{"as_of":"2026-08-19T17:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:00253803d70904f30f95474ab9dedaeca8998cedc98e9c8a1879883521242b32","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:54:33.419561Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":26,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":26,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:52:01.306099Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T17:08:43.146330Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-11T16:56:26.584596Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2412.09692","last_updated":"2024-12-23T14:36:35Z","snapshot_observed_at":"2026-08-14T20:54:23.026560Z","submitted_at":"2024-12-12T19:14:52Z","title":"Three-in-One: Robust Enhanced Universal Transferable Anti-Facial Retrieval in Online Social Networks","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T16:56:26.584596Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.09692"},"observation_digest":"sha256:89f197b32445f8f734713a75e5780c3f1d569206a652c81e9cba2423732bc636","observation_id":"da013ec1-de36-4474-9ae5-fea8d8ac0f64","resolution":{"observed_at":"2026-08-11T16:56:26.584596Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-11T11:25:18.728759Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.15581","last_updated":"2024-12-20T05:29:45Z","snapshot_observed_at":"2026-08-18T18:16:31.934076Z","submitted_at":"2024-12-20T05:29:45Z","title":"Random Batch Method with Momentum Correction","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T11:25:18.728759Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.15581"},"observation_digest":"sha256:ecdd3ce5f72260f8209a2bf23b169c19c59a15527f799d15eff3dcd1a76ae21e","observation_id":"d5303fa2-7aab-4fd2-a249-a6fe31738fed","resolution":{"observed_at":"2026-08-11T11:25:18.728759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-11T11:02:20.330790Z","title":"Nesterov accelerated gradient and scale invariance for improving transferability of adversarial examples,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2412.15924","last_updated":"2024-12-20T14:17:03Z","snapshot_observed_at":"2026-08-15T23:53:30.710067Z","submitted_at":"2024-12-20T14:17:03Z","title":"Watertox: The Art of Simplicity in Universal Attacks A Cross-Model Framework for Robust Adversarial Generation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T11:02:20.330790Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.15924"},"observation_digest":"sha256:060ab732f35792f9929766d2282b5bc6bd72f65555059cb005c852205e411780","observation_id":"6ba079df-09e3-4ee1-9b1c-f5de5889e5c2","resolution":{"observed_at":"2026-08-11T11:02:20.330790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-11T13:13:18.523857Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.16213","last_updated":"2024-12-18T01:01:30Z","snapshot_observed_at":"2026-08-16T16:49:37.308077Z","submitted_at":"2024-12-18T01:01:30Z","title":"AdvIRL: Reinforcement Learning-Based Adversarial Attacks on 3D NeRF Models","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-11T13:13:18.523857Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.16213"},"observation_digest":"sha256:68931251b8b92333bad6128fa4083877bc755eb864b6b71ac909158cc79a0339","observation_id":"f259b160-b635-41bd-aca7-68bd6a56cb1a","resolution":{"observed_at":"2026-08-11T13:13:18.523857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-11T00:19:48.712400Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2412.19523","last_updated":"2024-12-27T08:27:53Z","snapshot_observed_at":"2026-08-19T17:21:56.975775Z","submitted_at":"2024-12-27T08:27:53Z","title":"Attribution for Enhanced Explanation with Transferable Adversarial eXploration","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T00:19:48.712400Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.19523"},"observation_digest":"sha256:34769b08dfab62e2d96e32d21955986ec0f7d22669d2c33fb2783cbb88a79850","observation_id":"9ab00d03-a491-4b82-bd1c-224fb6a580a8","resolution":{"observed_at":"2026-08-11T00:19:48.712400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-10T23:14:54.941049Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-15T05:27:54.504397Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.941049Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:eb9a47d8e9d2da991d5c05afec84f47927b5bcde0574845f9a890aa32935b903","observation_id":"1cf63b37-379c-4702-879c-321f7969dddb","resolution":{"observed_at":"2026-08-10T23:14:54.941049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-10T17:51:49.773947Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2501.11901","last_updated":"2025-03-30T01:07:14Z","snapshot_observed_at":"2026-08-16T11:12:17.240539Z","submitted_at":"2025-01-21T05:41:09Z","title":"Enhancing