{"as_of":"2026-08-21T10:08:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a13832718914b1fa033f40fb8ea8a763cf31250678477c6e7785a17a3ddbbb3f","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":10,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":10,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":10,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T15:11:10.254863Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-25T15:35:58.936154Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1906.01820","last_updated":"2021-12-01T11:22:52Z","snapshot_observed_at":"2026-08-17T12:23:45.330984Z","submitted_at":"2019-06-05T04:43:25Z","title":"Risks from Learned Optimization in Advanced Machine Learning Systems","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-15T12:21:53.058760Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1906.01820"},"observation_digest":"sha256:63e1597ce5acc822ff0a1f9a40fcbec415b2f951175d58bc8326edee5dbdebd2","observation_id":"fa80d621-16dd-486f-a60a-65b00476ae76","resolution":{"observed_at":"2026-05-15T12:21:53.120569Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1906.11328","last_updated":"2019-06-26T20:16:17Z","snapshot_observed_at":"2026-08-02T01:15:26.405072Z","submitted_at":"2019-06-26T20:16:17Z","title":"Adversarial FDI Attack against AC State Estimation with ANN","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-25T15:33:10.899090Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1906.11328"},"observation_digest":"sha256:188e63401a920f5052219e22974cc5c3ec108af06b1c0cb0bb12f644d59c9823","observation_id":"1dcb1644-4a19-4109-8a46-cef114be6632","resolution":{"observed_at":"2026-05-25T15:35:58.940138Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-16T18:59:10.698869Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:d91dd512a07d23155a8bf44ce22e9240e933fec80c9c1ccebc0a760f432e8fc4","observation_id":"ed6e61e7-0b8c-4a98-8041-0a4028647375","resolution":{"observed_at":"2026-05-24T21:29:57.933911Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1907.08965","last_updated":"2019-07-21T12:35:43Z","snapshot_observed_at":"2026-08-18T21:06:01.659252Z","submitted_at":"2019-07-21T12:35:43Z","title":"Machine Learning for Resource Management in Cellular and IoT Networks: Potentials, Current Solutions, and Open Challenges","version":1},"reference_index":181,"source":"pdf_text","source_observed_at":"2026-05-24T18:22:23.272044Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1907.08965"},"observation_digest":"sha256:d8fa6464a3a3189f85e692ebd6f7849f21b13f1849f5140f17a1382e4aaea650","observation_id":"85e47f5a-f06f-4fca-b474-8df13e88bc73","resolution":{"observed_at":"2026-05-24T18:24:48.154343Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1907.10406","last_updated":"2019-07-21T11:52:36Z","snapshot_observed_at":"2026-08-19T19:36:11.353291Z","submitted_at":"2019-07-21T11:52:36Z","title":"Open DNN Box by Power Side-Channel Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-24T18:44:12.031882Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1907.10406"},"observation_digest":"sha256:dd59cd1b4cc0835286b2b57f5b57d1cef936f7e4680d796818e48577707a1133","observation_id":"c68b02cb-6335-4519-b6aa-38da5f5ee439","resolution":{"observed_at":"2026-05-24T18:44:49.273911Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-14T15:11:10.254863Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.254863Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:97b59a15482dcbcd5ad5393144cbb400e22e04fe15748e12e4bf93c36bde7a13","observation_id":"5e8bd658-5f21-4972-b016-a2bcea420983","resolution":{"observed_at":"2026-08-14T15:11:10.254863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-14T11:35:51.099456Z","title":"One pixel at- tack for fooling deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.08705","last_updated":"2019-08-23T07:55:42Z","snapshot_observed_at":"2026-08-18T03:15:48.088545Z","submitted_at":"2019-08-23T07:55:42Z","title":"AdvHat: Real-world adversarial attack on ArcFace Face ID system","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T11:35:51.099456Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1908.08705"},"observation_digest":"sha256:c834a00eac3fb44acdd1132742919edafe3f1fced769cf78469a4b33bead3c58","observation_id":"d9ac9211-018d-498a-9a7c-e47d620c75e7","resolution":{"observed_at":"2026-08-14T11:35:51.099456Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-14T11:21:40.125342Z","title":"Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Good- fellow, and Rob Fergus","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.09364","last_updated":"2019-08-27T07:53:03Z","snapshot_observed_at":"2026-08-21T06:39:21.183011Z","submitted_at":"2019-08-25T17:20:15Z","title":"Adversarial Edit Attacks for Tree Data","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T11:21:40.125342Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1908.09364"},"observation_digest":"sha256:aa3783694b6a44ca212cfcb6d76c1069582b72f201da14c77e0601200df9f8db","observation_id":"40cc071b-4d1d-4994-a80c-27daeb740ea8","resolution":{"observed_at":"2026-08-14T11:21:40.125342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-12T14:46:12.306609Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14946","last_updated":"2024-11-22T13:57:56Z","snapshot_observed_at":"2026-08-17T20:53:19.083386Z","submitted_at":"2024-11-22T13:57:56Z","title":"Reliable Evaluation of Attribution Maps in CNNs: A Perturbation-Based Approach","version":1},"reference_index":43,"source":"arxiv_source","source_observed_at":"2026-08-12T14:46:12.306609Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/2411.14946"},"observation_digest":"sha256:46dacb7b399dbfcdc6be48f87b7f27ac2277c4ff42ff39fac92142806ffaa1c3","observation_id":"cc1eec0f-74bc-490c-9374-eb1dff1a259a","resolution":{"observed_at":"2026-08-12T14:46:12.306609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-05T20:29:43.143790Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.10490","last_updated":"2025-08-14T09:49:07Z","snapshot_observed_at":"2026-08-17T15:16:04.716517Z","submitted_at":"2025-08-14T09:49:07Z","title":"On the Complexity-Faithfulness Trade-off of Gradient-Based Explanations","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-05T20:29:43.143790Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/2508.10490"},"observation_digest":"sha256:25f2742ec3235be3d2714c3a10f282b643d7ee49c1b3fa70cbda8aff1e25ba27","observation_id":"97867edc-21c4-4b30-8291-87b78b19eb11","resolution":{"observed_at":"2026-08-05T20:29:43.143790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1710.08864/citation-record","integrity":"/paper/1710.08864/integrity","json":"/paper/1710.08864/citation-record.json","paper":"/paper/1710.08864"},"outbound":[],"paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","latest_version":7,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 10 inbound Pith citation observations for arXiv:1710.08864."}