{"as_of":"2026-08-18T05:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a712b9fcec10134e0e9684cd0a1f35243bdaf77abbc44f0b4e97c7874139c3e7","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T13:25:39.045656Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.05185/citation-record","integrity":"/paper/1908.05185/integrity","json":"/paper/1908.05185/citation-record.json","paper":"/paper/1908.05185"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1703.09387","last_updated":"2017-03-28T03:24:33Z","snapshot_observed_at":"2026-08-14T21:09:42.918858Z","submitted_at":"2017-03-28T03:24:33Z","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.09387","snapshot_observed_at":"2026-08-14T13:25:38.925376Z","title":"Adversarial transformation networks: Learning to generate adversarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.925376Z"},"links":{"cited_paper":"/paper/1703.09387","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:caf129f6d92933f96a2132703e34c9294b02f1f1bc9bc3b2cdf0803fc3135069","observation_id":"6e84d196-48dd-4715-9ca2-f2e8f3bf14a0","resolution":{"observed_at":"2026-08-14T13:25:38.925376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.929720Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.929720Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:415cd933d9c36982e33880322e9ead889a5f9fc87eb9eb1a58e2a1d820b46ace","observation_id":"5b92481d-c564-4f48-b0f0-01abaa57e5b4","resolution":{"observed_at":"2026-08-14T13:25:38.929720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.02900","last_updated":"2017-05-08T14:55:32Z","snapshot_observed_at":"2026-08-14T21:02:09.542332Z","submitted_at":"2017-05-08T14:55:32Z","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.02900","snapshot_observed_at":"2026-08-14T13:25:38.933230Z","title":"Kounavis, and Duen Horng Chau","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.933230Z"},"links":{"cited_paper":"/paper/1705.02900","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:104ab634a8caa8995e1f1ed6cc6a9e9ca00420f463f305eea48d795f06f64ada","observation_id":"783e60e0-64c4-44a0-b3cd-ecbd9e0e620d","resolution":{"observed_at":"2026-08-14T13:25:38.933230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.937128Z","title":"Imagenet: A large-scale hierarchical im- age database","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.937128Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:9ec878b6a93c1bd6f045b620e8ff7c8993395111dd1a658ce72468a31dbfc98e","observation_id":"e1c44a48-7f7c-469f-9b90-a1c13e845f26","resolution":{"observed_at":"2026-08-14T13:25:38.937128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.06081","last_updated":"2018-03-22T12:46:44Z","snapshot_observed_at":"2026-08-15T08:36:59.613655Z","submitted_at":"2017-10-17T04:03:04Z","title":"Boosting Adversarial Attacks with Momentum","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.06081","snapshot_observed_at":"2026-08-14T13:25:38.945227Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.945227Z"},"links":{"cited_paper":"/paper/1710.06081","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:b1742b01cf16db86b8c86e4e6e5e3aba6407c94b836633673431e31d13fa42cd","observation_id":"d483d60c-c906-4659-8c59-8faa5a604dbb","resolution":{"observed_at":"2026-08-14T13:25:38.945227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.367828Z","title":"Practical methods of optimization","venue":null,"work_id":"fef11614-1fdd-4371-8198-328e83f1dd6b","year":2013},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.949014Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:830a72886dd902a7bdd5e90e4d5a10797e80adf4eb5579729823789ea8ab106c","observation_id":"75776313-a353-4757-8fdf-f7ecada9e501","resolution":{"observed_at":"2026-08-14T13:25:39.371280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.03122","last_updated":"2017-07-25T01:40:57Z","snapshot_observed_at":"2026-08-14T21:02:01.058213Z","submitted_at":"2017-05-08T23:25:30Z","title":"Convolutional Sequence to Sequence Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.03122","snapshot_observed_at":"2026-08-14T13:25:38.952585Z","title":"Convolutional sequence to sequence learning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.952585Z"},"links":{"cited_paper":"/paper/1705.03122","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:70b5d543d7d45d933df2d294d84098b0ebbc0b36742ca9563d18ccee12ad8c7d","observation_id":"7901f2bd-ca2f-4b16-8cfd-c6cb037d3f6d","resolution":{"observed_at":"2026-08-14T13:25:38.952585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.955958Z","title":"Fast