{"as_of":"2026-08-16T16:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d505df8507d754b9255ed3f09c08124b2e8deddbff21c3f2e3f0f2d827563ef3","coverage":[{"denominator":23,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:29:34.990371Z","state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.07116/citation-record","integrity":"/paper/1908.07116/integrity","json":"/paper/1908.07116/citation-record.json","paper":"/paper/1908.07116"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-14T20:45:49.587140Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-08-14T12:29:34.898564Z","title":"Synthesizing robust adver- sarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.898564Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:002faed0154ca1b48adbd70b56c98ff1244fcbbcbd5dea5656101187332cdcd7","observation_id":"7558958b-093b-4b57-bb37-589b3fe27e77","resolution":{"observed_at":"2026-08-14T12:29:34.898564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.284082Z","title":"Towards evaluating the robustness of neural net- works","venue":null,"work_id":"131e4f17-11bf-4ac0-8ea6-de331f71a39a","year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.908638Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:50617736b339b5d50555fbb04c1e50d264c0fcfdf30526764edd93f58ea951d1","observation_id":"1fb0a148-3352-4f86-9456-c8b3899d7a9d","resolution":{"observed_at":"2026-08-14T12:29:35.287792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1709.04114","last_updated":"2018-02-10T04:49:12Z","snapshot_observed_at":"2026-08-14T20:33:45.650005Z","submitted_at":"2017-09-13T02:40:59Z","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1709.04114","doi":null,"metadata_source":"pith","pith_arxiv_id":"1709.04114","snapshot_observed_at":"2026-08-14T12:29:35.094276Z","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","venue":"stat.ML","work_id":"3d72c21b-2964-4840-acd4-87e7e90f4b32","year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.912657Z"},"links":{"cited_paper":"/paper/1709.04114","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:d8396acf8c64e09ea3a272778db0b3709fb217467e5e4847701171c06abc090b","observation_id":"135e4f66-8b8e-4c26-aba5-3209dccb82a9","resolution":{"observed_at":"2026-08-14T12:29:35.100559Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.272367Z","title":"Dhillon, Kamyar Aziz- zadenesheli, Jeremy D","venue":null,"work_id":"aa84ee40-acf4-4bbf-bcf0-d2119fc6b00f","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.917745Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:94eab5ff349c3ba6b79b58fbbe882b8f5d70ef16adee84dbe15ddb57259e89a0","observation_id":"f12d26b7-b430-4982-9359-7b08ef50cf2f","resolution":{"observed_at":"2026-08-14T12:29:35.276543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T12:29:34.926968Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.926968Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:a6c9458861394ca98059f460d0b793bb3ae7a15b75a81b79e3305bdd496d047b","observation_id":"de49af6e-0c62-450e-b882-80c4ebf280d7","resolution":{"observed_at":"2026-08-14T12:29:34.926968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.00673","last_updated":"2018-08-01T00:44:31Z","snapshot_observed_at":"2026-08-14T20:07:36.575817Z","submitted_at":"2017-12-02T22:26:12Z","title":"Towards Robust Neural Networks via Random Self-ensemble","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.00673","snapshot_observed_at":"2026-08-14T12:29:34.947794Z","title":"Towards robust neural networks via random self-ensemble","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.947794Z"},"links":{"cited_paper":"/paper/1712.00673","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:50086dd2d0b15f1b6e630c46df7ad77fc20bd07701da1f85dd64de746a06d2a6","observation_id":"d2890338-764f-446e-8123-e03fe229b0a2","resolution":{"observed_at":"2026-08-14T12:29:34.947794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-14T12:29:34.951955Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.951955Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:47a4db34931d328e7fbc1259cb0427079cba64c1eb8d464d6da7703fbaade496","observation_id":"abdf9768-1204-4e38-babd-c1e0177bc8ff","resolution":{"observed_at":"2026-08-14T12:29:34.951955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.216830Z","title":"Training neural network classifiers for medical decision making: The effects of imbalanced datasets on classification performance","venue":null,"work_id":"09d0e31a-4569-4ac4-a155-6475e98a9d39","year":2008},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.955262Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:d811dfcb0f5a40714198a0c53d9e91c986835b7b6ab3592b9d309c4034dbcd3f","observation_id":"2d6a7045-b1bb-4011-af71-3952fd431663","resolution":{"observed_at":"2026-08-14T12:29:35.221218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.179802Z","title":"Is robustness the cost of accuracy?–a comprehensive study on the robust- ness of 18 deep image classification models","venue":null,"work_id":"ac97d866-e8a8-4ed2-8daf-d4d67ccc470b","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.966400Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:97b05a1f4f5fb3de9f0edeb626d541ef3bd9bcbe558b22312fdcfc2f24a33759","observation_id":"cbaebb95-92b1-485c-8dc8-c8b687941882","resolution":{"observed_at":"2026-08-14T12:29:35.184066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T12:29:34.970353Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.970353Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:6590029c873106fb068d3d3e9c58c338263bcdf9451dd8774d24d25740cffc0a","observation_id":"553e4f3c-7438-4778-b3b2-2a97714cf771","resolution":{"observed_at":"2026-08-14T12:29:34.970353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.166829Z","title":"Using deep learning to extract scenery infor- mation in real time spatiotemporal compressed sensing","venue":null,"work_id":"4d53df7e-8ccc-4414-8d21-eabcf89e8256","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.978323Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:08a50e7e038d41b1a0670eaeba6fc8e173c76412b6f4f1213b4938048b301eb7","observation_id":"09709e8e-cd04-4895-bfd1-85c94eb64a24","resolution":{"observed_at":"2026-08-14T12:29:35.170951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.155582Z","title":"An admm-based universal framework for ad- versarial attacks on deep neural