Adversarial Transferability via Component-Wise Transformation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T17:51:49.773947Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2501.11901"},"observation_digest":"sha256:63c2d66862f1c6dd209d5f03d2427f09bc28d739897fdaf388441a9e98e5e1d1","observation_id":"9f1b3506-35d0-4a75-8a69-037275520d2b","resolution":{"observed_at":"2026-08-10T17:51:49.773947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-09T15:57:24.346108Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-16T14:03:28.156722Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.346108Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7be7b2ff8ed3fafedbf76c1e3ede6a95e426d21d05676f264e6cf934d02bad90","observation_id":"bc606a3d-3acb-4a2e-96ac-28948d9e4aee","resolution":{"observed_at":"2026-08-09T15:57:24.346108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-16T11:52:01.306099Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.306099Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:ab97754d60627bf2712792ef70d5c098aadb4c13b08b7fe2f85dde48e1712868","observation_id":"ab93f839-f3c2-45d6-8baf-a4f939131b47","resolution":{"observed_at":"2026-08-16T11:52:01.306099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-15T23:57:04.467221Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.03383","last_updated":"2025-05-06T10:02:56Z","snapshot_observed_at":"2026-08-18T16:51:33.719676Z","submitted_at":"2025-05-06T10:02:56Z","title":"Attention-aggregated Attack for Boosting the Transferability of Facial Adversarial Examples","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T23:57:04.467221Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.03383"},"observation_digest":"sha256:004dac012e58874db77c336f15a8681a310dfe8f3b9b48d10baabd5f3189d378","observation_id":"7c96d5b4-b5c3-4aab-b393-2d47108bbdb7","resolution":{"observed_at":"2026-08-15T23:57:04.467221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-15T20:55:08.289458Z","title":null,"venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.11752","last_updated":"2025-05-16T23:28:38Z","snapshot_observed_at":"2026-08-18T16:51:34.428608Z","submitted_at":"2025-05-16T23:28:38Z","title":"Permutation Randomization on Nonsmooth Nonconvex Optimization: A Theoretical and Experimental Study","version":1},"reference_index":38,"source":"arxiv_source","source_observed_at":"2026-08-15T20:55:08.289458Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.11752"},"observation_digest":"sha256:0a0dfba23fe7183ae3fbebb5c3b28bd9cd41b8286421e1a97fd2315d62fc6f01","observation_id":"61bf2d92-405a-4ca0-bbae-4baee489766c","resolution":{"observed_at":"2026-08-15T20:55:08.289458Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-15T20:24:10.887897Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.13327","last_updated":"2025-07-13T16:22:29Z","snapshot_observed_at":"2026-08-16T03:16:48.903254Z","submitted_at":"2025-05-19T16:35:45Z","title":"Benchmarking Unified Face Attack Detection via Hierarchical Prompt Tuning","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-15T20:24:10.887897Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.13327"},"observation_digest":"sha256:219d9f116c8e66033d12d887226bda9edcb244727bc2898a45e75630422548f5","observation_id":"dcdea9bc-8419-4abf-8d81-598217a113cb","resolution":{"observed_at":"2026-08-15T20:24:10.887897Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-07T14:41:11.038741Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.18097","last_updated":"2025-05-23T16:49:20Z","snapshot_observed_at":"2026-08-16T09:35:47.812961Z","submitted_at":"2025-05-23T16:49:20Z","title":"Towards more transferable adversarial attack in black-box manner","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T14:41:11.038741Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.18097"},"observation_digest":"sha256:5564c257739a4d4f31a3644698ec5c44cac182dd788bfb32deb02d009761ace1","observation_id":"c793e992-9a05-4370-815c-c7d65c6e5cde","resolution":{"observed_at":"2026-08-07T14:41:11.038741Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-07T13:44:38.723286Z","title":"arXiv:1908.06281 