r-cnn","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.955958Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:af51b7555c6b7fedd1cc34d8bff7d768be1e104b53254b91b04d6667ef1fe17d","observation_id":"490d4bb3-53f2-42f1-ac99-914e2d95da2d","resolution":{"observed_at":"2026-08-14T13:25:38.955958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.351545Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"bf541b37-07cb-4d64-88da-61dc6e46767e","year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.958949Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8a759c41820e199115a4c414817cecb3cb744e306f3a8aae8369c873204706da","observation_id":"fe96f7bd-af7e-41a4-8e39-64c02dcce0e0","resolution":{"observed_at":"2026-08-14T13:25:39.355510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T13:25:38.962004Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.962004Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:f2f3a4feceefb3242c92675005238244466e6b39bfcdc402ec271f4a7bfef236","observation_id":"2d54c6f2-ec43-414e-a0af-ea6035e89edc","resolution":{"observed_at":"2026-08-14T13:25:38.962004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.5068","last_updated":"2015-04-09T21:43:29Z","snapshot_observed_at":"2026-08-14T23:07:55.262291Z","submitted_at":"2014-12-11T23:03:49Z","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.5068","snapshot_observed_at":"2026-08-14T13:25:38.965466Z","title":"Towards Deep Neural Net- work Architectures Robust to Adversarial Examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.965466Z"},"links":{"cited_paper":"/paper/1412.5068","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:ad00ee40f4f8a5af7c728faf220559ca759d38198a688c7da94698e94997618c","observation_id":"fb76b47b-8c60-4fdf-9f7c-211232b06d07","resolution":{"observed_at":"2026-08-14T13:25:38.965466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.969116Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.969116Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:eff8616975cc77b4db82cd3abd59922cfa067db2c0580993e7b480de6b26b4c9","observation_id":"c2632847-23bd-4e16-8209-01bc7f51b67b","resolution":{"observed_at":"2026-08-14T13:25:38.969116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1709.01507","last_updated":"2019-05-16T05:32:17Z","snapshot_observed_at":"2026-08-14T20:35:56.526796Z","submitted_at":"2017-09-05T17:42:13Z","title":"Squeeze-and-Excitation Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1709.01507","snapshot_observed_at":"2026-08-14T13:25:38.972238Z","title":"Squeeze-and-excitation net- works","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.972238Z"},"links":{"cited_paper":"/paper/1709.01507","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4e4dba1387773d2d1574518daecdad0b43331e07d69da72018515d9d55cf82c4","observation_id":"c996e140-7957-4c03-a95c-e12175c607db","resolution":{"observed_at":"2026-08-14T13:25:38.972238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-08-17T19:26:44.032537Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-14T13:25:38.976440Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.976440Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:0e9e18cee05d0aa54a4fc9f643b0de423e767805a15de79be5d4039239c0134d","observation_id":"ec894a65-7502-4bc8-8780-ce25890a9207","resolution":{"observed_at":"2026-08-14T13:25:38.976440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.979578Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.979578Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:91dc788b549b72950156735e76a71e1aef95c6b12bb25f1a0a5c88d2c173d931","observation_id":"b6199f2e-f2af-40b2-9012-ab155592e269","resolution":{"observed_at":"2026-08-14T13:25:38.979578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.982618Z","title":"Imagenet classification with deep convolutional neural net- works","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.982618Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:2f92b5232b962f0144907e640e05f633e7f98029cce087eae79ca83575ee85cd","observation_id":"c44eb26e-1be8-405c-a221-381d05cee0db","resolution":{"observed_at":"2026-08-14T13:25:38.982618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T13:25:38.985552Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.985552Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:e905bc884a74f8ac9a3d0018407a782cc9d24051752693fd2775fb051ce1b6e1","observation_id":"750604e3-84d7-45e5-b2f2-b2984d6fad7b","resolution":{"observed_at":"2026-08-14T13:25:38.985552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-17T02:26:19.835254Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T13:25:38.988871Z","title":"Ad- versarial Machine Learning at Scale","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.988871Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:af6c3eb905d337d29ae2b01c0fad39aa87950611d45b7b307bdb4e80daa8c1a7","observation_id":"0bd86c43-39bc-411b-b886-5d031322056d","resolution":{"observed_at":"2026-08-14T13:25:38.988871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02976","last_updated":"2018-05-08T06:06:06Z","snapshot_observed_at":"2026-08-14T20:05:37.799786Z","submitted_at":"2017-12-08T08:20:45Z","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02976","snapshot_observed_at":"2026-08-14T13:25:38.992249Z","title":"Defense