networks","venue":null,"work_id":"dc6c5d37-130a-4d9b-836e-54e488f19f7a","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.982471Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:210dac23e2c74fd294affc8c822d8dec62d8ead5a7d839193cc0ef090a2aabf9","observation_id":"36e57a19-5c51-41fd-8c22-0adafab9efac","resolution":{"observed_at":"2026-08-14T12:29:35.159122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.143130Z","title":"Fault sneaking attack: A stealthy framework for misleading deep neural networks","venue":null,"work_id":"5215fd27-111a-4f25-bb85-5dac439c5c95","year":2019},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.986408Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:d9a5a7651b5a787ec5f7662f46d346da15674e71878272984832658e56cb6fcf","observation_id":"4d81573c-6561-461b-b5c9-6591c32fa456","resolution":{"observed_at":"2026-08-14T12:29:35.147611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.131579Z","title":null,"venue":null,"work_id":"d9337cb6-c34c-446a-9547-1b72e5d18cc4","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.990371Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:8aaac1b6fa04074b98d6fb7d6e0ab177b430116044fe726bfb096fe9a7efd1ef","observation_id":"2cf837a8-a68a-4196-81b4-579cd6c472fc","resolution":{"observed_at":"2026-08-14T12:29:35.135523Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.228653Z","title":"The mnist database of hand- written digits","venue":null,"work_id":"ab1c4a3e-7fc6-45d7-8365-e0d451e6cf13","year":1998},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":1998,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.943612Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:44977ef430606d5c07ee2644bcae8efb709684162ab0b3591e75e3bb5e8ae80c","observation_id":"0da9b32e-e5c9-4a0c-98ba-5e79acc19e1e","resolution":{"observed_at":"2026-08-14T12:29:35.232232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.204513Z","title":"Distillation as a defense to adversarial perturbations against deep neu- ral networks","venue":null,"work_id":"98130955-9e20-4edf-93a4-3b180ae44e57","year":2016},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2008,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.958610Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:c5ca07973521dd6a6d8eea50f534a857cb958b0d55d553a73ec497f07b16e5b7","observation_id":"6d56cbe4-3c02-4b10-9da9-fad3b2f39adf","resolution":{"observed_at":"2026-08-14T12:29:35.208693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.239648Z","title":"Lecun, L","venue":null,"work_id":"750242cd-5836-4545-a379-e7dc1c29b74f","year":1998},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.939554Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:1d285af7ed899b74e3206ff2b19d33ab24cf29164ce8c8ae10b3f0276eeea75c","observation_id":"7bfcd256-09be-4326-9681-721babd58e8e","resolution":{"observed_at":"2026-08-14T12:29:35.244193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T12:29:34.974316Z","title":"Ensemble adversarial training: Attacks and de- fenses","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.974316Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:be7b8d9acbc33e7a29b8dc5cffabacd43bc8d5d1df0c71aa3ddb42f8f363fc31","observation_id":"eb077d57-03cd-49ec-868d-3a63586f8990","resolution":{"observed_at":"2026-08-14T12:29:34.974316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:34.935622Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2014,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.935622Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:12225754c2f040a14676d80363b34061776141042fff3ac15e832ef0c5f44aff","observation_id":"83fba3a8-1374-4579-a102-2711b483bc6d","resolution":{"observed_at":"2026-08-14T12:29:34.935622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.260089Z","title":"Convolutional neural network architectures for matching natural language sentences","venue":null,"work_id":"3d79d60b-48b2-43ec-b2a9-66902a3209ad","year":2014},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.931648Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:55d0e83cfe2191d00cf52b2ebff6aa492cc98f71d9fc09319882d70cdcfd45a8","observation_id":"e5eb3dd4-7072-4b62-8ae6-3d2c8f98bb74","resolution":{"observed_at":"2026-08-14T12:29:35.264214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.192535Z","title":"Dropout: a simple way to prevent neural networks from overfitting","venue":null,"work_id":"8886d367-9e84-4a6d-9727-307e2c468739","year":2014},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.962618Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:09070ec23b8f263ab3ba701f03cc57d52feb80285eae69af6d419297ab623531","observation_id":"3a73961b-733c-44ec-8405-f0699cd4a1ce","resolution":{"observed_at":"2026-08-14T12:29:35.196883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.00420","last_updated":"2018-07-31T00:09:56Z","snapshot_observed_at":"2026-08-16T10:32:32.732278Z","submitted_at":"2018-02-01T18:20:05Z","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.00420","snapshot_observed_at":"2026-08-14T12:29:34.904372Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.904372Z"},"links":{"cited_paper":"/paper/1802.00420","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:7eab15587d0868763ee9ce5d43c953cd168d99d5df7807c5a3d0419c701e9ca1","observation_id":"52594590-9b1e-42c2-aed7-899df2e50bd4","resolution":{"observed_at":"2026-08-14T12:29:34.904372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.11146","last_updated":"2018-11-29T22:50:01Z","snapshot_observed_at":"2026-08-14T18:57:52.025130Z","submitted_at":"2018-06-28T19:06:26Z","title":"Adversarial Reprogramming of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.11146","snapshot_observed_at":"2026-08-14T12:29:34.922198Z","title":"Adversarial re- programming of neural networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.922198Z"},"links":{"cited_paper":"/paper/1806.11146","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:2c134f37c4c0ddc59d67d2cb45d91dd18a2790b3258e0c4dde023af4e35ebe60","observation_id":"d69a2a91-d532-4547-9230-dfe68e754fea","resolution":{"observed_at":"2026-08-14T12:29:34.922198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T14:11:45.737590Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses"},"reference_resolution":{"displayed":23,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":1,"verified_fuzzy":12},"total_outbound_references":23},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 23 of 23 outbound references and 0 inbound Pith citation observations for arXiv:1908.07116."}