{"as_of":"2026-08-23T08:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:83f6233b5390561c1478e6baa5e80734895e84d17b36015cbd1f633e88b87c20","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T13:30:49.093406Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-23T06:30:58.430688+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.05008/citation-record","integrity":"/paper/1908.05008/integrity","json":"/paper/1908.05008/citation-record.json","paper":"/paper/1908.05008"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.731706Z","title":null,"venue":null,"work_id":"afc6cfe2-f951-488b-845e-a92273b692ea","year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.888702Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:daa3ff35ceb11c9f685c3d7080ec6d697db560ba66c6c977cab9172a835e93fb","observation_id":"4aaec03b-5055-45b3-a803-2cf9c3d2d5a1","resolution":{"observed_at":"2026-08-14T13:30:49.736449Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.09387","last_updated":"2017-03-28T03:24:33Z","snapshot_observed_at":"2026-08-19T20:21:26.212780Z","submitted_at":"2017-03-28T03:24:33Z","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.09387","snapshot_observed_at":"2026-08-14T13:30:48.893868Z","title":"Adversarial transformation networks: Learning to generate adversarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.893868Z"},"links":{"cited_paper":"/paper/1703.09387","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:973ed5bf3abf922d3fd2fed6f45637f8bc8d00c2c1b2588b7109ef06883c5ccc","observation_id":"be081667-ea87-4ec3-9d64-6770ba595669","resolution":{"observed_at":"2026-08-14T13:30:48.893868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.718574Z","title":"Adversarial attacks on face detectors using neural net based constrained opti- mization","venue":null,"work_id":"9b7e35e4-36d9-44a6-b2ce-e8e0c98d6fa8","year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.899030Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:7bf7435958d13a6af4170e05e677be9f02445fd2b3f01e9204771188e7b24943","observation_id":"666f51b5-a62a-49e6-8da5-bde8faccf12f","resolution":{"observed_at":"2026-08-14T13:30:49.723168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.704840Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"b6cb47f4-257b-4ef9-b60d-7592fddec842","year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.903852Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:54a2bd238c590333a3ee54b65c1d0880967e4e6287b695862c8f212585489e72","observation_id":"bae6a70d-612a-4d23-8472-5d398882cd41","resolution":{"observed_at":"2026-08-14T13:30:49.709515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.690910Z","title":"Fast geometrically-perturbed adversarial faces","venue":null,"work_id":"270ca36d-1c51-43df-b47a-976bbfcdc9e7","year":1979},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.908088Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:3096538f69e5e3f22cf03836e577432602a120aa8711b0e6738d23afe4ff9358","observation_id":"73c8bf63-e0a7-4c46-9d03-26582aad18ad","resolution":{"observed_at":"2026-08-14T13:30:49.695447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.677088Z","title":"Arcface: Additive angular margin loss for deep face recognition","venue":null,"work_id":"6d3b2eb5-5717-4033-b60a-24250efe8b6e","year":2019},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.912606Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:0ff01d61b7816716b73800d7ddfbb7526d3555b4cb01c5e29e4462ec543a01da","observation_id":"1ae79c81-654a-44ff-8e29-a1ea98c51b37","resolution":{"observed_at":"2026-08-14T13:30:49.681465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.663671Z","title":"Deep generative image models using a laplacian pyramid of adver- sarial networks","venue":null,"work_id":"530910d4-d51a-40a6-be73-d73b74af5e1c","year":2015},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.917203Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:597116a6aabedfa1e434dccde636fcfb95fa11598ee8c357feacba80eeb177f4","observation_id":"2ae53790-dce8-4da1-a2ec-52f927a15d5a","resolution":{"observed_at":"2026-08-14T13:30:49.667914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.649700Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"e9e053de-e7aa-401f-86ec-bd3e397ef826","year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.921674Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:ba2624ac178c47e000bc03508ea78179d433b28b7ab687ec3b49156ff3d11f44","observation_id":"3bb394c1-3d66-4b58-a842-dbe77a072802","resolution":{"observed_at":"2026-08-14T13:30:49.654356Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.636051Z","title":"Efficient decision-based black- box adversarial attacks on face