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.21181","last_updated":"2025-05-27T13:32:52Z","snapshot_observed_at":"2026-08-16T12:59:08.728019Z","submitted_at":"2025-05-27T13:32:52Z","title":"Boosting Adversarial Transferability via High-Frequency Augmentation and Hierarchical-Gradient Fusion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:44:38.723286Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.21181"},"observation_digest":"sha256:97f72fa20ccbc1a2dc5b7e3cb57b1394de3fb3e0d73d4d6ff9d0ec0ca7c8b277","observation_id":"f57bd50b-3fe4-41be-a1f7-bccbc37f64ee","resolution":{"observed_at":"2026-08-07T13:44:38.723286Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-07T12:55:10.617905Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-17T21:05:42.891783Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.617905Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:0a475612dd19d4d8576fae34fb013e1674f9926b4010feea8c4ba5fea6923a75","observation_id":"b6c0e771-5534-4b64-ac33-1710277972ac","resolution":{"observed_at":"2026-08-07T12:55:10.617905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-06T20:46:44.631744Z","title":"arXiv:1908.06281 (2019)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.01791","last_updated":"2025-07-02T15:16:30Z","snapshot_observed_at":"2026-08-16T03:17:14.745374Z","submitted_at":"2025-07-02T15:16:30Z","title":"Boosting Adversarial Transferability Against Defenses via Multi-Scale Transformation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T20:46:44.631744Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2507.01791"},"observation_digest":"sha256:b42a156ed36d06805c096af0f78c06ab6f96f1a086a3bee3c87d8c6016e20316","observation_id":"e2eb8661-6449-4732-a8ba-beedd3f7c542","resolution":{"observed_at":"2026-08-06T20:46:44.631744Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-06T17:03:31.987245Z","title":null,"venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2507.12107","last_updated":"2025-07-16T10:24:54Z","snapshot_observed_at":"2026-08-17T11:51:53.384906Z","submitted_at":"2025-07-16T10:24:54Z","title":"Non-Adaptive Adversarial Face Generation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T17:03:31.987245Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2507.12107"},"observation_digest":"sha256:bd2aa1bef207e6affde18267070ba5be31bf23bcd10a133e481d4a04fa3d4fbf","observation_id":"b957e21e-3e85-4a84-8806-247c53c17aec","resolution":{"observed_at":"2026-08-06T17:03:31.987245Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-15T17:27:45.393420Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-19T01:58:29.696618Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.393420Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:62c1962e35e5b1212d342ba3bf42e64357b8f9221f23ea287171cb729d1b6249","observation_id":"5ea6cfdc-adde-4da6-941d-57b6e6e27ead","resolution":{"observed_at":"2026-08-15T17:27:45.393420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-04T22:10:18.098494Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks.arXiv preprint arXiv:1908.06281, 2019","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2509.07495","last_updated":"2025-09-09T08:20:19Z","snapshot_observed_at":"2026-08-15T13:28:02.141873Z","submitted_at":"2025-09-09T08:20:19Z","title":"Generating Transferrable Adversarial Examples via Local Mixing and Logits Optimization for Remote Sensing Object Recognition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T22:10:18.098494Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2509.07495"},"observation_digest":"sha256:c9e16e561bb790ffb1dab646a01279d67c2805f57497ac5be6312e14ba75f99c","observation_id":"9ee085a2-49c5-4a96-af5f-1033e0a84a82","resolution":{"observed_at":"2026-08-04T22:10:18.098494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-03T20:27:03.836797Z","title":null,"venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2511.20002","last_updated":"2026-06-17T05:14:08Z","snapshot_observed_at":"2026-08-03T20:27:02.365537Z","submitted_at":"2025-11-25T07:13:13Z","title":"Semantic Router: On the Feasibility of Hijacking MLLMs via a Single Adversarial Perturbation","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T20:27:03.836797Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2511.20002"},"observation_digest":"sha256:945acb705a5baff9002477cf31c8af062dfec89f7e40e784d7dd60b0886382a9","observation_id":"9ad57b05-7076-4060-90ab-809636c1bce6","resolution":{"observed_at":"2026-08-03T20:27:03.836797Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":"1908.06281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-07-03T17:08:43.146330Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":"c7126c3b-d8f9-40bd-9ff1-55419d612397","year":1908},"citing_paper":{"arxiv_id":"2601.23179","last_updated":"2026-04-20T06:15:25Z","snapshot_observed_at":"2026-08-17T20:47:09.641830Z","submitted_at":"2026-01-30T17:03:24Z","title":"Universal