{"as_of":"2026-08-18T19:50:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1776eec143b6669e7ae5a985f4776759b5294e49adece64cca42733e191e65c6","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:36:53.007232Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.07000/citation-record","integrity":"/paper/1908.07000/integrity","json":"/paper/1908.07000/citation-record.json","paper":"/paper/1908.07000"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1902.06894","last_updated":"2019-04-03T15:22:51Z","snapshot_observed_at":"2026-08-17T10:08:10.448946Z","submitted_at":"2019-02-19T05:01:23Z","title":"There are No Bit Parts for Sign Bits in Black-Box Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06894","snapshot_observed_at":"2026-08-14T12:36:52.832821Z","title":"There are no bit parts for sign bits in black-box attacks","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.832821Z"},"links":{"cited_paper":"/paper/1902.06894","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ecf4e565208ab2d6f6215418c112d02db135dac91f373bff6a2b040cd5b3ac11","observation_id":"c927202f-c157-4e33-a552-378e96263446","resolution":{"observed_at":"2026-08-14T12:36:52.832821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.542387Z","title":"GenAttack: Practical black-box attacks with gradient-free optimization","venue":null,"work_id":"1d303a43-cd56-4db9-81f4-db06da4e55f4","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.837640Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:717531a3f7d9b411a9e812df7bf3313d0be7275a5fe513aa16b697759f765189","observation_id":"d4ea7c74-64a2-42b3-a2f2-1001a9f31e6a","resolution":{"observed_at":"2026-08-14T12:36:53.546145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.531431Z","title":"The shat- tered gradients problem: If resnets are the answer, then what is the question? In International Conference on Machine Learning, 2017","venue":null,"work_id":"70d31852-ca8f-4d7a-b049-ae2b536a0bed","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.841634Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:235f91f6696007a1da4d7fda51fa5187b2b815b3d235cf3c0cd5d8a4de6f8c98","observation_id":"e109382f-3116-4860-84c7-31f9588a92c2","resolution":{"observed_at":"2026-08-14T12:36:53.535285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.519965Z","title":"Exploring the space of black-box attacks on deep neural networks","venue":null,"work_id":"2ceaf34b-17ec-4d0b-a6ce-112563b28b7b","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.845470Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:db692133195d113ea76301bfcd9512c3b4cf4ecf45780456ad950fb1899f6604","observation_id":"3bd64939-78aa-45e9-999c-8f006b177c8a","resolution":{"observed_at":"2026-08-14T12:36:53.523996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.507670Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","venue":null,"work_id":"58c1ab32-b169-49d4-84f1-e848dad1b25f","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.849379Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:167375c714d16f2c11bf53cb22de5e47fa6b78532c217d504f86b58977920a8d","observation_id":"dc7fdef3-f343-406d-8e94-af075ac0fda6","resolution":{"observed_at":"2026-08-14T12:36:53.512298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1812.09803","last_updated":"2019-05-05T13:05:16Z","snapshot_observed_at":"2026-08-17T16:17:53.384773Z","submitted_at":"2018-12-24T00:48:31Z","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.09803","snapshot_observed_at":"2026-08-14T12:36:52.853734Z","title":"Guessing smart: Biased sampling for e fficient black-box adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.853734Z"},"links":{"cited_paper":"/paper/1812.09803","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c2bff077018e054577afab858bf662365f5af46ff2db6e8ad921dced2b69c0da","observation_id":"f04b93b6-81e1-448e-b8d5-5aedf3beaafa","resolution":{"observed_at":"2026-08-14T12:36:52.853734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.496046Z","title":"Prototypical examples in deep learning: Metrics, characteristics, and utility","venue":null,"work_id":"d5fa86a0-1243-4e4b-93c4-7516b96219d1","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.857930Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:504cdbb11967a961231d8c611b2a9a56b389a66d6ab14612e050a70b2bb55198","observation_id":"fc6fd853-eb9d-44e5-9f2e-5b0677674755","resolution":{"observed_at":"2026-08-14T12:36:53.500086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.861583Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.861583Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ffa75f15766abf223a87d9f8eb5afb970914fa4bd965ba6333896761edad6129","observation_id":"d2fd696c-816f-4239-a2b7-0f11c6337a96","resolution":{"observed_at":"2026-08-14T12:36:52.861583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.02144","last_updated":"2020-04-28T01:20:45Z","snapshot_observed_at":"2026-08-18T06:56:42.113183Z","submitted_at":"2019-04-03T17:59:33Z","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.02144","snapshot_observed_at":"2026-08-14T12:36:52.865399Z","title":"Boundary