recognition","venue":null,"work_id":"c3c48638-1af7-4892-b041-6756c4481508","year":2019},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.926030Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:8bfbd8d2c400e0471fed4e4cd1748ccd74f06c235efb17b362ba33e4055e5d19","observation_id":"fc703d82-bec1-4793-8012-8e5703063983","resolution":{"observed_at":"2026-08-14T13:30:49.640730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-14T20:44:49.961329Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-14T13:30:48.931111Z","title":"Robust physical-world attacks on deep learning models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.931111Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:f5dde10b516348b3fe86800595084dd035dfea3443819363c2830c4d10c23b1c","observation_id":"78fde251-ab5f-4924-8cd6-2ed8dad25c03","resolution":{"observed_at":"2026-08-14T13:30:48.931111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.620945Z","title":"Im- age style transfer using convolutional neural networks","venue":null,"work_id":"df791d3c-fc05-45a3-8eff-7c91101eb2b7","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.935968Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:405699ca9403b48bf09a4939616e091019f96ac89b3c2fbf1aec96024ff65994","observation_id":"71e64ffe-bdf0-4f8a-9d6b-1a884c189b7b","resolution":{"observed_at":"2026-08-14T13:30:49.626138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.605888Z","title":"Generative adversarial nets","venue":null,"work_id":"1ce5a9d2-0d81-40af-9da4-a30326d6d0ad","year":2014},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.940398Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:b02d68b3173e461dcf12456f924e9dfe8deee53158f1cd3e072081cbecd77fae","observation_id":"01ceb098-73ec-4ccb-b18a-c804a956231b","resolution":{"observed_at":"2026-08-14T13:30:49.610399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T13:30:48.944751Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.944751Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:05da3afc794b2868073a6c8a8368a034ac2ce8491c1c2562439c7caaf47f3fdb","observation_id":"25f221a2-6975-4f8c-9584-0eea3771eff2","resolution":{"observed_at":"2026-08-14T13:30:48.944751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.591879Z","title":"Unravelling robustness of deep learning based face recognition against adversarial attacks","venue":null,"work_id":"445a08c3-097f-4e3e-af22-12d4ec4697f0","year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.949615Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:16c3811e3752753e481374f21b044354d25caa06a3296e456116d9e4b101f2c5","observation_id":"4d8f7826-edf5-4b35-9098-f51584c08b1d","resolution":{"observed_at":"2026-08-14T13:30:49.596581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.577859Z","title":"Report on the evaluation of 2d still-image face recognition algorithms","venue":null,"work_id":"6477b7ab-8bc8-46ab-b837-897241a89a04","year":2010},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.953913Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:7eda950e83f25e9ff46161cb7cac687303f482db340820009e54437bf7d66bd2","observation_id":"93df0ea8-0d23-43ca-a119-f31263da6f38","resolution":{"observed_at":"2026-08-14T13:30:49.582397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.563932Z","title":"Huang, Manu Ramesh, Tamara Berg, and Erik Learned-Miller","venue":null,"work_id":"c3049849-3f48-4497-b4c6-2b10d7b436f4","year":2007},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.958748Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:17259dbaad428e213f2be6ede3d593a28da57e25b0eaee9454d4d9f7e1f68367","observation_id":"96161adb-4c19-4dc3-9038-f375187b4ce1","resolution":{"observed_at":"2026-08-14T13:30:49.568490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.549207Z","title":"Image-to-image translation with conditional adver- sarial networks","venue":null,"work_id":"9d79936e-ad04-41bc-854a-427bbc958a42","year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.963771Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:be20bb5c556eccf692cc248302bc38d7d54365e972ba39236f80697ab14b070a","observation_id":"69b30a2e-78b5-4c65-a100-cd1401becdd8","resolution":{"observed_at":"2026-08-14T13:30:49.554210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:48.968089Z","title":"Perceptual losses for real-time style transfer and super-resolution","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.968089Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:359cfa95c70a13fa765bcb8da65feb33d1d0863c0279a2ec459e179754a61988","observation_id":"12a156e5-f0d5-4e35-9991-762c151bb883","resolution":{"observed_at":"2026-08-14T13:30:48.968089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-17T02:26:19.835254Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T13:30:48.972123Z","title":"Ad- versarial machine learning at scale","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.972123Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:6549775d075ec2ad82b68d4bb4563fb75fbbfb12d2e0d495901fd23f7463dcc7","observation_id":"eb071616-99fd-40f4-af4e-627c798cf240","resolution":{"observed_at":"2026-08-14T13:30:48.972123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.526884Z","title":"Sphereface: Deep hypersphere embedding for face recognition","venue":null,"work_id":"d5e244f2-3711-44f4-b584-233740231188","year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.976607Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:24860fad19fd93e1aa39a71e140914c1874b8d4cd496ccf13bd7da5f82ebf315","observation_id":"91d169e2-9e47-4353-9448-6e10c9536b43","resolution":{"observed_at":"2026-08-14T13:30:49.531043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-18T17:48:45.518915Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-14T13:30:48.981369Z","title":"Delving into transferable adversarial examples and black- box attacks","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.981369Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:107209d60b90638ef9f7bc720a53c1d1636db16558fbf197beccb75b13687a62","observation_id":"bbbee2c0-298f-4ad1-ba7d-6e9fac3fc569","resolution":{"observed_at":"2026-08-14T13:30:48.981369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-14T13:30:48.985789Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.985789Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:adefaa38ff2cdfb2d808043163dd1c0b8fad9b2d1b9eca3ea997bc18a254c6a4","observation_id":"4366ed31-cc96-46d8-b644-04da02a98e7a","resolution":{"observed_at":"2026-08-14T13:30:48.985789Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.513022Z","title":"Disentan- gling factors of variation in deep representation using adver- sarial training","venue":null,"work_id":"2f65dc6a-e330-4322-b161-8a3ad2ee4f0a","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.990706Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:01328f4efd6e287edc071569f47d044ad6ea05ccc62a3a79954242bb4586e7cb","observation_id":"06f63835-dc40-4a25-a5ef-d331d717537d","resolution":{"observed_at":"2026-08-14T13:30:49.518085Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.499765Z","title":"Universal adversarial perturba- tions","venue":null,"work_id":"eb59bf97-35b0-4873-922d-c2e852ba08e2","year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:48.995852Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:467e3d6be62ae7a7367ca6864a91f63ef46ad1412d8b62b4b82e17cf9cb7a2d2","observation_id":"1e960399-73c6-46f6-ae23-e09faaea0f5a","resolution":{"observed_at":"2026-08-14T13:30:49.504104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.486368Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"b972e112-324f-493a-bcf2-8d5eae431661","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.000262Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:99035cc7c2c7c236e253c161dcdb04f7280070c838639490d280527f38896613","observation_id":"28a9aac4-96ec-4dff-a23f-72ca60581f02","resolution":{"observed_at":"2026-08-14T13:30:49.490981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.472830Z","title":"The limitations of deep learning in adversarial settings","venue":null,"work_id":"a01363dc-8f47-474d-bd52-244d34c2f9bc","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.004584Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:6107fa8bee82c4078094adc333776646302d037ff11270e6447068be6bfa89ab","observation_id":"5f0767d4-ee2a-4499-abf1-0c0c18528db5","resolution":{"observed_at":"2026-08-14T13:30:49.477252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.06434","last_updated":"2016-01-07T23:09:39Z","snapshot_observed_at":"2026-08-12T18:43:14.431633Z","submitted_at":"2015-11-19T22:50:32Z","title":"Unsupervised Representation Learning with Deep Convolutional Generative Adversarial Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.06434","snapshot_observed_at":"2026-08-14T13:30:49.013299Z","title":"Un- supervised representation learning with deep convolu- tional generative adversarial networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.013299Z"},"links":{"cited_paper":"/paper/1511.06434","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:68e88b75c73a74258f6685eb0ea782ff61ed026704e827c6984b78dfa6a5e3e6","observation_id":"8ae94be9-3c77-46fd-8106-0f252fef1fd1","resolution":{"observed_at":"2026-08-14T13:30:49.013299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.459894Z","title":"Ratha, Jonathan H","venue":null,"work_id":"a4c5be4d-13db-476b-b387-5c9cab2ee803","year":2001},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.017314Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:642bc1d80c855462abe572a1b831be23282ab082aa3b48ff6d2f4862bb3737aa","observation_id":"e232c1d8-6d65-4600-9e43-6282a07c77dd","resolution":{"observed_at":"2026-08-14T13:30:49.464257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.446845Z","title":"Improved techniques for training