Adversarial Attacks against Closed-Source MLLMs via Target-View Routed Meta Optimization","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-16T09:26:14.799360Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2601.23179"},"observation_digest":"sha256:8db474c281d850e051fc363c5b8386666d3bbb37853bca563ad3bedfbb610059","observation_id":"02f2a1f0-8448-4f38-a4d4-7c53c627ec3d","resolution":{"observed_at":"2026-05-16T09:27:40.996459Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":"1908.06281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-07-03T17:08:43.146330Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":"c7126c3b-d8f9-40bd-9ff1-55419d612397","year":1908},"citing_paper":{"arxiv_id":"2604.11928","last_updated":"2026-04-13T18:16:39Z","snapshot_observed_at":"2026-08-13T17:18:52.574753Z","submitted_at":"2026-04-13T18:16:39Z","title":"INTARG: Informed Real-Time Adversarial Attack Generation for Time-Series Regression","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-10T15:16:54.260386Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2604.11928"},"observation_digest":"sha256:82569f021e2961ca78174142947742553d4f1d9a8e20157356f524577ff573a9","observation_id":"17e0653d-a977-452a-bd9d-5e5af97c1d15","resolution":{"observed_at":"2026-05-11T10:56:01.653880Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":"1908.06281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-07-03T17:08:43.146330Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":"c7126c3b-d8f9-40bd-9ff1-55419d612397","year":1908},"citing_paper":{"arxiv_id":"2604.14643","last_updated":"2026-04-16T05:47:57Z","snapshot_observed_at":"2026-08-11T15:52:19.902735Z","submitted_at":"2026-04-16T05:47:57Z","title":"Physically-Induced Atmospheric Adversarial Perturbations: Enhancing Transferability and Robustness in Remote Sensing Image Classification","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-10T12:21:23.000753Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2604.14643"},"observation_digest":"sha256:65d6567f5ba468ccdd69810e89baf942688f7ae104713815d6a5f69505bff2f1","observation_id":"e1aa8241-46e1-4b7e-9a3f-344c2fa0e16d","resolution":{"observed_at":"2026-05-10T12:25:22.626474Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":"1908.06281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-07-03T17:08:43.146330Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":"c7126c3b-d8f9-40bd-9ff1-55419d612397","year":1908},"citing_paper":{"arxiv_id":"2605.30366","last_updated":"2026-05-18T03:43:41Z","snapshot_observed_at":"2026-08-16T03:28:13.753446Z","submitted_at":"2026-05-18T03:43:41Z","title":"Escaping the Linearity Trap: Manifold Detours for Black-Box Adversarial Attacks on Singing Audio Deepfake Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-30T18:58:31.318883Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2605.30366"},"observation_digest":"sha256:372e48a34d20270ea2e1f5b9af0f30b79d8ec12e2f2f003c610ae380b9a32227","observation_id":"cdbcdda1-9082-4d2c-ac05-669fd9f0245e","resolution":{"observed_at":"2026-06-30T19:05:01.108892Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":"1908.06281","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-07-03T17:08:43.146330Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":"c7126c3b-d8f9-40bd-9ff1-55419d612397","year":1908},"citing_paper":{"arxiv_id":"2606.20666","last_updated":"2026-06-11T21:25:54Z","snapshot_observed_at":"2026-08-02T01:59:59.726842Z","submitted_at":"2026-06-11T21:25:54Z","title":"Robust Auto-associative Memory via Convolutional Restricted Hopfield Networks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T04:39:45.760543Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2606.20666"},"observation_digest":"sha256:df3aa237c090dd6edbb5849ff2915c86f09ec34549f5578d49a4f317e76883fd","observation_id":"c5a6c88f-1bbb-40f4-ad3c-3ae2001d5c63","resolution":{"observed_at":"2026-07-03T17:08:43.147925Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-16T00:32:37.323068Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.11815","last_updated":"2026-08-12T08:58:22Z","snapshot_observed_at":"2026-08-19T03:30:45.121938Z","submitted_at":"2026-08-12T08:58:22Z","title":"Learning