{"as_of":"2026-08-21T14:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4e73dfd586096046ca21f752ee4c073cffcbec75a37749b17d730a47f029f6d7","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T15:11:10.285502Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.01667/citation-record","integrity":"/paper/1908.01667/integrity","json":"/paper/1908.01667/citation-record.json","paper":"/paper/1908.01667"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1804.07729","last_updated":"2019-01-11T15:42:59Z","snapshot_observed_at":"2026-08-20T08:10:02.398634Z","submitted_at":"2018-04-20T17:11:06Z","title":"ADef: an Iterative Algorithm to Construct Adversarial Deformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.07729","snapshot_observed_at":"2026-08-14T15:11:10.047192Z","title":"Alberti, and Tandri Gauksson","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.047192Z"},"links":{"cited_paper":"/paper/1804.07729","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ea2af8b3d5d5f7e0c09b296676d57810ca19fc03f63e81a551b43e044a5296d5","observation_id":"4b7f1e67-931d-471b-a793-78e160baa9ed","resolution":{"observed_at":"2026-08-14T15:11:10.047192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.076576Z","title":null,"venue":null,"work_id":"55cc3971-7af3-4f32-8c61-b32bb2f703c8","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.054876Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:b91b4c533c2175bdf4d7b35a2368dda6d78d48e9a68caa350e109e30210bbbe9","observation_id":"5750e7ec-e539-40de-ba29-b3a47957fee8","resolution":{"observed_at":"2026-08-14T15:11:11.081612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00861","last_updated":"2019-03-05T00:28:48Z","snapshot_observed_at":"2026-08-15T19:52:05.516451Z","submitted_at":"2018-10-01T17:57:02Z","title":"ProxQuant: Quantized Neural Networks via Proximal Operators","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00861","snapshot_observed_at":"2026-08-14T15:11:10.061786Z","title":"Proxquant: Quant ized neural networks via proximal operators","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.061786Z"},"links":{"cited_paper":"/paper/1810.00861","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:725acf97f1e1f434b024bb40a100df56c98d52b0bb6ff840b673146f30b62e02","observation_id":"1eea2bd1-726b-4087-bf16-345fdfeef0f9","resolution":{"observed_at":"2026-08-14T15:11:10.061786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.059847Z","title":"Fast newton-type methods for total variation regularization","venue":null,"work_id":"b4945173-f136-4651-a14c-a3ac486685f7","year":2011},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.070087Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4b472d76debb2f116bf9510e78cd65a4ddd15fe297dc3dbb6de157246444b97d","observation_id":"b9284f16-585c-47e7-9566-4e3cf6c559e9","resolution":{"observed_at":"2026-08-14T15:11:11.065389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.040225Z","title":"Modular proximal optimiz ation for multidimensional total-variation regularizati on","venue":null,"work_id":"106436f6-85f6-4e46-97bf-3ed94f8a9476","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.075332Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:2bc5a87d210eede59ebb70eb90b183bb9fbce3fd9716726fcad510009ca421d8","observation_id":"68c63aa2-a919-42a1-a0c4-6942ad47f6fa","resolution":{"observed_at":"2026-08-14T15:11:11.047326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.005685Z","title":"First-order methods in optimization","venue":null,"work_id":"7df76c17-f738-4f66-b665-ca91de377c25","year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.080638Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4eac4d0e6bc19d0517739b671119148e6270d54b34fe43c4f9ec2ff5f16bd22c","observation_id":"ce75ad9e-be4c-480c-9c69-0d589b661ea7","resolution":{"observed_at":"2026-08-14T15:11:11.012243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-08-14T20:04:31.854470Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-14T15:11:10.086949Z","title":"Dec ision-based adversarial attacks: Reliable attacks agains t black-box machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.086949Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:1c98dcac26bd0c9e33693e288cc15276bad4df3c0597b002debc3e265469855a","observation_id":"64d8ae57-ac4b-41c2-ac25-df84d8b1142b","resolution":{"observed_at":"2026-08-14T15:11:10.086949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-14T15:11:10.092554Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.092554Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:22bd20deaac2e9f99ffffdd2e086dbfefd2abeabb80408ae528e1da5cb2f4ba4","observation_id":"27e46986-c939-45fc-a711-5f06ba7154d1","resolution":{"observed_at":"2026-08-14T15:11:10.092554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.02144","last_updated":"2020-04-28T01:20:45Z","snapshot_observed_at":"2026-08-18T06:56:42.113183Z","submitted_at":"2019-04-03T17:59:33Z","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.02144","snapshot_observed_at":"2026-08-14T15:11:10.098774Z","title":null,"venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.098774Z"},"links":{"cited_paper":"/paper/1904.02144","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:bbefcea398c775d053072f5fc6c481d2abd7989ab1a5171307eb519acdacfd90","observation_id":"f7bcb01f-8674-4ad3-bc29-b128b165038b","resolution":{"observed_at":"2026-08-14T15:11:10.098774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01427","last_updated":"2019-12-01T22:15:08Z","snapshot_observed_at":"2026-08-14T19:07:33.890747Z","submitted_at":"2018-06-04T23:29:05Z","title":"Analysis of DAWNBench, a Time-to-Accuracy Machine Learning Performance Benchmark","version":2},"cited_work":{"arxiv_id":"1806.01427","doi":null,"metadata_source":"pith","pith_arxiv_id":"1806.01427","snapshot_observed_at":"2026-08-14T15:11:10.652477Z","title":"Analysis of DAWNBench, a Time-to-Accuracy Machine Learning Performance Benchmark","venue":"cs.LG","work_id":"171f1005-b74d-4fef-89d7-0863f01b8bba","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.103894Z"},"links":{"cited_paper":"/paper/1806.01427","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:e4c99e3ff2733088808b84bf68324e3356f5c1e84d3d5c9d065a96545b7bfaaf","observation_id":"90005105-290d-417b-9e27-67abd7c231e9","resolution":{"observed_at":"2026-08-14T15:11:10.659012Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.988341Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"da27f90c-75ec-4610-b3f2-ed155f21f16f","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.110327Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:9e196a43265b973e4de17710725e700266f3c9e3b1cd55a18623046d7ed4e356","observation_id":"f656fe73-aa9b-4002-906c-0d22c40cae45","resolution":{"observed_at":"2026-08-14T15:11:10.994011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.968884Z","title":"Efficient projections onto the l1-ball for learning in high dimensions","venue":null,"work_id":"26f40a6c-f8e4-4e0c-83ce-b7de51c15a6c","year":2008},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.123060Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:89c97256735a4dcf4071ba811f3cd8391b13ce288649b49252a60f78650278bf","observation_id":"e3b2c65e-f019-42c7-a029-7588f84a2c2e","resolution":{"observed_at":"2026-08-14T15:11:10.975088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-14T20:44:49.961329Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-14T15:11:10.128891Z","title":"Robust physical-world attacks on deep learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.128891Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ec495ddd117b27f9f5aa6e7d1f52bb6989915375ebfb7e9ca183603f83396320","observation_id":"a2b84e6a-5ab2-473c-83b7-900297118eaf","resolution":{"observed_at":"2026-08-14T15:11:10.128891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.11468","last_updated":"2019-10-04T14:12:34Z","snapshot_observed_at":"2026-08-16T05:10:14.414861Z","submitted_at":"2019-05-27T19:40:52Z","title":"Scaleable input gradient regularization for adversarial robustness","version":2},"cited_work":{"arxiv_id":"1905.11468","doi":null,"metadata_source":"pith","pith_arxiv_id":"1905.11468","snapshot_observed_at":"2026-08-14T15:11:10.608209Z","title":"Scaleable input gradient regularization for adversarial robustness","venue":"stat.ML","work_id":"cbda64b2-cd02-4bf9-8b9c-52dca4282aa2","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.134603Z"},"links":{"cited_paper":"/paper/1905.11468","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:74d4cfdddae58c4f6ad61bdfb78b29e48d87c3600fab211735aedcb8e9b159ed","observation_id":"84fd65f5-5430-45dd-91bf-09a15b3dd95c","resolution":{"observed_at":"2026-08-14T15:11:10.613702Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.947627Z","title":"Ob