gans","venue":null,"work_id":"88a92b07-19d4-4339-a851-814bdb61588a","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.021292Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:30a741f808fc25dc4ba191eaf8cb9b45a3a7cef068ab0f8c3e26be93d7522dd0","observation_id":"7fda558e-252a-40b7-83b5-0b4e12238c82","resolution":{"observed_at":"2026-08-14T13:30:49.451158Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.432617Z","title":"Facenet: A unified embedding for face recognition and clus- tering","venue":null,"work_id":"f58669a8-375c-436b-907a-8b635c815fb6","year":2015},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.026152Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:3f9a0800608df1143ce8703521672733c8bfc349c0608d9d646515a3088cc1f9","observation_id":"7394ae27-9928-42bf-8a7d-ac8537b2d669","resolution":{"observed_at":"2026-08-14T13:30:49.437024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.419500Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"7dc4fcf6-3ef4-4804-ad88-5435819b1d08","year":2016},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.031413Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:edfcec4d7f093b15f21b85f3ff7e042a37a9ab0c6aa340ebe029a196b2d330fa","observation_id":"3c694e26-c415-45f2-9168-df2af66681a5","resolution":{"observed_at":"2026-08-14T13:30:49.423871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.406028Z","title":"A general framework for adversarial ex- amples with objectives","venue":null,"work_id":"85b20b72-577d-4cdf-8a4d-23c9bbd5e935","year":2019},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.035571Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:c7bb7cf5da5356d834890c8f57a3c5eb232a6cfb671d6e71c8d1b1d2395b879d","observation_id":"8d858851-7109-4395-a34a-9e2acad0946c","resolution":{"observed_at":"2026-08-14T13:30:49.410909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12026","last_updated":"2018-11-30T02:03:16Z","snapshot_observed_at":"2026-08-14T17:51:31.154747Z","submitted_at":"2018-11-29T09:14:56Z","title":"Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network","version":2},"cited_work":{"arxiv_id":"1811.12026","doi":null,"metadata_source":"pith","pith_arxiv_id":"1811.12026","snapshot_observed_at":"2026-08-14T13:30:49.197609Z","title":"Attacks on State-of-the-Art Face Recognition using Attentional Adversarial Attack Generative Network","venue":"cs.CV","work_id":"b72a2339-c379-46e0-a4db-4aecfd2eeb3c","year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.039962Z"},"links":{"cited_paper":"/paper/1811.12026","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:58d7b282188d8740eb0608cb72b09e89d781a04244351d551e292b4ae0c497c4","observation_id":"e097fe2f-b84b-419a-b17a-4099d978b155","resolution":{"observed_at":"2026-08-14T13:30:49.204611Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.392996Z","title":"Constructing unrestricted adversarial examples with genera- tive models","venue":null,"work_id":"5b962ce2-ffcb-444f-bd49-5686163afd10","year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.044332Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:3df7a6a6e84f2ae3eb2b6256c525138c5cefe253e4ead99126b0705da8982fe1","observation_id":"5fe39a68-2593-40cc-9e39-fe7d7c7e5ce0","resolution":{"observed_at":"2026-08-14T13:30:49.397458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T13:30:49.048775Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.048775Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:d16dfdba7d11025b57900dad9b25e7b06c43996b846534d62d55537d7168c63b","observation_id":"cdb25866-bad3-4a0e-a744-faa5f8a5d170","resolution":{"observed_at":"2026-08-14T13:30:49.048775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.379199Z","title":"Texture networks: Feed-forward synthesis of textures and stylized images","venue":null,"work_id":"583055eb-5e75-486c-88ea-fa0de1482acc","year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.052861Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:5669b52454b538f98e94628cf74486d62d8792644f14f7a50cb0c9f7777e7949","observation_id":"3f35e92d-3390-43ed-bcdc-8f45118824f9","resolution":{"observed_at":"2026-08-14T13:30:49.383533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.364899Z","title":"Customs and Border Protection","venue":null,"work_id":"a430c6a2-944e-452f-bfd2-e98b8812c1ea","year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.057209Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:dd9b883e8e0efeff36987f6c9a0cc12f4bd6a1ba3e1eb8aafbc0d840ff514606","observation_id":"e0b50a70-fb78-4ccb-a6a5-6c0629fcdc7b","resolution":{"observed_at":"2026-08-14T13:30:49.369149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.07793","last_updated":"2020-02-07T18:11:58Z","snapshot_observed_at":"2026-08-15T22:42:22.279246Z","submitted_at":"2019-04-16T16:26:19Z","title":"AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.07793","snapshot_observed_at":"2026-08-14T13:30:49.061390Z","title":"AT-GAN: A Generative Attack