{"as_of":"2026-08-16T00:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:49c936215a4fdc25cffc2c075c687a05d968e5aca82e403be8bf1c0a0dd7b6b6","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":24,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T22:36:16.082384Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-06-30T07:14:21.408187Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-14T14:55:16.789353Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02256","last_updated":"2020-05-16T20:39:13Z","snapshot_observed_at":"2026-08-15T15:17:35.824559Z","submitted_at":"2019-08-06T16:55:47Z","title":"BlurNet: Defense by Filtering the Feature Maps","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T14:55:16.789353Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/1908.02256"},"observation_digest":"sha256:e5bc7a48ee16a3e3e7625ea43ca79d46c3fe5e5a44d078485f25906194dd5f7c","observation_id":"9ca8ffbc-91b9-4fb7-a326-7938f18401f5","resolution":{"observed_at":"2026-08-14T14:55:16.789353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":"1711.01991","doi":null,"metadata_source":"pith","pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-06-30T07:14:21.408187Z","title":"Mitigating Adversarial Effects Through Randomization","venue":"cs.CV","work_id":"6e5e2ee9-1432-4915-a405-43e4388e0205","year":2017},"citing_paper":{"arxiv_id":"2402.13228","last_updated":"2024-07-03T13:46:33Z","snapshot_observed_at":"2026-08-14T02:18:02.339361Z","submitted_at":"2024-02-20T18:42:34Z","title":"Smaug: Fixing Failure Modes of Preference Optimisation with DPO-Positive","version":2},"reference_index":245,"source":"arxiv_source","source_observed_at":"2026-05-17T23:04:44.287660Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2402.13228"},"observation_digest":"sha256:d853dc352694c2efc3714c49b811cd9e42d7463a6b40f459d0c3ca28f307097a","observation_id":"c9e357ce-64d8-4d79-95bf-77eb972371d7","resolution":{"observed_at":"2026-05-17T23:04:44.632254Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-12T14:53:49.943965Z","title":"Mitigating adversarial effects through randomization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.14834","last_updated":"2025-02-04T01:30:13Z","snapshot_observed_at":"2026-08-15T18:00:50.583368Z","submitted_at":"2024-11-22T10:17:32Z","title":"Evaluating the Robustness of the \"Ensemble Everything Everywhere\" Defense","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T14:53:49.943965Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2411.14834"},"observation_digest":"sha256:13d5b2b1b2af56ab914ed0ddfa948ed681421dfe4d7aaab9628151cc100ee225","observation_id":"17055f19-c58c-4746-97d6-4cbf3ffd4973","resolution":{"observed_at":"2026-08-12T14:53:49.943965Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-11T23:31:18.757603Z","title":"Mitigating adversarial effects through random- ization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.02479","last_updated":"2025-03-27T05:40:57Z","snapshot_observed_at":"2026-08-11T23:22:04.261534Z","submitted_at":"2024-12-03T14:42:31Z","title":"OODFace: Benchmarking Robustness of Face Recognition under Common Corruptions and Appearance Variations","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-11T23:31:18.757603Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2412.02479"},"observation_digest":"sha256:cb2a7c370b7b0f41ae29474759e608fb712e38090acc31137c3fee8fc1f17c92","observation_id":"46c6f937-25a7-4284-958b-d87efd9784d2","resolution":{"observed_at":"2026-08-11T23:31:18.757603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-10T22:40:29.642000Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01025","last_updated":"2025-01-12T04:43:46Z","snapshot_observed_at":"2026-08-15T18:13:36.633300Z","submitted_at":"2025-01-02T03:15:25Z","title":"Towards Adversarially Robust Deep Metric Learning","version":2},"reference_index":59,"source":"arxiv_source","source_observed_at":"2026-08-10T22:40:29.642000Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2501.01025"},"observation_digest":"sha256:e1193cfd40186c432618178e41a0506e6b0fa68c341b31801c1d8991fa156eae","observation_id":"0acacf78-a73d-4946-a75b-e9c68f8b4b1c","resolution":{"observed_at":"2026-08-10T22:40:29.642000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-15T22:36:16.082384Z","title":"Mitigating adversarial effects through