4fd4b102f88ebe1e3272a9ea44665cb8e35a02dee56130c2178d5200cc2fb7

Observation 10a21a32-9730-48f5-8ec9-53a559f4158f · outbound

This paper cites SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.608796Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.608796Z digest=sha256:a486c0ee5c9112b75c9a1689d9ec0cad3b0eeadc5fc186b64a3f6e3c78eb5962

Observation 1a1824c3-b26b-4f81-83fb-d10806479713 · outbound

This paper cites Advances in neural information processing systems , volume=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in neural information processing systems , volume=

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.613262Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.613262Z digest=sha256:9ae6c6c31ec167f2e2057a1ffab8b5a9b66476f72092fdbce6642368edd66ad1

Observation 3a4ae954-0546-4b76-9535-18e5c0ea8f5d · outbound

This paper cites 2019 IEEE symposium on security and privacy (SP) , pages=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2019 IEEE symposium on security and privacy (SP) , pages=

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.617365Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.617365Z digest=sha256:0441d5cdf59ffda83c9c2a0be02e1f7325dc9deab282a9b8c8b312b1164a2e9f

Observation fa63ad01-de3f-4799-ab25-c772f0e31795 · outbound

This paper cites Delving into Transferable Adversarial Examples and Black-box Attacks.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Delving into Transferable Adversarial Examples and Black-box Attacks

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-12T13:30:42.621423Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-12T13:30:42.621423Z digest=sha256:a30b9670a28dc8d5e0b59f284132eed9eabb93402d51b394d39edc7da1150184

Observation e3bf092b-c11d-4d3b-aeaa-42061dfc1a54 · outbound

This paper cites IEEE Transactions on Dependable and Secure Computing , volume =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs IEEE Transactions on Dependable and Secure Computing , volume =

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.137002Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.625717Z digest=sha256:04412b7e9973be6c882f1d86b9a5625d3ae6fa3b5c52f478abad8647ba0907be

Observation 656ce5a5-1b65-4e54-b075-b5f018e8ec94 · outbound

This paper cites IEEE Transactions on Circuits and Systems for Video Technology , volume =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs IEEE Transactions on Circuits and Systems for Video Technology , volume =

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.121488Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.630137Z digest=sha256:a12697c2cb2e1148201e63b130eb2c95c9775ca897702271cccb9fdaab541b1e

Observation 4b0f6086-4027-4bb6-a367-81c61c9e7676 · outbound

This paper cites Advances in Neural Information Processing Systems , volume =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Advances in Neural Information Processing Systems , volume =

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.104968Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.634632Z digest=sha256:e58a5dfb38002f2cc82250fa7dc9d1e292642bd76c9ed88bdfed7ab55f2de459

Observation 143b5013-5fb5-40ed-a9a9-e8842b41da41 · outbound

This paper cites Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence , pages =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Proceedings of the Thirty-Third International Joint Conference on Artificial Intelligence , pages =

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.087518Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.639839Z digest=sha256:f65afaf444a95cd57140240740108ee9aef502c23d616a6f34908710da1b4709

Observation c6769c9a-d007-45da-ad20-3f0c1496799d · outbound

This paper cites an unresolved cited work.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs Unresolved cited work

Reference 50

Resolution
unresolved
raw_fallback, observed 2026-08-12T13:30:43.071039Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.645245Z digest=sha256:7df16692c8f1d38f590699da140413f8a26e61ec5c9ade537c9f95ef67bffba1

Observation 211c2623-5397-4784-981d-a97ebee664b7 · outbound

This paper cites 2026 , doi =.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2026 , doi =

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.055153Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.649835Z digest=sha256:e8a16863f133ad7dc1555154898eb10a29723a3fff064d1ebc674d89e3f8cf6d

Observation 1db61a1f-e410-4690-908c-2cd728225e65 · outbound

This paper cites 2026 , eprint=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2026 , eprint=

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.041015Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.654547Z digest=sha256:94082738bf25b4dc2c8ae5916710c4eaf6abad5be62d20d48fe1b5e8d8dced7d

Observation 5b6ee6f1-1ab9-43dd-b21a-973691b110ed · outbound

This paper cites 2021 , eprint=.

Once Poisoned, Arbitrarily Controlled: A Programmable Backdoor in VLMs 2021 , eprint=

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T13:30:43.026584Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=arxiv_source observed=2026-08-12T13:30:42.658810Z digest=sha256:30320cd56786b155cecb4edfeb8ac76e5bbdba44fd82a532c5019d0169d3f532

Pith citing papers

No inbound Pith citation observations are available.