at- tack++: Query-efficient decision-based adversarial at- tack","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.865399Z"},"links":{"cited_paper":"/paper/1904.02144","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ae5503e528982c82f97742d82bb04568965c731d971fcb381f9d367c1f3a0634","observation_id":"9ed18ac7-1138-4ac8-973b-97ddc3540e03","resolution":{"observed_at":"2026-08-14T12:36:52.865399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.477647Z","title":"ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models","venue":null,"work_id":"8055851f-7400-4e9f-9af5-c59cc2fb397e","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.869429Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:cd7f13ee6f7b05c9e54e8d53fe3fec42ec60695e1093df774c5645aa0fa9c811","observation_id":"d6fd34bd-dc6e-4741-898e-7e2d4393e16b","resolution":{"observed_at":"2026-08-14T12:36:53.481637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.05587","last_updated":"2019-07-12T06:12:18Z","snapshot_observed_at":"2026-08-13T00:57:55.508683Z","submitted_at":"2019-07-12T06:12:18Z","title":"Stateful Detection of Black-Box Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.05587","snapshot_observed_at":"2026-08-14T12:36:52.872996Z","title":"Stateful detection of black-box adversarial attacks","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.872996Z"},"links":{"cited_paper":"/paper/1907.05587","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:43d18352708b31ec88075ac1a28c66e21c2279851719d450030939235847f7b5","observation_id":"01cb798a-bf6b-49b7-972f-d280b6dc6689","resolution":{"observed_at":"2026-08-14T12:36:52.872996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.465444Z","title":"Query-efficient hard- label black-box attack: An optimization-based approach","venue":null,"work_id":"5557d2dc-aaac-468f-851a-e62a9deb1138","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.877114Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c50cb482b7a4cdb6b6632c832df890798571127f27f8fc06a7c58439cf4cb2a6","observation_id":"1ad0d5e2-2ac9-4c73-be6b-b247ea88428e","resolution":{"observed_at":"2026-08-14T12:36:53.469840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.06919","last_updated":"2020-07-26T14:00:51Z","snapshot_observed_at":"2026-08-14T16:14:41.161467Z","submitted_at":"2019-06-17T09:40:32Z","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","version":3},"cited_work":{"arxiv_id":"1906.06919","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.06919","snapshot_observed_at":"2026-08-14T12:36:53.062297Z","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","venue":"cs.LG","work_id":"efd3a54d-9add-4248-a54f-5a69c03e3a74","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.880865Z"},"links":{"cited_paper":"/paper/1906.06919","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:78b55bb2e4cf2130f7927c4210608ec8538178e8d79bd3f06c79da870ec49e5c","observation_id":"32d6c308-f560-4999-9f62-bd3d29239e50","resolution":{"observed_at":"2026-08-14T12:36:53.068868Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.453191Z","title":null,"venue":null,"work_id":"f728ac1c-30e2-49c1-b426-bd98e5f3479b","year":2009},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.885280Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:777848a5ed4153f9371306a3cebdc0e4d858241361af1ff1b005f527fc1f8208","observation_id":"4fe6dc5f-e6e0-49fe-baba-351fddeae7b6","resolution":{"observed_at":"2026-08-14T12:36:53.457165Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.441869Z","title":"Boosting adver- sarial attacks with momentum","venue":null,"work_id":"72a4c18d-da5e-4467-b344-897da1f8cba4","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.888860Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:847b70f6bc0305bf93b3d93e6ad76a2a840d667bace51920eea0f256e67816a2","observation_id":"42f09885-e64e-4ea6-a775-b8bf0ffb0e06","resolution":{"observed_at":"2026-08-14T12:36:53.445876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.430711Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"ebbbc7a3-cd1e-48ad-8df3-02f8bb196dbd","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.892665Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:4d275cfae9bfdcdf2e13959f91014fcfa3dc57ff18aaa25f6466d28ccc4794b7","observation_id":"a97d8c20-bbf2-4c69-b000-496a2e92426e","resolution":{"observed_at":"2026-08-14T12:36:53.434611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.419221Z","title":"Explaining