against Adversarial At- tacks Using High-Level Representation Guided Denoiser","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.992249Z"},"links":{"cited_paper":"/paper/1712.02976","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8ac75b54bc67fadaa2a1a545a31e5e6644456d3d3ec3e46537208f907a6f9579","observation_id":"623011f2-8b7c-4e03-a0a5-82d66dd604b4","resolution":{"observed_at":"2026-08-14T13:25:38.992249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.323537Z","title":"Feature pyramid networks for object detection","venue":null,"work_id":"1e438c58-f8b0-4f5e-8559-cf73fa7a289c","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.995623Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:e16cfc5ec994d1fc397156e9bef89e295632821ef202da7ef422f3c45a7e1602","observation_id":"4f97b6a6-6841-4f7e-8547-ba636dcd9439","resolution":{"observed_at":"2026-08-14T13:25:39.327301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.313269Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"5afa2ce9-dccf-4742-ac73-5a5a81e7c4de","year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.998765Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:7355efdef7c1f9ca608f2eabb68b1856e676ce31d09391e38ea997f50025768b","observation_id":"91a7bfd9-7e42-4a02-baa0-57f49fa5fcd4","resolution":{"observed_at":"2026-08-14T13:25:39.317001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.001787Z","title":"Rectified linear units im- prove restricted boltzmann machines","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.001787Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:90febbebf6438420313e24ea03065dbffb6ec7a83653559e83f39d2efbd8ecbf","observation_id":"e9bd7efc-e219-4d71-8453-2982821b3675","resolution":{"observed_at":"2026-08-14T13:25:39.001787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.296879Z","title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","venue":null,"work_id":"da774bf8-7468-4af5-a3a8-d6ccd2e2f96d","year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.005060Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8ba32aaa01eee20e12286b622bede5e2823e3fcf79b461f588261a4e24de8e83","observation_id":"bdf27ead-270d-46d8-9d6e-df3058bd0397","resolution":{"observed_at":"2026-08-14T13:25:39.300408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.287036Z","title":"Osadchy, J","venue":null,"work_id":"d443aaec-e9ea-4ffe-b655-aea5c6635e44","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.008069Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:ed9a59a1897dfce32e90d1f8f04469bd6b2f2a6e42746d0fb40e97d6455a7a2d","observation_id":"f27a79b5-b208-4f2b-81d0-7a6518156e48","resolution":{"observed_at":"2026-08-14T13:25:39.290295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1602.02697","last_updated":"2017-03-19T14:50:18Z","snapshot_observed_at":"2026-08-14T22:11:11.917352Z","submitted_at":"2016-02-08T19:12:25Z","title":"Practical Black-Box Attacks against Machine Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1602.02697","snapshot_observed_at":"2026-08-14T13:25:39.010983Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.010983Z"},"links":{"cited_paper":"/paper/1602.02697","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:5bf2aa5fa7002125ef0f6249141bbd1fdf0baf653a3f87c56ad28f91e1b3cd45","observation_id":"ae2c000e-3f91-48db-9b3d-db36e82f8d9e","resolution":{"observed_at":"2026-08-14T13:25:39.010983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.276234Z","title":"Practi- cal black-box attacks against machine learning","venue":null,"work_id":"165a5dc9-8672-4434-90a3-232559e4482d","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.014255Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:2ff3f9773eff4bd33da555a4c51d0d503866cac5b579801375e7029b6dbe00be","observation_id":"81120976-eaeb-4910-9456-dbcca2e50fa8","resolution":{"observed_at":"2026-08-14T13:25:39.280217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.03814","last_updated":"2016-11-11T18:57:15Z","snapshot_observed_at":"2026-08-14T21:30:49.644267Z","submitted_at":"2016-11-11T18:57:15Z","title":"Towards the Science of Security and Privacy in Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.03814","snapshot_observed_at":"2026-08-14T13:25:39.017478Z","title":"Towards the Science of Security and Privacy in Machine Learning","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.017478Z"},"links":{"cited_paper":"/paper/1611.03814","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:f98f892ba123ee50e6c57719bc43b2e1c163a5701f65ecee69bb122099eedac4","observation_id":"129234a1-422c-4177-beb3-a054a1e07010","resolution":{"observed_at":"2026-08-14T13:25:39.017478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02328","last_updated":"2018-07-06T06:50:03Z","snapshot_observed_at":"2026-08-14T20:06:11.188860Z","submitted_at":"2017-12-06T18:52:12Z","title":"Generative