Model for Adversarial Transferring on Generative Adversarial Nets","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.061390Z"},"links":{"cited_paper":"/paper/1904.07793","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:5c41317cd0e40a66926d120fac94e11358b4d12484bfb77d3478a2b6ebd7a7bd","observation_id":"669d9a35-bc0d-407b-aec0-0fb33470eadf","resolution":{"observed_at":"2026-08-14T13:30:49.061390Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.351515Z","title":"Structural similarity","venue":null,"work_id":"ab344360-89cf-4170-afea-9cb5a7b7edde","year":2019},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.066183Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:8f60196f0d87cbdd02f9500a6eefd0fc79d47c3489bf91b0f4d4913613fd68c0","observation_id":"e5627c98-c5dd-494e-93f4-e287305f3caf","resolution":{"observed_at":"2026-08-14T13:30:49.355603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.337957Z","title":null,"venue":null,"work_id":"d0e5b2a0-6a1c-46f9-bf64-0f16ee63b579","year":2019},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.070426Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:13bc66bf30dfa0ce234a00509952448cf939e19974e0c51268c6be24d830dd1f","observation_id":"beeb8f1d-3af2-4628-a34e-9921ca74e4ed","resolution":{"observed_at":"2026-08-14T13:30:49.342401Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-14T19:56:59.239473Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-14T13:30:49.074498Z","title":"Generating adversarial examples with adversarial networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.074498Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:30179e6668668a5ada7af1d5347dde3580d0439a94368136b290e86aeab66044","observation_id":"010b340b-37e0-43d8-adf2-f5309b99db48","resolution":{"observed_at":"2026-08-14T13:30:49.074498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02612","last_updated":"2018-01-09T19:03:32Z","snapshot_observed_at":"2026-08-18T13:45:39.627332Z","submitted_at":"2018-01-08T18:51:59Z","title":"Spatially Transformed Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02612","snapshot_observed_at":"2026-08-14T13:30:49.080069Z","title":"Spatially transformed adversarial ex- amples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.080069Z"},"links":{"cited_paper":"/paper/1801.02612","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:81c73668d6219a09cd40aad8203af1dbfbdf60d4d3727dae52d529eb038c4ee0","observation_id":"f9e24e92-f255-43fb-9a1f-de96fd9ab59e","resolution":{"observed_at":"2026-08-14T13:30:49.080069Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1411.7923","last_updated":"2014-11-28T16:05:18Z","snapshot_observed_at":"2026-08-14T23:09:48.219510Z","submitted_at":"2014-11-28T16:05:18Z","title":"Learning Face Representation from Scratch","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.7923","snapshot_observed_at":"2026-08-14T13:30:49.084799Z","title":"Learn- ing face representation from scratch","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.084799Z"},"links":{"cited_paper":"/paper/1411.7923","citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:513db6eff52055e290b6f7a4d753d76c2f4001db2f95acd2802764a1aa3df536","observation_id":"308d1e90-f468-4ddb-b32e-93a3e09b94f2","resolution":{"observed_at":"2026-08-14T13:30:49.084799Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.323245Z","title":"Joint face detection and alignment using multitask cascaded convolutional networks","venue":null,"work_id":"ae7450bd-5c0f-488f-b1e7-1086663e8c9d","year":null},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.089262Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:8576d4a04bb3d7971693eaeaedcb5a1177fca2ee211dfc0e1f98b98dfeb4b2ca","observation_id":"5bf13380-68a5-43a8-8a40-883109376e55","resolution":{"observed_at":"2026-08-14T13:30:49.327728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:30:49.309610Z","title":"adversarial mask","venue":null,"work_id":"81a72b54-0150-4de5-82de-f238c93f41d5","year":2017},"citing_paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-14T13:30:49.093406Z"},"links":{"citing_paper":"/paper/1908.05008"},"observation_digest":"sha256:54886693f68b5a8f18ba24c82edf358af43f49f02bdf0ae9f0da57ef09d2ec71","observation_id":"425569a8-5c18-4002-bde9-e6cf9cd645d9","resolution":{"observed_at":"2026-08-14T13:30:49.314015Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.05008","last_updated":"2019-08-14T07:58:00Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-22T21:55:58.282029Z","submitted_at":"2019-08-14T07:58:00Z","title":"AdvFaces: Adversarial Face Synthesis"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":1,"verified_fuzzy":28},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-23T06:30:58.430688+00:00","source":"crossref"},{"observed_at":"2026-08-23T06:30:53.778098+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:1908.05008."}