with Bilevel-Minimax Optimization for Efficient and Reliable Transfer Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T00:32:37.323068Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2608.11815"},"observation_digest":"sha256:9d211b876361f53b8a083f7ffa198c30b39d835624c7e11d3294ff7b0db748bb","observation_id":"80baeb1f-4805-4ada-ba41-224cece87949","resolution":{"observed_at":"2026-08-16T00:32:37.323068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1908.06281/citation-record","integrity":"/paper/1908.06281/integrity","json":"/paper/1908.06281/citation-record.json","paper":"/paper/1908.06281"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.863342Z","title":"On the robustness of semantic segmentation models to adversarial attacks","venue":null,"work_id":"a5eac6b0-0afe-4e21-b2a1-caf6c0b67d6e","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.267465Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:8106e124e038ce5fd14529b3bad83f78e30ab17006167310b2c661d43d89c2cf","observation_id":"166ccc0a-9e65-4eb2-97a6-8bc3e399a86f","resolution":{"observed_at":"2026-08-14T12:54:33.867620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.850516Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"da81155c-aab8-413c-a037-0dfc15a43483","year":2017},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.272178Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:a4d8083696f05072e391ac8909c5b0132bbec791945b27476cf062a37df9d40d","observation_id":"aa55e363-c071-4501-a082-5c8e24a0fc39","resolution":{"observed_at":"2026-08-14T12:54:33.855405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.838417Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"02c03b23-ede5-4606-a5bb-c03af519bb84","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.276356Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:77751a3695ec6ff32d24386178213a634ca07daba0162a6aeb0ea50c968dec26","observation_id":"807abb88-99eb-4a98-bf3b-029187e6e53d","resolution":{"observed_at":"2026-08-14T12:54:33.842870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.825896Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"4d6da76a-f9b4-4c6e-952e-6a4b7f48319d","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.280667Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:9a1c97c2abd3db3adc058f21b1ae888752158d0dce500affde4a707daf1925d6","observation_id":"0edf5094-3ab9-4239-bddc-fabc9b5fcf00","resolution":{"observed_at":"2026-08-14T12:54:33.830124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.813605Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"ee3ee624-a2fe-4b5b-8335-7e60a38d3258","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.285016Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:1ee000f60d0f8b79ef4f2f0d81a80e102950fd38fab362f2ce475b3769ebc450","observation_id":"9f244ef4-b69f-4c4f-ae3d-73b97f0918cd","resolution":{"observed_at":"2026-08-14T12:54:33.817574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T12:54:33.289071Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.289071Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:b191174e93c3322d821b6af1571eb02742c4f6bc93180e7da2ef6e19c0c764c9","observation_id":"4b9fb68f-4656-4443-a98a-757d9cc6abf2","resolution":{"observed_at":"2026-08-14T12:54:33.289071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.801778Z","title":"Countering adversarial images using input transformations","venue":null,"work_id":"99107053-9f15-431e-9242-957ac5cb2415","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.293854Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:3cb8895a54406731a1e78c6d9b95caca1d91f1c412a43c2669b44a1d8ba0ed37","observation_id":"21c9a558-2739-43c1-8816-e6f33c2837fd","resolution":{"observed_at":"2026-08-14T12:54:33.805806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.788580Z","title":"Identity mappings in deep residual networks","venue":null,"work_id":"85ff718d-da38-4a15-90bc-74f77079021a","year":2016},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.297954Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:469ae6e320e94782c6cb1877b2ed7aeb0e971b5bc91ee116f7f8806e33535544","observation_id":"e1b18123-5f7a-4feb-a483-782123aa4a50","resolution":{"observed_at":"2026-08-14T12:54:33.793325Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.775402Z","title":"Comdefend: An efficient image compression model to defend adversarial