randomization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.06860","last_updated":"2025-05-11T06:11:10Z","snapshot_observed_at":"2026-08-15T22:28:52.167794Z","submitted_at":"2025-05-11T06:11:10Z","title":"DP-TRAE: A Dual-Phase Merging Transferable Reversible Adversarial Example for Image Privacy Protection","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-15T22:36:16.082384Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.06860"},"observation_digest":"sha256:657b35b2fe35ef60a8cb4edfaf19a7405869cc61b0f9f798ddceb92c16e99b80","observation_id":"fad9f37c-761e-42fa-aacb-1d5691cb72e6","resolution":{"observed_at":"2026-08-15T22:36:16.082384Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-15T21:45:12.993059Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.993059Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:93db230fa980f8ed4d9e8d6a988808d67b1a6a4b3459940bfd77def88527c887","observation_id":"7626ddde-8cdc-4233-bc21-d104a1a7a027","resolution":{"observed_at":"2026-08-15T21:45:12.993059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T15:09:00.155566Z","title":"Mitigating adversarial effects through random- ization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-14T17:29:46.216787Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.155566Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:fa870f98af642a01d81eea39236e3cd58714ead525aaebf0e2815d1eec57950e","observation_id":"f033d2e6-0868-4e15-bb0d-a9b5babf24c1","resolution":{"observed_at":"2026-08-07T15:09:00.155566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T13:44:41.342894Z","title":"arXiv:1711.01991 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.21181","last_updated":"2025-05-27T13:32:52Z","snapshot_observed_at":"2026-08-14T14:05:05.033747Z","submitted_at":"2025-05-27T13:32:52Z","title":"Boosting Adversarial Transferability via High-Frequency Augmentation and Hierarchical-Gradient Fusion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:44:41.342894Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.21181"},"observation_digest":"sha256:4d979898db3df296c04cd57ee000a25f88252c9f503339ce5cc7cd7ae5cdd13e","observation_id":"e54eaac8-3ccd-4308-9759-c944ec04b1f2","resolution":{"observed_at":"2026-08-07T13:44:41.342894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T12:55:10.431484Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-13T08:50:29.554217Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.431484Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:606c7bcfa06273886aa1db7999533cf6b866fbd5bdc25c1095c1edaedc4d6585","observation_id":"fbcac3b2-2a76-475f-91c1-5fc107e47f68","resolution":{"observed_at":"2026-08-07T12:55:10.431484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T13:21:42.030726Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23828","last_updated":"2025-05-28T07:44:10Z","snapshot_observed_at":"2026-08-13T17:30:33.422266Z","submitted_at":"2025-05-28T07:44:10Z","title":"Spa-VLM: Stealthy Poisoning Attacks on RAG-based VLM","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:21:42.030726Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23828"},"observation_digest":"sha256:7ea3ff8917170320332b7bb75e97acccf53017c6287727338f1473fa3a8c21de","observation_id":"96aade47-d54a-489b-8694-17e91fe211e1","resolution":{"observed_at":"2026-08-07T13:21:42.030726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T12:12:12.442138Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.00325","last_updated":"2025-05-31T00:37:28Z","snapshot_observed_at":"2026-08-14T08:46:45.529711Z","submitted_at":"2025-05-31T00:37:28Z","title":"Towards Effective and Efficient Adversarial Defense with Diffusion Models for Robust Visual Tracking","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:12:12.442138Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.00325"},"observation_digest":"sha256:c7936a0f308170ffa443f5afe220538a371a85635fb4becfa4bb2c0ccfbf2817","observation_id":"38485e0f-d537-4ec2-951b-dfa4d1402a53","resolution":{"observed_at":"2026-08-07T12:12:12.442138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T05:22:42.198503Z","title":"Mitigating adversarial effects through random- ization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.08255","last_updated":"2026-05-29T14:58:51Z","snapshot_observed_at":"2026-08-13T18:06:47.983337Z","submitted_at":"2025-06-09T21:43:56Z","title":"SHIELD: Secure Hypernetworks for Incremental Expansion Learning