{"as_of":"2026-08-16T00:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:236c47a41ea74d259941dab37b90703b3e3c5981204052fbbad77500ad3a9b5e","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T15:03:46.865380Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.02658/citation-record","integrity":"/paper/1908.02658/integrity","json":"/paper/1908.02658/citation-record.json","paper":"/paper/1908.02658"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.976036Z","title":"Image denoising and inpainting with deep neural networks,","venue":null,"work_id":"f0955200-05e6-485f-a4e0-e2a0e11b28b1","year":2012},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.496823Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:b3f47fd78119209d0b0a02f4f7459f55047d8015f8795fd55e46c4dcbcc6a6c3","observation_id":"4dd05b81-4a02-46bc-926b-f1fc7dd85bd6","resolution":{"observed_at":"2026-08-14T15:03:47.981766Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.955308Z","title":"Context encoders: Feature learning by inpainting,","venue":null,"work_id":"f4ef4e1f-e3bf-4bca-82ff-657b6da36b9c","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.503949Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:1ac835a2dbd300e72c6dbb1212119e9cd059212128ed3edc476582c97119776e","observation_id":"e93ae069-e902-4651-986b-1cef68561dde","resolution":{"observed_at":"2026-08-14T15:03:47.961557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.936986Z","title":"A unified architecture for natural language processing: Deep neural networks with multitask learning,","venue":null,"work_id":"fb67ccb9-235b-460c-b5b8-e7fc5053f0f2","year":2008},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.512096Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:736d0a466caf65d613fbadde290297da851d05ed6bca0bf6b803d9f755e19ed3","observation_id":"2f0c57b0-4d36-4871-b406-3daabaa3eaa8","resolution":{"observed_at":"2026-08-14T15:03:47.943522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.918358Z","title":"Deep neural networks for acoustic modeling in speech recognition,","venue":null,"work_id":"012170e3-917b-4102-a93c-4aa7d03274e3","year":2012},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.519957Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:f1f83561e9f38125dd4a997f9e29604643b764955e02c5cb78580d8c2465d215","observation_id":"f29dc466-82ba-45e5-b602-c60bb33b0ebc","resolution":{"observed_at":"2026-08-14T15:03:47.924557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T15:03:46.526949Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.526949Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:28f0f959b8371e238347854ff3794b7c4da0620a69a500ea4bc6449c6a7b94eb","observation_id":"526ba6e0-0087-4fbf-9a7f-92ca9a3dd617","resolution":{"observed_at":"2026-08-14T15:03:46.526949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.533980Z","title":"Univer- sal adversarial perturbations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.533980Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:0c6953a8ead59d4e8d77476a090d9ec6275b93633729b8cb7cadfbd3aba453a8","observation_id":"fc98155f-07e5-46b6-8fae-4c57a7fa51fa","resolution":{"observed_at":"2026-08-14T15:03:46.533980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-14T20:45:49.587140Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-08-14T15:03:46.545496Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.545496Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ee6f11909b682799a5f8a77edca75f9baf6b1ac407dd0f407b24e280e6006c67","observation_id":"e5cc5032-8154-4942-8efc-c0f890935c9d","resolution":{"observed_at":"2026-08-14T15:03:46.545496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.553575Z","title":"Adversarial examples for semantic segmentation and object detection,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.553575Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:f17103a341fea6f92104560dbdd33626d5b81b277f13f730992857a50387a461","observation_id":"71693732-9dcc-4916-989e-91f0f4a53ebe","resolution":{"observed_at":"2026-08-14T15:03:46.553575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.876051Z","title":"Audio adversarial examples: Targeted attacks on speech-to-text,","venue":null,"work_id":"899b2241-af63-4d97-84d1-5b4a4ca103c7","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.565193Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:888c4f37697023da5acbae669513fb15d10f66bed5825b0401fc629c2c06e5ac","observation_id":"eaca42b8-3fcf-4f00-ae3c-5521a98278bb","resolution":{"observed_at":"2026-08-14T15:03:47.882116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.00554","last_updated":"2018-01-02T05:24:30Z","snapshot_observed_at":"2026-08-14T19:58:41.864726Z","submitted_at":"2018-01-02T05:24:30Z","title":"Did