and harnessing adversarial exam- ples","venue":null,"work_id":"a4047235-f1ce-4b98-9b9a-f10065009014","year":2015},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.896727Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:a2040dfc1f40a3ae000fc00c63c6351b68ef95a585158669ad8a1f598223c309","observation_id":"086487d9-3d2a-4a45-963d-eadb0b61805f","resolution":{"observed_at":"2026-08-14T12:36:53.423102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.407987Z","title":"Simple black-box adversarial attacks","venue":null,"work_id":"a2745363-469f-4ad6-b2b0-a79bfce5acee","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.900496Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:983230e445c5e8420b8bea95b69fa95c7fa11a360bc75a47403b40803e0d2908","observation_id":"f287cbf4-871d-49a5-813d-a4ea45c96756","resolution":{"observed_at":"2026-08-14T12:36:53.411820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.904422Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.904422Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:698bfaba39f7be4aefcb379be69950fb8adb0cb1019320fd26a502c664558beb","observation_id":"326f844e-c81f-4ff3-92ec-738384920d05","resolution":{"observed_at":"2026-08-14T12:36:52.904422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.389939Z","title":"Densely connected convolutional networks","venue":null,"work_id":"e2c44fcd-8c1b-4f50-828e-8f74e3ce640e","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.908118Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:d87b82e264e3e6958904b3cd54542f4e9ce6e862bd0eadcaee638015ac9c4a60","observation_id":"dcf56910-4f0e-4834-9c7d-06c41d5c8eb7","resolution":{"observed_at":"2026-08-14T12:36:53.393899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.378482Z","title":"Black-box adversarial attacks with limited queries and information","venue":null,"work_id":"0e7a70f0-8966-412e-9ef7-77f39dc02ed2","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.911776Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c1d166e1f8e48e0419540a567618196d8c0eb028c45d23915f6ad877cad2f3bb","observation_id":"0b5d2469-7566-42d2-845f-7135dd2f739b","resolution":{"observed_at":"2026-08-14T12:36:53.382700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.366685Z","title":"Prior convictions: Black-box adversarial attacks with bandits and priors","venue":null,"work_id":"617a8a46-267b-4cf1-9896-79b1ef72d335","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.916086Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:4ad882f6e36b6fb4845e78f92754af78b17cf48166ee1ce70e0d4968f288fda6","observation_id":"7aed996f-1ff6-410e-9590-b402a7a14336","resolution":{"observed_at":"2026-08-14T12:36:53.370600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.355453Z","title":"Learning mul- tiple layers of features from tiny images","venue":null,"work_id":"58f5fea0-593d-46a2-a7d5-fede9701ce46","year":2009},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.920675Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:eb47a74bfc2a51e7de18d321d8240dd8d497990f4ddbf8e582c8485ef4f8db35","observation_id":"cdea9880-7efb-42b7-8cb4-ceeeb74cc6de","resolution":{"observed_at":"2026-08-14T12:36:53.359414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.344244Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"6dbaaed1-e9a7-4216-be06-efad34e339c0","year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.924599Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:192ae4d83a0d58495c8d852b554469d915eb146ac65be28a65de406890129cca","observation_id":"3e160da5-1a21-4812-abd6-20d324a1c4c9","resolution":{"observed_at":"2026-08-14T12:36:53.348236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.332295Z","title":"The MNIST database of handwritten digits","venue":null,"work_id":"a1ceff54-9db7-46c1-83be-8f3966ecab18","year":1998},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.928478Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:a61f8662c3118a33b2b3377a8f0cbf01ad9e2ec4bf586715ee530a3a9d85b04f","observation_id":"7305ea39-7613-4f7c-af0e-07a0a6a7cf97","resolution":{"observed_at":"2026-08-14T12:36:53.336719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.320755Z","title":"Gradient-based learning applied to document recognition","venue":null,"work_id":"4cde7588-310b-442b-8387-34d2db8c8357","year":1998},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.932263Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:484e2d373851a39eae2afd289950ccf052da1e14dc82b56b86798d82633e682f","observation_id":"3479dbf5-0696-4d6f-922f-ebe8fd56af6b","resolution":{"observed_at":"2026-08-14T12:36:53.324947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.308618Z","title":"Query- efficient