{"as_of":"2026-08-21T13:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ef939dacfde61300242a531bafc4d9b9cb05646a5d11439120317c07de2cca33","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T05:10:39.477241Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T04:41:12.165957Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":1,"source":"pith","source_observed_at":"2026-08-05T02:28:24.338817Z","state":"measured"}],"external_citation_measurements":[{"count":0,"observed_at":"2026-08-05T02:28:24.338817Z","source":"pith"}],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"cited_work":{"arxiv_id":"1909.02436","doi":"10.48550/arxiv.1909.02436","metadata_source":"pith","pith_arxiv_id":"1909.02436","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","venue":"cs.LG","work_id":"008bfb32-203c-4558-a78c-0edc75d1c1a4","year":2019},"citing_paper":{"arxiv_id":"2607.09209","last_updated":"2026-07-10T08:56:40Z","snapshot_observed_at":"2026-08-15T01:39:01.002684Z","submitted_at":"2026-07-10T08:56:40Z","title":"Performance of morphological classifiers for galaxy mergers compared to current machine learning methods","version":1},"reference_index":63,"source":"arxiv_source","source_observed_at":"2026-07-13T04:41:12.165957Z"},"links":{"cited_paper":"/paper/1909.02436","citing_paper":"/paper/2607.09209"},"observation_digest":"sha256:6dbd49580128370f044d66acbb568edc623950ed44386db3f12dc5fe0df746fe","observation_id":"66c842e7-342c-4976-9bff-5e5c42e5a4ed","resolution":{"observed_at":"2026-07-13T04:49:20.418532Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-07-13T08:49:42.273374+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T08:49:42.273374+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1909.02436/citation-record","integrity":"/paper/1909.02436/integrity","json":"/paper/1909.02436/citation-record.json","paper":"/paper/1909.02436"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.890641Z","title":"Goodfellow","venue":null,"work_id":"c13dd4f8-1990-464e-a5df-c844deb320fb","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.344465Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:20f25aedcfc133dea7817993dd71457eb9aef09b7253daed4af533b91143b568","observation_id":"5aba0b46-87de-4fff-b40a-2d4fecdcffed","resolution":{"observed_at":"2026-08-14T05:10:39.894476Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.880146Z","title":"Carlini and D","venue":null,"work_id":"bb47c830-4f63-4b02-ac43-f5c3411371cc","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.348706Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:c5c2d00041e0d8b63425f8c5ffa9b9d404d5b9d761b27b986764a0b6b4dafc37","observation_id":"ebf540aa-6317-42c4-bc16-03407c277aff","resolution":{"observed_at":"2026-08-14T05:10:39.883667Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.869195Z","title":"Dodge and L","venue":null,"work_id":"d7b1f409-de91-4ebc-9a5f-07537f72c46f","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.353311Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:f138b9eeda7ded593b4f58ab03e6498dcafb6336be37865770f9630b6e17af5b","observation_id":"bbc37331-6fbe-4bb1-a0b6-93eaace22993","resolution":{"observed_at":"2026-08-14T05:10:39.872948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.857761Z","title":"Dodge and L","venue":null,"work_id":"6e0068a7-c9ec-4d80-a015-764337242374","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.357760Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:a67a54f69fc47c8d03609cb54c5135edab3b334357fffeace955931b40bb40e5","observation_id":"894c4474-5406-4c60-9b1e-a7102faa399d","resolution":{"observed_at":"2026-08-14T05:10:39.862163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.08119","last_updated":"2017-03-23T15:56:33Z","snapshot_observed_at":"2026-08-17T20:19:38.563213Z","submitted_at":"2017-03-23T15:56:33Z","title":"Quality Resilient Deep Neural Networks","version":1},"cited_work":{"arxiv_id":"1703.08119","doi":null,"metadata_source":"pith","pith_arxiv_id":"1703.08119","snapshot_observed_at":"2026-08-14T05:10:39.546833Z","title":"Quality Resilient Deep Neural Networks","venue":"cs.CV","work_id":"91201dcf-1421-409e-90a8-f04ce6388b31","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.362068Z"},"links":{"cited_paper":"/paper/1703.08119","citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:811c4f8b278650535747b9eb630e594e3f276921967960b1ec2c5cfde6f6c864","observation_id":"d2350dab-fc11-4782-be25-98491f982572","resolution":{"observed_at":"2026-08-14T05:10:39.552357Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02779","last_updated":"2019-09-16T04:38:13Z","snapshot_observed_at":"2026-08-14T20:05:48.423304Z","submitted_at":"2017-12-07T18:53:52Z","title":"Exploring the Landscape of Spatial Robustness","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02779","snapshot_observed_at":"2026-08-14T05:10:39.366412Z","title":"A rotation and a translation suf- fice: Fooling cnns with simple