erman","venue":null,"work_id":"f5573a24-c7ec-46c0-a1c4-fbc7843e19f4","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.140769Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ad583cc738dc2c69050a3d75334dc074855c4a9b3cc7c3f3ed8cb5754ff96125","observation_id":"e1781a80-1366-4478-84cf-fcdc0f7f769b","resolution":{"observed_at":"2026-08-14T15:11:10.953946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T15:11:10.146560Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.146560Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:5d76eb75912aa6ae864ca72f36a76b9d1f91b9cfe8543154cfb6990467951377","observation_id":"cb48b2ae-b9ae-434e-8939-55a5af0906c2","resolution":{"observed_at":"2026-08-14T15:11:10.146560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.929975Z","title":"I dentity mappings in deep residual networks","venue":null,"work_id":"a592b42b-be48-4b8e-a643-f47b94cc17af","year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.152471Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:5fc035a19b6bf3269ff70f1b453c55fbc00d0befb4c97f413bf978b9e67a9b37","observation_id":"d30a45ae-fee7-40f2-84c4-33da8153ae91","resolution":{"observed_at":"2026-08-14T15:11:10.935140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.899563Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"f2e44d0a-88aa-48cf-bf3d-4d88a630167d","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.164480Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:a4091f0e6f23818bd5d825b1dbbe8f54e8a3d010077c38493119deba79da5a72","observation_id":"03a2ec74-9aae-44a8-a425-864720409c73","resolution":{"observed_at":"2026-08-14T15:11:10.906656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T15:11:10.170484Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.170484Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:87bad3a5221ac4b3dd1900c5a8f8de42e099f121415cb2e84928fe8c804093ba","observation_id":"febf31f9-10d6-41ce-8e98-ce3eaea53d9a","resolution":{"observed_at":"2026-08-14T15:11:10.170484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.877327Z","title":"Object recognition with gradient-based learning","venue":null,"work_id":"49ef4a60-1dc5-4e81-aeb2-41e4e1e7f82d","year":1999},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.177027Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:0003400d4098ac61fe872e0a0bc36dc70ab2e99d31b7b7e581eb4e157b87fbdb","observation_id":"13223208-a851-42a6-bec4-e95f0fdae4d1","resolution":{"observed_at":"2026-08-14T15:11:10.886541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-14T15:11:10.182438Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.182438Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:0d519667d9ebdb6bdc8e01999d5969c5fa0662a9dece4cf3c538c6db748ce6d6","observation_id":"3bab4747-3b1a-40e0-9425-018f352e9f8d","resolution":{"observed_at":"2026-08-14T15:11:10.182438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03488","last_updated":"2017-08-30T11:22:33Z","snapshot_observed_at":"2026-08-14T21:07:10.857677Z","submitted_at":"2017-04-11T18:33:51Z","title":"Learning Proximal Operators: Using Denoising Networks for Regularizing Inverse Imaging Problems","version":2},"cited_work":{"arxiv_id":"1704.03488","doi":null,"metadata_source":"pith","pith_arxiv_id":"1704.03488","snapshot_observed_at":"2026-08-14T15:11:10.524021Z","title":"Learning Proximal Operators: Using Denoising Networks for Regularizing Inverse Imaging Problems","venue":"cs.CV","work_id":"e75dfc8e-235f-4582-9d27-793b63fb6af1","year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.188135Z"},"links":{"cited_paper":"/paper/1704.03488","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4f76a1aeb5fe86ebf24114e1f12b5763f0566052611131db0a8fa6e5f1b545e3","observation_id":"d541dffb-cd87-4008-af2f-40e44d65129a","resolution":{"observed_at":"2026-08-14T15:11:10.531652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.02248","last_updated":"2019-05-27T16:33:41Z","snapshot_observed_at":"2026-08-14T18:03:35.474856Z","submitted_at":"2018-11-06T09:30:34Z","title":"SparseFool: a few pixels make a big difference","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.02248","snapshot_observed_at":"2026-08-14T15:11:10.194028Z","title":"Sparsefool: a few pixels make a big difference","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.194028Z"},"links":{"cited_paper":"/paper/1811.02248","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:8ecd3f92313dcbdd894ec4bea64639e2193cca2f7740ba4b81404909f42cb108","observation_id":"14950efc-98d9-4ef7-b42c-2a0b20a9f582","resolution":{"observed_at":"2026-08-14T15:11:10.194028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.04599","last_updated":"2016-07-04T04:49:44Z","snapshot_observed_at":"2026-08-16T00:14:18.132920Z","submitted_at":"2015-11-14T18:50:00Z","title":"DeepFool: a simple and accurate method to fool deep neural networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.04599","snapshot_observed_at":"2026-08-14T15:11:10.200437Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.200437Z"},"links":{"cited_paper":"/paper/1511.04599","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:0c8be7d7f501caf76a09690e2fe3261c843f26800dab6da2e767a70379fe08c8","observation_id":"676c7de9-a2b9-4561-8382-fdc702697795","resolution":{"observed_at":"2026-08-14T15:11:10.200437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.206508Z","title":"Numerical optimization","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.206508Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:7eeb9e6c8e3bc409a162e45b0b3493e2dd4ec6f7cbc7df04962eac105bd23630","observation_id":"4dbeb01c-24b3-4d26-81f1-cf52456902fa","resolution":{"observed_at":"2026-08-14T15:11:10.206508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.07528","last_updated":"2015-11-24T01:07:08Z","snapshot_observed_at":"2026-08-20T15:39:31.265629Z","submitted_at":"2015-11-24T01:07:08Z","title":"The Limitations of Deep Learning in Adversarial Settings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.07528","snapshot_observed_at":"2026-08-14T15:11:10.212540Z","title":"McDaniel, Somesh Jha, Mat t Fredrikson, Z","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.212540Z"},"links":{"cited_paper":"/paper/1511.07528","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:792d143dfaa94c6f1208e0eb3166dca54dfe392f05f3369ccdd7d54159b58431","observation_id":"81ff1c1f-3dbb-440c-bef4-ccefb2a4971e","resolution":{"observed_at":"2026-08-14T15:11:10.212540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.847589Z","title":"Catalyst for gradient - based nonconvex optimization","venue":null,"work_id":"0b974144-7d34-45d1-9c4e-72aad23f6e9f","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.218502Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:e56ff66dfe5f1b7111c113f0ada3267714265b7591a42b8a5400b65c1b422d99","observation_id":"186e9ca6-cfec-43ec-9118-ef36eac745bc","resolution":{"observed_at":"2026-08-14T15:11:10.852776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.04131","last_updated":"2018-03-20T10:10:10Z","snapshot_observed_at":"2026-08-14T20:47:52.040006Z","submitted_at":"2017-07-13T13:59:15Z","title":"Foolbox: A Python toolbox to benchmark the robustness of machine learning models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.04131","snapshot_observed_at":"2026-08-14T15:11:10.224132Z","title":"Fo olbox v0.8.0: A python toolbox to benchmark the robust- ness of machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.224132Z"},"links":{"cited_paper":"/paper/1707.04131","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:fb5d8cbffec4ebaa605de2c680321a9f39e42dd2bfa38d47225bf5d7f1ac8d1e","observation_id":"7c7e00e9-8750-497c-9c3d-eac7d11b0903","resolution":{"observed_at":"2026-08-14T15:11:10.224132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.830342Z","title":"V ariational analysis, volume 317","venue":null,"work_id":"a74d606a-b9b6-4b52-b932-c7d8be0f699c","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.232908Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:dcbdd8522265fbb7952565967f4fabb9bd4680d6c3a3902fac2c4ae70698063d","observation_id":"ac4e6551-06bd-49c6-9cff-b8a9da62198b","resolution":{"observed_at":"2026-08-14T15:11:10.835700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.813813Z","title":"Nonline ar total variation based noise removal algorithms","venue":null,"work_id":"5ae664b5-8640-4abc-96dd-2b9e0a602f02","year":1992},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.243375Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:31f5fca782f4724045aba8b1979f752f4a1c744416837a22a0f022137bc6527b","observation_id":"e5a84d40-9835-4357-940e-80cfc48018d3","resolution":{"observed_at":"2026-08-14T15:11:10.819116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.09190","last_updated":"2018-09-20T17:49:14Z","snapshot_observed_at":"2026-08-14T19:12:00.848071Z","submitted_at":"2018-05-23T14:16:22Z","title":"Towards the first adversarially robust neural network model on MNIST","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.09190","snapshot_observed_at":"2026-08-14T15:11:10.248889Z","title":"Robust