examples","venue":null,"work_id":"94c2d7d1-ce1c-4cf9-86c4-bbf30d72f2c3","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.302291Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:508848fe45f8968f3885e84fb1b74270897a7155896995776cb401dc7afb6e22","observation_id":"321e6fd7-f835-47a1-bd63-b87b8db2c489","resolution":{"observed_at":"2026-08-14T12:54:33.779687Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-08-17T19:26:44.032537Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-14T12:54:33.306967Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.306967Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:1f27857d8890416b603a8628e567a26b1eb45e219b67f21103f5593884bd2f71","observation_id":"c8febe3f-5671-4e80-91c9-783f8e892f3b","resolution":{"observed_at":"2026-08-14T12:54:33.306967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T12:54:33.311674Z","title":"Adversarial examples in the physical world","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.311674Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:8cc5347d78f308948e9633c52904d594e8600f58c1be86e6eac15d0f9dca501f","observation_id":"7d662bb5-ddae-495c-99ec-81d48f019d27","resolution":{"observed_at":"2026-08-14T12:54:33.311674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.763444Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"f96cb7c8-d49d-421f-8966-1f939c6f10c8","year":2017},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.316308Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:7ec84e2c4744f2527ed137dace712b10bb4eff9eb13b649d8ca4eb01642608de","observation_id":"f63eae34-20cb-43ea-8fd8-b1bc95dc633e","resolution":{"observed_at":"2026-08-14T12:54:33.767311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.750675Z","title":"Adversarial attacks and defences competition","venue":null,"work_id":"d52aa1e3-f261-42d9-aa16-803352f3bb68","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.321280Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:511893ae8220ac0dde82d285ca7c0e31ba5d9d8dc1660ce6b5f6f37b6dc7ebc3","observation_id":"1f13f7ad-f669-4395-a424-b632d51175bc","resolution":{"observed_at":"2026-08-14T12:54:33.754659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.737189Z","title":"Defense against adversarial attacks using high-level representation guided denoiser","venue":null,"work_id":"66e861ea-5c79-4243-8dc8-5b5da3885c29","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.325112Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:c62959ef24d4604e36ee3da4e1c1615d76a3b25095ebf1a45a19a63e4882e004","observation_id":"4ea6155f-9817-470c-ae5f-efd14e7cbd1b","resolution":{"observed_at":"2026-08-14T12:54:33.741669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-18T17:48:45.518915Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-14T12:54:33.329202Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.329202Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:8ff42266c4cb45e94b7183f11b70eab40286d3398928731bfd6c16423b9dfaa5","observation_id":"407331ac-f905-4c8c-9889-a5e6e31b094c","resolution":{"observed_at":"2026-08-14T12:54:33.329202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.724943Z","title":"Feature distillation: Dnn-oriented jpeg compression against adversarial examples","venue":null,"work_id":"e69eac67-8d94-496d-893f-4c2f51fbd1cd","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.335041Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:6ccdacc3d0dc6aeb928fc2feca1898fc1ab38a304617df597175c969c5fc4986","observation_id":"9e29e4e7-4477-4777-acc7-5f569032c86d","resolution":{"observed_at":"2026-08-14T12:54:33.729334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.338980Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.338980Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:08007aab2626332692278a46061258f7a7f41b455a1262737c9eb6332123528c","observation_id":"ea6182c5-0a33-4349-87be-8767e8d6298e","resolution":{"observed_at":"2026-08-14T12:54:33.338980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.705431Z","title":"A method for unconstrained convex minimization problem with the rate of convergence o (1/k\\^ 2)","venue":null,"work_id":"4e3f1d91-061b-4e3a-a3b1-7c620e569aaa","year":1983},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.343576Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:6e17d6ee23a4bf8ed7d5013b6edd5664ea6f1fac34f8d09894d0116fc1bdf278","observation_id":"153c398c-d191-41a1-8c9c-6d5557bfeb2f","resolution":{"observed_at":"2026-08-14T12:54:33.709496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.692940Z","title":"Some