Defense","version":4},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:22:42.198503Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.08255"},"observation_digest":"sha256:72ee2f39f088144b1f78f67556cca6ee920af477c1c8a1e64c759d3ce9bd3c5c","observation_id":"f8aaf4fd-63d2-4e1d-ad52-8c3c7ad46672","resolution":{"observed_at":"2026-08-07T05:22:42.198503Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T04:28:45.737450Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.10685","last_updated":"2025-07-01T17:49:09Z","snapshot_observed_at":"2026-08-09T15:57:31.871657Z","submitted_at":"2025-06-12T13:30:01Z","title":"Defensive Adversarial CAPTCHA: A Semantics-Driven Framework for Natural Adversarial Example Generation","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T04:28:45.737450Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.10685"},"observation_digest":"sha256:17f49be8dc849f3245975a39bcef906dfddd2fd3af9828215c24a765ee0ee02a","observation_id":"8ca9a299-3ab9-44af-95e8-6e771842a35e","resolution":{"observed_at":"2026-08-07T04:28:45.737450Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T00:24:12.767171Z","title":"Mitigating adversarial effects through randomization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.14466","last_updated":"2025-06-17T12:30:56Z","snapshot_observed_at":"2026-08-13T02:28:49.451327Z","submitted_at":"2025-06-17T12:30:56Z","title":"MalGuard: Towards Real-Time, Accurate, and Actionable Detection of Malicious Packages in PyPI Ecosystem","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T00:24:12.767171Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.14466"},"observation_digest":"sha256:0444e74c4c363e6f5566239b6dd2946ee59bd33fad4424a63048907413e73c9b","observation_id":"f59fa9b6-21b0-4d81-a251-2c44438472bd","resolution":{"observed_at":"2026-08-07T00:24:12.767171Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-06T23:49:36.103837Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.15988","last_updated":"2025-06-19T03:19:21Z","snapshot_observed_at":"2026-08-09T19:07:18.762270Z","submitted_at":"2025-06-19T03:19:21Z","title":"Adversarial Attacks and Detection in Visual Place Recognition for Safer Robot Navigation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T23:49:36.103837Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.15988"},"observation_digest":"sha256:e3ca9218738381038a824e8b9b337a32443fccfffafde2ff5d31c657e45313ec","observation_id":"3774b1e6-f1eb-4232-96e8-d5697b587746","resolution":{"observed_at":"2026-08-06T23:49:36.103837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-06T22:06:38.435319Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.22722","last_updated":"2025-06-28T02:06:23Z","snapshot_observed_at":"2026-08-13T20:37:50.771603Z","submitted_at":"2025-06-28T02:06:23Z","title":"Kill Two Birds with One Stone! Trajectory enabled Unified Online Detection of Adversarial Examples and Backdoor Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:06:38.435319Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2506.22722"},"observation_digest":"sha256:3ed30d631cc1da5d6ff43e83c160fba407b877c1c758589ceb6eabe20e49a88e","observation_id":"3f23382f-8b3b-4d76-a44a-f2df8e018921","resolution":{"observed_at":"2026-08-06T22:06:38.435319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-06T20:46:44.654607Z","title":"arXiv:1711.01991 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.01791","last_updated":"2025-07-02T15:16:30Z","snapshot_observed_at":"2026-08-14T14:05:02.424838Z","submitted_at":"2025-07-02T15:16:30Z","title":"Boosting Adversarial Transferability Against Defenses via Multi-Scale Transformation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T20:46:44.654607Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2507.01791"},"observation_digest":"sha256:54bdff7ead5fdfb16105749cea566a7a64937db97120fdb359b0808a437897de","observation_id":"7c47a86c-e41b-4a94-9dd4-4b56be8ba378","resolution":{"observed_at":"2026-08-06T20:46:44.654607Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-06T11:48:52.270219Z","title":"Mitigating adversarial effects through randomization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.22446","last_updated":"2025-07-30T07:45:03Z","snapshot_observed_at":"2026-08-11T17:48:07.903225Z","submitted_at":"2025-07-30T07:45:03Z","title":"RCR-AF: Enhancing Model Generalization via Rademacher Complexity Reduction Activation