you hear that? Adversarial Examples Against Automatic Speech Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.00554","snapshot_observed_at":"2026-08-14T15:03:46.570378Z","title":"Did you hear that? adver- sarial examples against automatic speech recognition,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.570378Z"},"links":{"cited_paper":"/paper/1801.00554","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:3b727a1c0fd0616ff3b1f99509de4b59d9bd8a221ba6e8ea1bd5b10a08076852","observation_id":"740291a0-5ea8-4d57-a46b-da69ba87a51e","resolution":{"observed_at":"2026-08-14T15:03:46.570378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-16T00:36:28.515339Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-14T15:03:46.582216Z","title":"Hotflip: White-box adver- sarial examples for text classification,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.582216Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:8e6f88c8cf301125f4aba69a9beb120b4ac85819887b396366fe132742f910d3","observation_id":"ae4e5e30-7853-455b-93be-71cba0102763","resolution":{"observed_at":"2026-08-14T15:03:46.582216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.589726Z","title":"Threat of adversarial attacks on deep learning in computer vision: A survey,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.589726Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:bf96a6d7b375942248250431ac398bce985cda310a8816d8a5514189231e2deb","observation_id":"40e38f4b-0e2c-4d02-ace6-56ec61545c99","resolution":{"observed_at":"2026-08-14T15:03:46.589726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T15:03:46.603083Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.603083Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:134e8f1a3b257967cca1fa5305dbe33d383b36a975f515f4abe39e37bd78f79c","observation_id":"9daaae66-cca7-4208-a3bf-c17a9705ad6a","resolution":{"observed_at":"2026-08-14T15:03:46.603083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.610775Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.610775Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:f99fda4c1686356c0daf093cb8ddbb76a2350815c540503eefd53ee12278ea78","observation_id":"cbfc635c-8209-44b9-8677-733db753cbc9","resolution":{"observed_at":"2026-08-14T15:03:46.610775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T15:03:46.616417Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.616417Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:3d1eb9dfbcc78c095e0c664553af9b4b1abfc54fee7888cb894f79fa44229053","observation_id":"72ad3b74-e15a-425b-a68f-5936b065cf3e","resolution":{"observed_at":"2026-08-14T15:03:46.616417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.07690","last_updated":"2016-08-27T10:44:54Z","snapshot_observed_at":"2026-08-14T21:42:33.717238Z","submitted_at":"2016-08-27T10:44:54Z","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.07690","snapshot_observed_at":"2026-08-14T15:03:46.622852Z","title":"A boundary tilting persepective on the phenomenon of adversarial examples,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.622852Z"},"links":{"cited_paper":"/paper/1608.07690","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:683cb1402ffe40331622512a211a7b7d9ecbe9d24de116e515ec4ccffe93247f","observation_id":"07ea3842-83b8-462a-b1fa-dda0682665af","resolution":{"observed_at":"2026-08-14T15:03:46.622852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.5068","last_updated":"2015-04-09T21:43:29Z","snapshot_observed_at":"2026-08-14T23:07:55.262291Z","submitted_at":"2014-12-11T23:03:49Z","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.5068","snapshot_observed_at":"2026-08-14T15:03:46.629357Z","title":"Towards deep neural network architectures robust to adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.629357Z"},"links":{"cited_paper":"/paper/1412.5068","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:4565b5271691ce58649e7ba0fcdfe62d62b824e526bbff17fc26da658ffe0ab9","observation_id":"596fb11b-07d0-419f-ad82-9261bb311dbc","resolution":{"observed_at":"2026-08-14T15:03:46.629357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.827264Z","title":"Exploring the space of adversarial images,","venue":null,"work_id":"54b5ba40-5521-41f6-bffb-3bb6af699f4b","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.636804Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:bc5ab6cefdd47bfd2e194c166bc03b8fb4b11b4e94e46908f37e97d0498b6481","observation_id":"6e0842fa-4de8-49a8-81d0-8fad2a6ec8ad","resolution":{"observed_at":"2026-08-14T15:03:47.836347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.02846","last_updated":"2017-11-08T06:54:49Z","snapshot_observed_at":"2026-08-14T20:15:48.477088Z","submitted_at":"2017-11-08T06:54:49Z","title":"Intriguing