methods of speeding up the convergence of iteration methods","venue":null,"work_id":"dc31583d-c6d4-4d73-9121-8ab9e3dce443","year":1964},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.347898Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:b21fd1fc0b2495d37977e0031d4e7e0f831ee3d50b4e17c96defdad8a75edb80","observation_id":"f8387225-bfd4-48ff-9c2f-e06d6028e596","resolution":{"observed_at":"2026-08-14T12:54:33.697669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.352270Z","title":"Imagenet large scale visual recognition challenge","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.352270Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:7014ef93e4175cb4d70b23fefd9b94a6766fce829343d3081d8c14924917021f","observation_id":"b5ede7e3-cc6a-47aa-94e3-754e58eaca16","resolution":{"observed_at":"2026-08-14T12:54:33.352270Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-17T19:17:06.411141Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-14T12:54:33.356815Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.356815Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:70f5cccb1526c97d9f922947c81b3cd7bbddbc3bcac7fa3934599cca198c4ac2","observation_id":"2eca4f20-9b48-49c6-a6f7-a08344286b57","resolution":{"observed_at":"2026-08-14T12:54:33.356815Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.671977Z","title":"Hopcroft","venue":null,"work_id":"762f4495-ee68-42c3-8586-8fc5a40a875b","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.361055Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:3281b09aab09343484e508ac60e91b832c98ed9e0332bc017460882c84925e5b","observation_id":"54865474-36fa-4c38-be5d-8e40040e0948","resolution":{"observed_at":"2026-08-14T12:54:33.676482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.658735Z","title":"Hopcroft","venue":null,"work_id":"c676514c-08de-49dc-8295-375857d69889","year":2020},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.365430Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:781a21dec343fc386969627f426a1f8a08990b76281889b727214c486cd2f165","observation_id":"62e3a2c9-0101-4997-b892-f6f717a5f895","resolution":{"observed_at":"2026-08-14T12:54:33.663213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.645079Z","title":"On the importance of initialization and momentum in deep learning","venue":null,"work_id":"7503a624-c4c4-4d4e-a92d-f667023f61b1","year":2013},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.369775Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:635629477df431fc0513de8cfc80807e36d4e5f702dbaa561ac75d39e9ca4920","observation_id":"a094d920-192e-4f38-b60b-87930749787c","resolution":{"observed_at":"2026-08-14T12:54:33.649411Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.631854Z","title":"Intriguing properties of neural networks","venue":null,"work_id":"28a34401-7086-42ac-afd8-a6c6e86a028f","year":2014},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":25,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.374119Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:f11213c4791183b26e04a9ccaad13a987871841692c9af84d9af99605e968454","observation_id":"95a159b4-718f-469d-b272-f4bc887ccd6f","resolution":{"observed_at":"2026-08-14T12:54:33.636320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.378525Z","title":"Rethinking the inception architecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":26,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.378525Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:9da9541928fd3b129ccafa262f2e544e763e038621933c7b0de004c167439e39","observation_id":"905bd35b-5788-46b0-804d-f050aa70fa9b","resolution":{"observed_at":"2026-08-14T12:54:33.378525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.612123Z","title":"Inception-v4, inception-resnet and the impact of residual connections on learning","venue":null,"work_id":"ab39f4f5-3e7d-4210-98f6-d927a55b5c1f","year":2017},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":27,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.383642Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:796663504e14fce19549e7a58aac72058585f2353184aef995764f8b0200fbd1","observation_id":"4a573940-a1dd-4cc3-9766-784c8b73672c","resolution":{"observed_at":"2026-08-14T12:54:33.616356Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.598742Z","title":"Ensemble adversarial training: Attacks and