black-box attack by active learning","venue":null,"work_id":"f36297e8-83c3-4265-89d9-d9ae36654751","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.935816Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:6930c30a0d982eaa4f8b188f4b4cd5e3bbc0d17123ef96017f616bb7e8f37cf1","observation_id":"f224a487-187f-4656-ad18-ec9655c3b44f","resolution":{"observed_at":"2026-08-14T12:36:53.312421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.296937Z","title":"Nattack: Learning the distributions of adversarial examples for an improved black-box attack on deep neural networks","venue":null,"work_id":"95543a19-b2ac-4a9a-a640-9eae1e204a41","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.939632Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:b849045761bb336767ce7c52a98c64ab9cf39928842a7194ec358d512addf52d","observation_id":"9c1111c6-8f45-4b43-b49c-448d630ec465","resolution":{"observed_at":"2026-08-14T12:36:53.300996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.285100Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":"485b694d-5364-4670-bcac-12614a1684ea","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.943422Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:5f63bb68bd00227990502a7cf36ea7ba685f32d50f2cb7bcf9b025fa68d27848","observation_id":"fe8a15ff-c5e3-4887-80b8-4da9fa8df770","resolution":{"observed_at":"2026-08-14T12:36:53.289136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.273371Z","title":"CIFAR10 adversarial examples challenge","venue":null,"work_id":"be189a18-9d89-4653-94e4-bc30e6ce7ec7","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.947370Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:5aa0526bc5ea0df1edd1a2e2afba24f3728f4341e697ed7d2c6de02dafeea334","observation_id":"2bff7b8f-6b51-4580-b918-07f75d3b2b4d","resolution":{"observed_at":"2026-08-14T12:36:53.277405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.260939Z","title":"MNIST adversarial examples chal- lenge","venue":null,"work_id":"faf8b753-f8d7-4ed5-beeb-893d414a0ee4","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.951025Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c6f837ce216b1f382af19f52dce8997751b16bec18addb2998189d93661002cb","observation_id":"80e30964-fd15-4b45-9a05-49ae222ba92f","resolution":{"observed_at":"2026-08-14T12:36:53.265233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.954763Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.954763Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:f71632fb7747c441e3d6bdb63a0a274802a96e3a0756fd3285d4cf5a7a44e5a9","observation_id":"3b4f8312-fdc3-4c1e-a45e-f2e1a3ec97e9","resolution":{"observed_at":"2026-08-14T12:36:52.954763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.240676Z","title":"Parsi- monious black-box adversarial attacks via efficient com- binatorial optimization","venue":null,"work_id":"54bc2c35-5a16-490a-8262-e683b5f482b0","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.959262Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:02023e9ab3462f71f65ac0e641fb476bb6e69bf1d9cebf35d44c03904ce62972","observation_id":"bf956622-d3e8-4db0-bcae-2cf776dc3e18","resolution":{"observed_at":"2026-08-14T12:36:53.245748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.228354Z","title":"Simple black-box adversarial perturbations for deep net- works","venue":null,"work_id":"0ff5058f-13f7-4caf-bcc4-2e7f387b0e83","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.963504Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:55f74c721cba190564532270ca798e8b0cbf74075800c2e00ff3fc347c8179b8","observation_id":"690e5be7-7f52-498d-badf-c58f651d0a84","resolution":{"observed_at":"2026-08-14T12:36:53.232124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-14T12:36:52.967237Z","title":"Transferability in machine learning: from phe- nomena to black-box attacks using adversarial samples","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.967237Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:7a2dc2d1bb21c45dd03921f962d61f8b9e5716b5f0e004d92fce26d48caff7a4","observation_id":"53a9e5ad-6222-46f5-9c8d-a341b7538e1f","resolution":{"observed_at":"2026-08-14T12:36:52.967237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.216377Z","title":"Practical black-box attacks against machine learning","venue":null,"work_id":"d4494534-d0c2-47a8-8591-d06e5abc3a67","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.971349Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:af375bb2dacee7fcc703896d26d721dcd85770a3cb6d3f4856012c7ded5319e1","observation_id":"c1d870e2-5fbd-4246-8cc7-d5a5d369bbe2","resolution":{"observed_at":"2026-08-14T12:36:53.220861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.204338Z","title":"Very