Properties of Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.02846","snapshot_observed_at":"2026-08-14T15:03:46.644451Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.644451Z"},"links":{"cited_paper":"/paper/1711.02846","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ddfb86baa16258cb65b9d67dbbb3e60e2179630d9a72d801112a05f7155a8f3e","observation_id":"0df42a72-f77d-4d4c-a5fb-c1dc108f74f3","resolution":{"observed_at":"2026-08-14T15:03:46.644451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.807572Z","title":"Adver- sarially robust generalization requires more data,","venue":null,"work_id":"7b6a275e-43dd-42d1-b7b9-a4ebb48e89d3","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.651258Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:9a33adac837f58369b04dd86faf6a01e0c542ff6224ed0cd8032c16d66478ff1","observation_id":"c897984c-430f-431d-81d1-47086abb0cd4","resolution":{"observed_at":"2026-08-14T15:03:47.813664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.10204","last_updated":"2018-05-25T15:39:06Z","snapshot_observed_at":"2026-08-15T22:41:39.603712Z","submitted_at":"2018-05-25T15:39:06Z","title":"Adversarial examples from computational constraints","version":1},"cited_work":{"arxiv_id":"1805.10204","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.10204","snapshot_observed_at":"2026-08-14T15:03:47.198255Z","title":"Adversarial examples from computational constraints","venue":"stat.ML","work_id":"c2a6e087-3ba9-49ee-9661-09b554ef10c1","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.658442Z"},"links":{"cited_paper":"/paper/1805.10204","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:486b0a2c8f1ab9a91977ac5ffa935190eace7302a7022c5a6b9d681c4059ae39","observation_id":"2c1eccf7-8d14-41dd-986d-b613acb0ff11","resolution":{"observed_at":"2026-08-14T15:03:47.206476Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.02175","last_updated":"2019-08-12T14:36:10Z","snapshot_observed_at":"2026-08-14T16:36:33.861447Z","submitted_at":"2019-05-06T17:45:05Z","title":"Adversarial Examples Are Not Bugs, They Are Features","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.02175","snapshot_observed_at":"2026-08-14T15:03:46.667194Z","title":"Adversarial examples are not bugs, they are features,","venue":null,"work_id":null,"year":1905},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.667194Z"},"links":{"cited_paper":"/paper/1905.02175","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:b4b81a7318d9e4c471dad467a24ff9bbd3a54e552f63013c84e1685604d583c5","observation_id":"19356489-4b5d-4c3f-bd3b-f09ae74ebbd7","resolution":{"observed_at":"2026-08-14T15:03:46.667194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.789116Z","title":"Disentangling adversarial robust- ness and generalization,","venue":null,"work_id":"94c4eba4-f2ac-4b1e-b33f-ca196664ed43","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.675163Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d5601db0da5b3f39466482a78dd1e8b31b423811d54dfc034b37274a142e8fb9","observation_id":"d1566e90-f577-4d0a-aacf-984d66dbc72a","resolution":{"observed_at":"2026-08-14T15:03:47.795094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-14T21:49:09.424265Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T15:03:46.681071Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.681071Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:591d723bbdecc2d1d28dba9f513a9ea7d03ad589b91a9616bb063bf1b28dc3f6","observation_id":"13ec7ec7-3ece-437c-9121-1a8a448be04f","resolution":{"observed_at":"2026-08-14T15:03:46.681071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.691218Z","title":"Deepfool: a simple and accurate method to fool deep neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.691218Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:b1059375f10402f6e7c1c78054b489f555ae8b5a966a30c4f6de39a4fc88ea7b","observation_id":"a46f3a2a-7437-4085-a12c-6e89cb5baaa6","resolution":{"observed_at":"2026-08-14T15:03:46.691218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.698199Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.698199Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:facd36692441289d2f71a0b000e71dfdebc1134edbcef2d8bb672bb0348d0a25","observation_id":"52b5d33d-3d2e-4888-ba5e-54831f19f17c","resolution":{"observed_at":"2026-08-14T15:03:46.698199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.704948Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.704948Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:905c5002fac1f0fb13012a634c5b8adcdc32c37b54135461e38f00e3c0479bc4","observation_id":"a55d2ed3-87bd-4ee8-b4da-4056fd611585","resolution":{"observed_at":"2026-08-14T15:03:46.704948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.710455Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.710455Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:7d97904f84213ad8fedc216959d47e296755934939a91ba828d7fc6daaccd43a","observation_id":"2c954a21-4b40-40fd-ac52-defd5596fae4","resolution":{"observed_at":"2026-08-14T15:03:46.710455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.719318Z","title":"Ead: elastic- net attacks to deep neural networks via adversarial examples,","venue":null,"work_id":"86624c24-cdce-45fe-9de6-3f9cc29c514e","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.715370Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:9895af2b77f1789592560b854a6892bfcd75cf4a404a29291336b1a97ee3ef69","observation_id":"544dfa6f-f896-4714-9fdc-573ad2fea5be","resolution":{"observed_at":"2026-08-14T15:03:47.725790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.699662Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"df8ca41c-8cf8-4dcd-b4dd-cf58d1596748","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.721340Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:def906592fd1e96e5ad1b5cf149799df1c41ae9f5407437b13a0e492577ca918","observation_id":"48b37ac3-188d-47d0-83bb-f54481e9febf","resolution":{"observed_at":"2026-08-14T15:03:47.706418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.679360Z","title":"Semantic adversarial examples,","venue":null,"work_id":"6ceefb40-f0b5-4e4e-b1ff-f0c59b0876fb","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.726204Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ad4c1cb6612e20a6b5cab259582d903b0f4a32ec6c5b0f5ee17d58128a0608c3","observation_id":"44f3bfde-8268-45a0-8ad0-3c8e3f6aed8e","resolution":{"observed_at":"2026-08-14T15:03:47.685121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1809.02786","last_updated":"2018-12-22T09:07:32Z","snapshot_observed_at":"2026-08-15T22:41:42.966566Z","submitted_at":"2018-09-08T10:26:50Z","title":"Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1809.02786","doi":null,"metadata_source":"pith","pith_arxiv_id":"1809.02786","snapshot_observed_at":"2026-08-14T15:03:47.125528Z","title":"Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples","venue":"cs.LG","work_id":"a8aaebd8-5901-4851-9e56-c8e8e06cb5e3","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.731084Z"},"links":{"cited_paper":"/paper/1809.02786","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d24875666bbbd14d4c6460db088b4c6632d9a654e6c2825046bcb52ed6d0b9e0","observation_id":"e11e16f8-b83f-4c20-ae08-9a52535f84f8","resolution":{"observed_at":"2026-08-14T15:03:47.132104Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.737003Z","title":"Distillation as a defense to adversarial perturbations against deep neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.737003Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:0a7cf48ac50de4c52ec059dc6843ed4e5fc22a53736a12cefd77a8228f91b2ac","observation_id":"155a8e3d-564d-47f5-99fb-c69493ce8057","resolution":{"observed_at":"2026-08-14T15:03:46.737003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.643116Z","title":"Ensemble selection from libraries of models,","venue":null,"work_id":"d4d36b17-a8bb-41c2-92b5-a7588e86453f","year":2004},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.742403Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:66511769b7b9e56c130d48f500c35cee0cc35d63b7fa099a07d1c6ce6aca3bea","observation_id":"d96c4027-7118-462c-9b3c-fc65557c9ab9","resolution":{"observed_at":"2026-08-14T15:03:47.652845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.02654","last_updated":"2017-11-29T22:41:25Z","snapshot_observed_at":"2026-08-15T12:06:22.771242Z","submitted_at":"2017-04-09T20:21:43Z","title":"Enhancing Robustness of Machine Learning Systems via Data Transformations","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.02654","snapshot_observed_at":"2026-08-14T15:03:46.748271Z","title":"Dimensionality reduction as a defense against evasion attacks on machine learning classifiers,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.748271Z"},"links":{"cited_paper":"/paper/1704.02654","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:6cfe74b238c9300d59e3fd5abf26ba4fd685a97c37cc26b535893b0dd69fa5ba","observation_id":"2c8f9ad6-90ea-4412-806c-8ecef70e8fd9","resolution":{"observed_at":"2026-08-14T15:03:46.748271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.621616Z","title":"Thermometer