perception through analysis by synthe- sis","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.248889Z"},"links":{"cited_paper":"/paper/1805.09190","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:2d53496fcd2fedf3e3ac5b6b4edab4fa39139359e064cb710c291cc47689d7d5","observation_id":"a7ef2c47-bbe7-46a8-8b54-e8a391fa0d39","resolution":{"observed_at":"2026-08-14T15:11:10.248889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-18T04:02:02.238815Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-14T15:11:10.254863Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.254863Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:97b59a15482dcbcd5ad5393144cbb400e22e04fe15748e12e4bf93c36bde7a13","observation_id":"5e8bd658-5f21-4972-b016-a2bcea420983","resolution":{"observed_at":"2026-08-14T15:11:10.254863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.796221Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"3be3b354-2833-436d-b2a2-9dbad71efdbd","year":2014},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.261685Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:5115f5e665ea5f8bb5328d7370614cb623ac5ddae75c31aca1f4b9bd6e822ddb","observation_id":"84ab5c52-ad97-4b8f-8546-ba7a77a931de","resolution":{"observed_at":"2026-08-14T15:11:10.801826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.12152","last_updated":"2019-09-09T08:09:25Z","snapshot_observed_at":"2026-08-16T03:57:44.683156Z","submitted_at":"2018-05-30T18:00:32Z","title":"Robustness May Be at Odds with Accuracy","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.12152","snapshot_observed_at":"2026-08-14T15:11:10.267654Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.267654Z"},"links":{"cited_paper":"/paper/1805.12152","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:a3bd855ad9659d9886b3aae60019c2be4ebf9c5f210330e349f9a94fa51a7312","observation_id":"bf8e70b1-e60c-4077-be74-bda77de14cec","resolution":{"observed_at":"2026-08-14T15:11:10.267654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02612","last_updated":"2018-01-09T19:03:32Z","snapshot_observed_at":"2026-08-18T13:45:39.627332Z","submitted_at":"2018-01-08T18:51:59Z","title":"Spatially Transformed Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02612","snapshot_observed_at":"2026-08-14T15:11:10.273895Z","title":"Spatially transformed adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.273895Z"},"links":{"cited_paper":"/paper/1801.02612","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:039a610c8f60b2a1f4af9cdc82b2546e4dc6af48d67251527f54dccc31fcbec9","observation_id":"c1a70d8b-1e4f-4d84-9280-0c499925e5e0","resolution":{"observed_at":"2026-08-14T15:11:10.273895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.05431","last_updated":"2017-04-11T01:53:41Z","snapshot_observed_at":"2026-08-19T21:15:54.836902Z","submitted_at":"2016-11-16T20:34:42Z","title":"Aggregated Residual Transformations for Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.05431","snapshot_observed_at":"2026-08-14T15:11:10.279425Z","title":"Girshick, Piotr Doll´ ar, Zhuowen T u, and Kaiming He","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.279425Z"},"links":{"cited_paper":"/paper/1611.05431","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d20bba279ec790dfbe4c1e94e0b12df53d425c134831cc380a988730b8e9d9b2","observation_id":"307a7f59-9211-4f7e-9bdb-48f564972ca8","resolution":{"observed_at":"2026-08-14T15:11:10.279425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.775010Z","title":"Ad mm attack: An enhanced adversarial attack for deep neural networks with undetectable distortions","venue":null,"work_id":"df55ab6a-2fbf-4556-976b-891c3fe9cb98","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.285502Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:28d5763899dd88adcd60a704a2e293cff14acc3ee53032a3e7474d0e390d8c9f","observation_id":"db4cfef8-c6d7-47a6-b988-15cbf7ad1881","resolution":{"observed_at":"2026-08-14T15:11:10.781730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.158109Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.158109Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:fb2e2a958ddc875bae1aa7bdc84cc1f27fc51d20e6cebecd14ab11f3de0d68b4","observation_id":"c38870a1-c6e5-4e1a-ad66-6e6e7ccfd098","resolution":{"observed_at":"2026-08-14T15:11:10.158109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":3,"verified_fuzzy":14},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:1908.01667."}