transformations","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.366412Z"},"links":{"cited_paper":"/paper/1712.02779","citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:75cb4b1030145b2a7c4c21aa5a057cd31fe4c96997276ab38d1e0f4f87ebe2e9","observation_id":"0e885cf3-a31a-47f6-9306-c27017bd889c","resolution":{"observed_at":"2026-08-14T05:10:39.366412Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.846221Z","title":"Robustness of classifiers: from adversarial to random noise","venue":null,"work_id":"1fd01541-b74e-4e88-b301-8ce56f4b11ba","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.370817Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:c8923b537401e90c0313ca6a13677496f28996fe07c0bf38cd5d212ea501dfe6","observation_id":"68509123-68e2-49bc-9734-6831d81d4982","resolution":{"observed_at":"2026-08-14T05:10:39.850092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T05:10:39.374314Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.374314Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:1640e913f222c399137cbddc141d9870764c3edf47ca94060096d136bd1f3de8","observation_id":"a5d33590-fbeb-4092-b390-a186ad512a85","resolution":{"observed_at":"2026-08-14T05:10:39.374314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.834939Z","title":"Towards deep neural net- work architectures robust to adversarial examples","venue":null,"work_id":"d175329d-2b0a-4c00-9be2-e8ee6d341695","year":2015},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.378340Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:b6dccaa0de47e6a90c87845a103dffbd67f4c29aa7c99f7307ec364e2f95c990","observation_id":"28f23263-7d66-401a-99e8-81cfa926a92a","resolution":{"observed_at":"2026-08-14T05:10:39.838821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.823990Z","title":null,"venue":null,"work_id":"97a25cd6-131d-481a-a906-bf2be401feb6","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.381798Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:cee453dccc8decb31ce7cfa4ade1a38045010e89fc112a41c49604839388b554","observation_id":"d44e3bdb-1853-47d0-a484-fc3ebdaa08fa","resolution":{"observed_at":"2026-08-14T05:10:39.827684Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.812749Z","title":"Benchmarking neu- ral network robustness to common corruptions and perturba- tions","venue":null,"work_id":"a6cab025-8d43-4f7d-8fd0-5926bfe2ceeb","year":2019},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.385983Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:8bb21a4c4be9896a80814bbeb3aa7db6367b4c8ad091f126e9f084c0ad0e7a8a","observation_id":"d0a723e5-e15d-4d09-b3d9-29afcd4e4f86","resolution":{"observed_at":"2026-08-14T05:10:39.816853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.02175","last_updated":"2019-08-12T14:36:10Z","snapshot_observed_at":"2026-08-20T18:21:16.685532Z","submitted_at":"2019-05-06T17:45:05Z","title":"Adversarial Examples Are Not Bugs, They Are Features","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.02175","snapshot_observed_at":"2026-08-14T05:10:39.389593Z","title":"Adver- sarial examples are not bugs, they are features","venue":null,"work_id":null,"year":1905},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.389593Z"},"links":{"cited_paper":"/paper/1905.02175","citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:6c331c85728052d2b3b7fcac5d428899a8ac05893b8dca58c014b54b84461b09","observation_id":"4d82cc57-74df-4adb-bc04-67c25223d0de","resolution":{"observed_at":"2026-08-14T05:10:39.389593Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.801840Z","title":"Ro- bustness of classifiers to uniform l p and gaussian noise","venue":null,"work_id":"77c08a81-2654-449a-98fe-f001bdfa3254","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.393497Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:0ddc180232b5e703114c698583fb207eacaa68108c833f22837b7fe2449af336","observation_id":"38dacb44-0345-4493-b8e4-b9ea47627cc9","resolution":{"observed_at":"2026-08-14T05:10:39.805756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.791346Z","title":"Karahan, M","venue":null,"work_id":"8a97d9ae-5e32-45d4-877e-b58af657a1d2","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.397258Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:6fae5072155a9348e3d9865023b8174b73793d4f3a5adc893dd38db779749262","observation_id":"6dca3f60-f44d-4a44-adb1-52b626db213f","resolution":{"observed_at":"2026-08-14T05:10:39.795020Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.779420Z","title":null,"venue":null,"work_id":"e03ca0dc-53b5-438e-95db-a044a2ba1c38","year":2012},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.401421Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:9b41a9d00a43571f5d5e97f20d57ca71fb310836590ae9ca1fa00e9f70356626","observation_id":"1466a8ce-cd97-456d-ba4e-b6fd6a257118","resolution":{"observed_at":"2026-08-14T05:10:39.783033Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.769369Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"ce93cb0c-48b6-48f3-a35d-9ec0f5db1e50","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.404950Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:6953962f066e060647dbab10d25669d1b1a0541739a8d8683f03c1b158c16652","observation_id":"2479f8fd-2baf-474b-a088-32bde60f7e6d","resolution":{"observed_at":"2026-08-14T05:10:39.772722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.03387","last_updated":"2023-07-04T06:49:26Z","snapshot_observed_at":"2026-08-14T21:01:51.753000Z","submitted_at":"2017-05-09T15:30:58Z","title":"Generative