encoding: One hot way to resist adversarial examples,","venue":null,"work_id":"12b1b19d-6130-4052-bba5-a9ac737f22f9","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.755439Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d955de3cbadd1f61c51bb904af99cf922cb5cc56a4274eba5de28bbe40af3a20","observation_id":"aed0a8b9-3664-47f0-92d8-4c43e78e7618","resolution":{"observed_at":"2026-08-14T15:03:47.628122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.06605","last_updated":"2018-05-18T00:20:52Z","snapshot_observed_at":"2026-08-15T23:59:07.582902Z","submitted_at":"2018-05-17T05:38:55Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.06605","snapshot_observed_at":"2026-08-14T15:03:46.760997Z","title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.760997Z"},"links":{"cited_paper":"/paper/1805.06605","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:58e18174197480b33f7b905710e9af83b61612b36abf0ee04f94621a7de63be3","observation_id":"126517ce-fd97-41c7-a5a4-cf662462746f","resolution":{"observed_at":"2026-08-14T15:03:46.760997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.595935Z","title":"Comdefend: An efficient image compression model to defend adversarial examples,","venue":null,"work_id":"f50e52f4-997c-45f6-add8-afcc666f27d2","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.768245Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:fd10c6ba9b12558e1013cf861404d1cd96c22e8ba4e2b13d31ed63d2540bf44a","observation_id":"0a818c1e-987c-437f-820b-379f5cd53b50","resolution":{"observed_at":"2026-08-14T15:03:47.602052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06806","last_updated":"2019-04-25T22:32:22Z","snapshot_observed_at":"2026-08-14T19:44:25.812087Z","submitted_at":"2018-02-19T19:01:56Z","title":"Divide, Denoise, and Defend against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"1802.06806","doi":null,"metadata_source":"pith","pith_arxiv_id":"1802.06806","snapshot_observed_at":"2026-08-14T15:03:47.036457Z","title":"Divide, Denoise, and Defend against Adversarial Attacks","venue":"cs.CV","work_id":"a71eec46-e85e-4250-a050-e4ca75513614","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.774504Z"},"links":{"cited_paper":"/paper/1802.06806","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:7893b6939f7ed29ebb474649b39dbc28b6377d08180caa4eabb2f5a2ebb4de9f","observation_id":"9587b16c-764b-4310-a503-b7c04ddd9f19","resolution":{"observed_at":"2026-08-14T15:03:47.046951Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.780958Z","title":"Image blind denoising with generative adversarial network based noise modeling,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.780958Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:6c505a32a15c88397656e0b225c2885bdc51babfa84b8222110156d02d77c241","observation_id":"c0824c01-abfc-4bf1-8a95-895da7d9cab9","resolution":{"observed_at":"2026-08-14T15:03:46.780958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.553316Z","title":"Deflecting adversarial attacks with pixel deflection,","venue":null,"work_id":"fdd4dce3-5396-47ba-bef0-bd3ab75d6495","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.786256Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:a073d4ee1d5a197cf3214b7062d1ad0b287bb98fd766b4029ca3802cc9f41f1f","observation_id":"4543717b-dd00-429a-8963-77a368193936","resolution":{"observed_at":"2026-08-14T15:03:47.559767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.00410","last_updated":"2017-11-15T23:31:59Z","snapshot_observed_at":"2026-08-14T21:14:04.215100Z","submitted_at":"2017-03-01T17:43:10Z","title":"Detecting Adversarial Samples from Artifacts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.00410","snapshot_observed_at":"2026-08-14T15:03:46.792404Z","title":"Detecting adversarial samples from artifacts,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.792404Z"},"links":{"cited_paper":"/paper/1703.00410","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:64a05ba857ad09728d02fd208e16f5ee25ea598a6329d923484ad12415ffcecd","observation_id":"5c0738cc-8b47-4328-bcaf-ca52cd5fb91a","resolution":{"observed_at":"2026-08-14T15:03:46.792404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1702.06280","last_updated":"2017-10-17T11:12:44Z","snapshot_observed_at":"2026-08-14T21:15:34.436979Z","submitted_at":"2017-02-21T07:03:11Z","title":"On the (Statistical) Detection of Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.06280","snapshot_observed_at":"2026-08-14T15:03:46.802243Z","title":"On the (statistical) detection of adversarial examples,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.802243Z"},"links":{"cited_paper":"/paper/1702.06280","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:f54cabcd07232a4453462b30c80b5d970dcfc1d25d1ef3c03a0be327366528d0","observation_id":"8de1c042-b226-4ce3-af56-b65575bafe2d","resolution":{"observed_at":"2026-08-14T15:03:46.802243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02613","last_updated":"2018-03-14T07:24:10Z","snapshot_observed_at":"2026-08-14T19:56:59.076369Z","submitted_at":"2018-01-08T18:54:40Z","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02613","snapshot_observed_at":"2026-08-14T15:03:46.811501Z","title":"Characterizing adversar- 13 ial subspaces using local intrinsic dimensionality,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.811501Z"},"links":{"cited_paper":"/paper/1801.02613","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ce22b71f2fb5039219b94561d1845d0b44cfd111fda838667f4880026593c7fe","observation_id":"de192b60-160e-4895-bf0d-beb018382287","resolution":{"observed_at":"2026-08-14T15:03:46.811501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.535737Z","title":"Safetynet: Detecting and rejecting adversarial examples robustly,","venue":null,"work_id":"10118618-95f1-4d23-94c3-54a8861b1a08","year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.823014Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:565f6d575c0e79990c67828a8efa3fb7806250c5c4cd63ef592bc40ed9738e6b","observation_id":"98bf8a64-d545-40e8-ad09-1ddca572178b","resolution":{"observed_at":"2026-08-14T15:03:47.542215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.514776Z","title":"Detecting adversarial image examples in deep neural networks with adaptive noise reduction,","venue":null,"work_id":"d483d67a-0460-40a9-b24c-7e3ddef44a99","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.829420Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:54857da38801f55a309678093e163a1844695ca780f919975ff5e1303b5e4943","observation_id":"6a23e747-c6d8-4d8f-8dfd-f9d600ef6161","resolution":{"observed_at":"2026-08-14T15:03:47.521388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.496032Z","title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks,","venue":null,"work_id":"d51a4faa-d7ae-4832-abce-77429f5dc481","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.836455Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:6ac91eeb257ef002052fb3c8fc8de572e1612ca23622417d9c836c6d1932af26","observation_id":"1a67eed5-02b4-407a-bc72-d8f5a10da7b2","resolution":{"observed_at":"2026-08-14T15:03:47.501929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.467829Z","title":null,"venue":null,"work_id":"b94e6a92-69cf-45fc-9475-097c706a36a5","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.843666Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:4dd1f782e6a68e81fb0dd85db217a348fe5c5eb8a15d3132e384bf43a79e55fa","observation_id":"44c2b949-915e-4605-a6ec-bd63bfb5fc62","resolution":{"observed_at":"2026-08-14T15:03:47.477771Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.849082Z","title":"Optimization by simulated annealing,","venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.849082Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:54db7e9f7e08fd6f22e56c12ee3c34c48fc9291f96d93342ef6c43b3a655af0e","observation_id":"744734c5-e416-4eb5-a25c-dbbad0cbabd8","resolution":{"observed_at":"2026-08-14T15:03:46.849082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.424061Z","title":null,"venue":null,"work_id":"12f6ad82-7279-41b0-acdd-42e8dddf0297","year":2007},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.858546Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:7793467c11cb0eebf6eaaf68f44c44c70eea59e7c61e2c48702efac66fde5f4d","observation_id":"7110b051-e513-4e6e-8bae-fb8ce7c703df","resolution":{"observed_at":"2026-08-14T15:03:47.434069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-08-14T21:36:55.675026Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-08-14T15:03:46.865380Z","title":"Technical report on the cleverhans v2.1.0 adversarial examples library,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.865380Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:46fd0fee2931606b7a76566d7e22657b7cb2af543f48ec58293e1b929ba08c75","observation_id":"32ec1baf-133d-460d-b1cb-e7c7537448d6","resolution":{"observed_at":"2026-08-14T15:03:46.865380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T16:26:09.400794Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":3,"verified_fuzzy":17},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:1908.02658."}