Adversarial Perturbations","version":3},"cited_work":{"arxiv_id":"1712.02328","doi":null,"metadata_source":"pith","pith_arxiv_id":"1712.02328","snapshot_observed_at":"2026-08-14T13:25:39.110266Z","title":"Generative Adversarial Perturbations","venue":"cs.CV","work_id":"367dd0db-9932-45ad-9bf3-952eaff10036","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.020788Z"},"links":{"cited_paper":"/paper/1712.02328","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8e1b1439c528f50bef3b10bfa0d79c9f3f68c41892d0ae6287d2ebde85b3c81f","observation_id":"52ca9f99-e6ca-4f68-8cd6-e1bf1caca962","resolution":{"observed_at":"2026-08-14T13:25:39.114839Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.023949Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.023949Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:be7a2c79e389d8292d2517fc3ad450de00b36ea98a8587ba1aa871e397fe459a","observation_id":"a528de64-1f1c-421f-aba3-56965004b60b","resolution":{"observed_at":"2026-08-14T13:25:39.023949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-17T19:17:06.411141Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-14T13:25:39.026992Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.026992Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:cead0e9fad0b0cae572538d34a743fa0ab3d292a4303509e0524ddec40316514","observation_id":"8902c7f5-1964-47c0-9c57-a11cdbb8f2e1","resolution":{"observed_at":"2026-08-14T13:25:39.026992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.259420Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":"f8c95ddf-3eb3-4d37-a535-baacdd159521","year":2019},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.030019Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:beea8838d7a03c10640d523f6d36d8654fb25f6a751fd3b732c886c7b0e568c0","observation_id":"500bbe2a-4117-417d-aa8f-6adf65451da9","resolution":{"observed_at":"2026-08-14T13:25:39.263326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T13:25:39.033114Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.033114Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:dca4cc6e3f669b20296f848018c6c2cff7b6141ebeb09212d5b4bfe836d8e28f","observation_id":"5b6c9da9-305f-42d8-8a11-3fc20d7256b1","resolution":{"observed_at":"2026-08-14T13:25:39.033114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.248570Z","title":"Deepface: Closing the gap to human-level perfor- mance in face verification","venue":null,"work_id":"5e38baca-b8bc-4b94-bd01-f2becaeef1f5","year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.036325Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:0780396440a2c3e6bbe5b24c633d5a8a9d102278c2c6a3d75aa884c6c7b9840f","observation_id":"c5b3802c-e804-4aed-8ea3-2d4a4f876e2d","resolution":{"observed_at":"2026-08-14T13:25:39.252897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T13:25:39.039453Z","title":"Ensemble Adversarial Training: Attacks and Defenses","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.039453Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:dc326716b2c4234694f475a0ed7c6da1b8902298fd5538f5ed8ed3eb8ab44b4b","observation_id":"543d0616-8b30-43c8-8e0b-2135525e724c","resolution":{"observed_at":"2026-08-14T13:25:39.039453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.238690Z","title":"Attention is all you need","venue":null,"work_id":"d4b29a48-5a83-4b4b-9bf5-c781dbe65311","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.042721Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:348ad80cc9aa25b824f018af6821f709e1114753c5bb1d8ee21c1ebccfe1551b","observation_id":"a215c8e7-7465-40aa-b0ab-8e0bb2155056","resolution":{"observed_at":"2026-08-14T13:25:39.242103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-14T19:56:59.239473Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-14T13:25:39.045656Z","title":"Generating adversarial examples with adversarial networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.045656Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:006983b18f4fc3ce245a5be83e409ef2d40a56c55898124ef288d2150e671f93","observation_id":"41aeddab-aa41-4f71-9dd7-a20b898a2b35","resolution":{"observed_at":"2026-08-14T13:25:39.045656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.940850Z","title":"IEEE Conference on , pages 248–255","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.940850Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4a76e4a57b099b2b71d588811768125f479662b425587e7d4727b6b240641e9c","observation_id":"fc3c3e52-0423-403d-90f5-0026e3fffcd8","resolution":{"observed_at":"2026-08-14T13:25:38.940850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-17T22:12:19.784641Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":26,"verified_exact":1,"verified_fuzzy":10},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:1908.05185."}