Adversarial Trainer: Defense to Adversarial Perturbations with GAN","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.03387","snapshot_observed_at":"2026-08-14T05:10:39.408471Z","title":"Genera- tive adversarial trainer: Defense to adversarial perturbations with GAN","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.408471Z"},"links":{"cited_paper":"/paper/1705.03387","citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:c02ec970a6e68154b5d6f8605da9521aa868b39d924380812106d4d845f38f71","observation_id":"b7ee53f1-a8c8-429c-840d-505184a6e137","resolution":{"observed_at":"2026-08-14T05:10:39.408471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.759407Z","title":"Belongie, Lubomir D","venue":null,"work_id":"f7eeb80c-4dc8-4a1c-8411-5fe4279fb824","year":2014},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.412274Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:6039d4fcd4bbcb56f315106974a8ecea6b1782eb27a3e5d4bf83c39c824c4a42","observation_id":"dc085cfa-bcb8-4845-93df-1213ef0cc80e","resolution":{"observed_at":"2026-08-14T05:10:39.762916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.747993Z","title":"Beyond pixel norm- balls: Parametric adversaries using an analytically differen- tiable renderer","venue":null,"work_id":"a511988a-2740-4d3a-b53d-02da8345b307","year":2019},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.415726Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:0712ba9f72221287880eff39b007e688ff0bce345f8588b99fa48cb420bd4b01","observation_id":"7671723b-93de-4c96-b20d-9e5cb91f7d2f","resolution":{"observed_at":"2026-08-14T05:10:39.752007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.737450Z","title":"Towards robust neural networks via random self- ensemble","venue":null,"work_id":"d8b1c77c-6c0b-461d-947b-438b3ebc3432","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.419306Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:d318643154b90e521b10d7178b472b057d91f17450b9957a5be17434dd6bfcb8","observation_id":"3d5980e3-c3a7-4308-8c5b-d94b21b1410a","resolution":{"observed_at":"2026-08-14T05:10:39.741130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.725684Z","title":null,"venue":null,"work_id":"fc19b0a1-9ed4-4c6f-be0a-bb6556d9ee36","year":2015},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.423966Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:83574cdfb458d2b903204c8fb1d15b89d2141e717d5a976958f293305ab3afe6","observation_id":"1eb3dddf-6450-40f0-bbcf-ce24a9943fdf","resolution":{"observed_at":"2026-08-14T05:10:39.729534Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.714845Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"0c263791-0a2d-4bfa-8ffa-1d52a11ac017","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.427425Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:c969dd646cb69f36837aba5370a7b43cf125437a85f5c10877247a515ac6493d","observation_id":"18e5df46-4c8f-4aa2-88b6-f37ab47c48f4","resolution":{"observed_at":"2026-08-14T05:10:39.719057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.702249Z","title":"Papernot, P","venue":null,"work_id":"10f62f15-77d5-43ff-93af-4da61653cf79","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.431063Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:013d911c7f854988ca3292e22d4e74725565a0426b913d89fc879f12e514ec5f","observation_id":"db2fe5a2-0c57-439b-96e6-00523f7bf25e","resolution":{"observed_at":"2026-08-14T05:10:39.706530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.689797Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks","venue":null,"work_id":"6413191d-85f1-44b2-995b-6b0a0ae0d93e","year":2015},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.434759Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:c2c89a3871ab56804d36c69b4bdb3f6c26c51eac9cd903c6dd0e10720e8d10fb","observation_id":"8b0706cd-1102-4809-9da1-4b7d685b50a6","resolution":{"observed_at":"2026-08-14T05:10:39.693842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.678857Z","title":"Improving the adversarial robustness and interpretability of deep neural net- works by regularizing their input gradients","venue":null,"work_id":"f2e7a7a1-4f06-4cdf-aee4-59b9589ead68","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.438402Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:43b21e8d6edb34469da624ea44349994ea25aa527c2c851920dda3df89327378","observation_id":"c33d294b-b91c-4d4d-b3ba-bbdf85006a6d","resolution":{"observed_at":"2026-08-14T05:10:39.682811Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.667666Z","title":"Defense-GAN: Protecting classifiers against adversarial