Function","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T11:48:52.270219Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2507.22446"},"observation_digest":"sha256:aa78d0d49df88327f81df100e7a9a68e9ecb1c759db8f256faaf7b455e1e01e9","observation_id":"1e2b2c1e-1569-4e37-99b7-49bc18f16fdd","resolution":{"observed_at":"2026-08-06T11:48:52.270219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-15T17:27:45.487895Z","title":"Mitigating adversarial effects through random- ization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-15T17:20:14.169101Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.487895Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:fb4bf09e241bc8eaa57c345918eba425414c673f2b94d5b197cc80d862313431","observation_id":"f4b9468e-b7e6-4c5b-a03c-028c66fe9741","resolution":{"observed_at":"2026-08-15T17:27:45.487895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-05T11:00:38.298760Z","title":"Mitigating adversarial effects through randomization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.03383","last_updated":"2025-09-03T15:00:28Z","snapshot_observed_at":"2026-08-14T04:20:32.698376Z","submitted_at":"2025-09-03T15:00:28Z","title":"ANNIE: Be Careful of Your Robots","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-05T11:00:38.298760Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2509.03383"},"observation_digest":"sha256:55e424f836d4cf875c9db22331a0aa6a4515a12c25ee845cb0123c88809b515b","observation_id":"2d3b712a-36a0-407e-98fe-8b78542db4bb","resolution":{"observed_at":"2026-08-05T11:00:38.298760Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-04T22:10:18.165088Z","title":"Mitigating adversarial effects through randomization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.07495","last_updated":"2025-09-09T08:20:19Z","snapshot_observed_at":"2026-08-15T13:28:02.141873Z","submitted_at":"2025-09-09T08:20:19Z","title":"Generating Transferrable Adversarial Examples via Local Mixing and Logits Optimization for Remote Sensing Object Recognition","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T22:10:18.165088Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2509.07495"},"observation_digest":"sha256:25dc3eb2e0595443abf5b4c7fd4c72ed86d58e8f8ccff921addce2716110897c","observation_id":"f7f21761-f5a9-47a9-9b9b-ed58934a2bbe","resolution":{"observed_at":"2026-08-04T22:10:18.165088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":"1711.01991","doi":null,"metadata_source":"pith","pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-06-30T07:14:21.408187Z","title":"Mitigating Adversarial Effects Through Randomization","venue":"cs.CV","work_id":"6e5e2ee9-1432-4915-a405-43e4388e0205","year":2017},"citing_paper":{"arxiv_id":"2606.29841","last_updated":"2026-06-29T06:28:49Z","snapshot_observed_at":"2026-08-09T21:18:46.181315Z","submitted_at":"2026-06-29T06:28:49Z","title":"Theory of Continual Learning Against Data Poisoning Attacks","version":1},"reference_index":134,"source":"arxiv_source","source_observed_at":"2026-06-30T07:09:27.431370Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2606.29841"},"observation_digest":"sha256:4d5193c52659597e1ae7e1b06842b59f7aebaccd4d99920660f2571c07065fa5","observation_id":"5566020e-394c-466b-9b2b-9ff53ba51f0c","resolution":{"observed_at":"2026-06-30T07:14:21.409811Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-14T04:28:26.717387Z","title":"Mitigating adversar- ial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.08815","last_updated":"2026-08-09T17:05:00Z","snapshot_observed_at":"2026-08-14T04:21:04.595493Z","submitted_at":"2026-08-09T17:05:00Z","title":"Distilling Vision-Language Models for Robust Traffic Sign Perception in Autonomous Vehicles","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T04:28:26.717387Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2608.08815"},"observation_digest":"sha256:dcebd3110fb6a7b1ef3d28a36231487cb4aaf0a0f7290a266312ce548d6a70cd","observation_id":"e0a91d2f-3de2-4408-b0cd-40d73fc6848f","resolution":{"observed_at":"2026-08-14T04:28:26.717387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1711.01991/citation-record","integrity":"/paper/1711.01991/integrity","json":"/paper/1711.01991/citation-record.json","paper":"/paper/1711.01991"},"outbound":[],"paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","latest_version":3,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 24 inbound Pith citation observations for arXiv:1711.01991."}