defenses","venue":null,"work_id":"af510c68-4318-45c3-991c-6401a6dcab83","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":28,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.388704Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:f02c59225f0cbbb1d826b7b674eb33673f851a9226a2f96a45655cb3cb1e7c8f","observation_id":"e75e3c0b-3578-4340-b217-bc83d5f3ee34","resolution":{"observed_at":"2026-08-14T12:54:33.603663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.07793","last_updated":"2020-02-07T18:11:58Z","snapshot_observed_at":"2026-08-15T22:42:22.279246Z","submitted_at":"2019-04-16T16:26:19Z","title":"AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.07793","snapshot_observed_at":"2026-08-14T12:54:33.392933Z","title":"Hopcroft","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":29,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.392933Z"},"links":{"cited_paper":"/paper/1904.07793","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:867d1a411f9d37d49e96381ca1ef0d26cf7333c87d771b198dc7980cbd7d39d7","observation_id":"4366e876-1ee8-4d15-bacc-70e1d6e105d8","resolution":{"observed_at":"2026-08-14T12:54:33.392933Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.586826Z","title":"Mitigating adversarial effects through randomization","venue":null,"work_id":"672ee2c9-cfe6-4a65-8244-26c90a704ac1","year":2018},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":30,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.397365Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:4719779978507f8531b2b3f1e70f4773cc494f81c25d543ab5cb9b1900f73f61","observation_id":"f15236e7-047a-4a2f-a508-404775068def","resolution":{"observed_at":"2026-08-14T12:54:33.590924Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.573305Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":"7ef6ed4e-9658-4eaf-81cf-f84351d40de5","year":2019},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":31,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.401780Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:fc49c7cce45fe0ecf35f765e3715d9d6016cc8ffed508f5d18a33bca15bb830b","observation_id":"831ed0ba-4406-4863-9151-355736e8837f","resolution":{"observed_at":"2026-08-14T12:54:33.578353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.00555","last_updated":"2019-09-26T01:44:46Z","snapshot_observed_at":"2026-08-19T14:17:06.033526Z","submitted_at":"2019-06-03T03:56:41Z","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.00555","snapshot_observed_at":"2026-08-14T12:54:33.405726Z","title":"Hopcroft, and Liwei Wang","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.405726Z"},"links":{"cited_paper":"/paper/1906.00555","citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:58bb91a5c1de8e2b555abf1a614ec34fa19699d7314600c3c289c3da3f7bbcf5","observation_id":"684b93d1-17db-4b6c-bff6-9b80bbee0693","resolution":{"observed_at":"2026-08-14T12:54:33.405726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.410081Z","title":"@esa (Ref","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":33,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.410081Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:197c0343ee68d7968c9dd6bcb14f1f168810a1ca6ef94b58b20d9e3dd3e4097c","observation_id":"2e99c823-0d7c-4858-9eba-1e008765ddc4","resolution":{"observed_at":"2026-08-14T12:54:33.410081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.415261Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":34,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.415261Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:6d86d604b0aa3a71484800d16c5ba8eee46f33c2fa6599609e4ed78f583d7f13","observation_id":"d8744b10-cc42-4a95-bc87-00e34da08054","resolution":{"observed_at":"2026-08-14T12:54:33.415261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:54:33.544467Z","title":"T j 8˾ \\ i-W@n I ( 1|2h:Œ 8 3 |9G ܠO >","venue":null,"work_id":"4459c5bc-9bef-44d6-8de4-fd5080cde5fb","year":null},"citing_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"reference_index":35,"source":"arxiv_source","source_observed_at":"2026-08-14T12:54:33.419561Z"},"links":{"citing_paper":"/paper/1908.06281"},"observation_digest":"sha256:9e6b68f722c31716088b01c852ccef87b3bb4f6ca9c764d68a561957b2ec7585","observation_id":"72fb5ee4-d842-4bc1-9c47-1ed902fc0e2c","resolution":{"observed_at":"2026-08-14T12:54:33.550177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","latest_version":5,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":0,"verified_fuzzy":23},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 26 inbound Pith citation observations for arXiv:1908.06281."}