deep con- volutional networks for large-scale image recognition","venue":null,"work_id":"713aac0b-8c98-48e9-97f7-a63b0519e608","year":2015},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.974940Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:8f32ae6303a77307bea50daf5aa05c7a0e263fd120cc200ae21e521341261d88","observation_id":"374fe4ae-b579-445d-8ace-4db6db4cb515","resolution":{"observed_at":"2026-08-14T12:36:53.208295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.192862Z","title":"Query-limited black-box attacks to classifiers","venue":null,"work_id":"c801b57b-2295-474d-ae3c-9b3a9b178b8d","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.978925Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:dd42200ec452ad879416d62f7ad341658bd9a3045eaaa76ec078d3cfe51ec63a","observation_id":"a85e7d22-a2ac-45f3-961d-1ed8ba264a5a","resolution":{"observed_at":"2026-08-14T12:36:53.196961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.982325Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.982325Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:e617e051bec3f882f02259bc83e5515ec29dbcb5bc744c324e021f22d41c802b","observation_id":"b9324eae-71e1-4226-bb58-bb724fec0d5a","resolution":{"observed_at":"2026-08-14T12:36:52.982325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1805.07820","last_updated":"2019-08-20T03:34:24Z","snapshot_observed_at":"2026-08-14T19:13:13.171258Z","submitted_at":"2018-05-20T20:04:09Z","title":"Targeted Adversarial Examples for Black Box Audio Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.07820","snapshot_observed_at":"2026-08-14T12:36:52.985909Z","title":"Targeted adversarial examples for black box audio systems","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.985909Z"},"links":{"cited_paper":"/paper/1805.07820","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:f994fd984e56f97b7258943391c0159319bfabc998f53167c966d0cb4b8c4f56","observation_id":"82248e7a-0a14-4674-9a55-67d9c81a6dee","resolution":{"observed_at":"2026-08-14T12:36:52.985909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.172011Z","title":"En- semble adversarial training: Attacks and defenses","venue":null,"work_id":"059781aa-cf7f-40dc-ad6c-8f30359f4d57","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.991230Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:0c797909d018973aea0af6167c82de5fa22f9b6105df27fce21e2fa105116595","observation_id":"4c645395-f339-4df5-baa7-9bfd8498b173","resolution":{"observed_at":"2026-08-14T12:36:53.176011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.158872Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":"dc52be1e-030c-4c5e-a263-691fdfa96357","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.995260Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:7f0364c2b34575f34fb8463f1025db778c61ee9b7d3f831d0d4fe1304a824e92","observation_id":"c2f692a0-a2b1-4605-9e63-5a29e648a3fb","resolution":{"observed_at":"2026-08-14T12:36:53.163858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.144793Z","title":"Autozoom: Autoencoder-based zeroth order optimization method for attacking black-box neural net- works","venue":null,"work_id":"be720109-e1f4-4172-b6ac-419b35fac688","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.998751Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:fbca027ebf19ee952c6a47987c8d75e2fabdece3d30da9297a06e5664d2fef9f","observation_id":"048afd41-9abb-4e3a-99f2-4c2efccdd58d","resolution":{"observed_at":"2026-08-14T12:36:53.149693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.132961Z","title":"Natural evolution strategies","venue":null,"work_id":"a4a0d4b2-c325-4ba1-a1a7-ef62d52190e0","year":2008},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:53.002526Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:b54f501ea2de8afcd0cb4f51125c08cfd5c23e34387b569c7f036f8e1fd47967","observation_id":"1f9905f0-f2ac-4035-8876-610bed5b0a2f","resolution":{"observed_at":"2026-08-14T12:36:53.137103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.120659Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":"6bd6aeba-c7a4-4ee3-88e1-afcb012f6d6e","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:53.007232Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:2da73892540092179e7f853a9914ada7be92ef70d4dc577d919b82b6d5329437","observation_id":"a441e8b5-9d45-4e8a-85bc-eee9c9f9a129","resolution":{"observed_at":"2026-08-14T12:36:53.124658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T11:45:51.930957Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":1,"verified_fuzzy":33},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:1908.07000."}