at- tacks using generative models","venue":null,"work_id":"47007491-cf52-4c36-9c93-0d5d480931ed","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.441940Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:2ee33fb01e75b62f3bf8fa302028832ab3060f646c1f897bb847f8c03ee01c74","observation_id":"9d2ecb6c-1dd4-4b86-8f4d-c7ec1de49259","resolution":{"observed_at":"2026-08-14T05:10:39.671759Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.656183Z","title":"Adversarially robust gener- alization requires more data","venue":null,"work_id":"f6e7b1ed-e755-43e6-8d5f-cc5af55c8b65","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.445692Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:440f22d76e8e338df9d3b1753225665be2c9ec5cf3db4b97127cf130a3822b1a","observation_id":"e13cdd0a-49db-435b-91e8-d32a86047f77","resolution":{"observed_at":"2026-08-14T05:10:39.660349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.645199Z","title":null,"venue":null,"work_id":"d8a881af-ad53-4071-a9c8-334295838034","year":2003},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.449169Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:04bc9d8198a5ac2323cec5ea8e23ea44c44938d4613fad17e175e4853395572b","observation_id":"1b07427b-0dd4-4e38-8433-6bd630e90092","resolution":{"observed_at":"2026-08-14T05:10:39.648963Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.453006Z","title":"Simonyan and A","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.453006Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:f34583555bec8d30fca5cf49c3ff2e5c3bd1b8703ccbd5ab243c869a27eda234","observation_id":"4932827a-3acd-48d9-8d73-105b4568f85a","resolution":{"observed_at":"2026-08-14T05:10:39.453006Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.625669Z","title":"In- triguing properties of neural networks","venue":null,"work_id":"95d57bab-c546-4ed5-84fd-7a36bc949b55","year":2014},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.456490Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:e5195abf3b5e99d500202090592635fb6ab1a2c2be889c3525e49a900f6fcdfd","observation_id":"0c808492-a02d-4e20-8481-98abf905339c","resolution":{"observed_at":"2026-08-14T05:10:39.630482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.614059Z","title":"Taigman, M","venue":null,"work_id":"e34b7293-1049-4887-941f-7324646e00dd","year":2014},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.459917Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:2d4f2b29cbc32a3c7cc12e8ef055c6601ecbd925e922fd21fc2dae9dfe8f7c7e","observation_id":"d5bade2a-56f5-46c2-a8f9-42926b9d3210","resolution":{"observed_at":"2026-08-14T05:10:39.618429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.602268Z","title":"Ensemble adver- sarial training: Attacks and defenses","venue":null,"work_id":"5d5fe4fd-a8ad-4222-b1c8-6d6e7429c8d7","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.463237Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:65831b4ce69a9d272808d7a6360c8189431828f63198fccf62345a242f49249f","observation_id":"bf39e2ce-235a-4a87-873b-09310e1a83b0","resolution":{"observed_at":"2026-08-14T05:10:39.606078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.466439Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.466439Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:fb8e1bcfd399386bd3f842c79ac3594436feaed97caac35c1c22a52cf33d5575","observation_id":"54a91562-f159-48cb-be13-2a83cb649b97","resolution":{"observed_at":"2026-08-14T05:10:39.466439Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.583761Z","title":"Spatially transformed adversarial ex- amples","venue":null,"work_id":"f166390d-7ce7-4762-91e4-b91e73de3a57","year":2018},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.470427Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:1f043178e6916bcdbcce72ef350b354a97ae0a9e1b7e071d1a551a20c4d00f7b","observation_id":"ccfed995-0af0-4e52-b447-05632e7b1f24","resolution":{"observed_at":"2026-08-14T05:10:39.587902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.571849Z","title":"Improving the robustness of deep neural networks via stability training","venue":null,"work_id":"d98cde5a-4dc9-4789-ba12-0d22fb3aaae7","year":2016},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.473999Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:bd8eb1040185df97d12f48a7cc085ee30c8938f05eac860d5c50aa355fff84ae","observation_id":"b16e9e68-7fc5-40aa-9016-677c43e866d0","resolution":{"observed_at":"2026-08-14T05:10:39.575593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T05:10:39.560320Z","title":null,"venue":null,"work_id":"fe728b0b-adc4-4685-9655-c5060bd58956","year":2017},"citing_paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T05:10:39.477241Z"},"links":{"citing_paper":"/paper/1909.02436"},"observation_digest":"sha256:fef1fa7ed8ff71ff8096b2bd8005fe71b9727da041c0e3627984ea63654dbe7f","observation_id":"fd8bd424-2cd9-47c2-b468-7c204545a5b5","resolution":{"observed_at":"2026-08-14T05:10:39.563981Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-21T06:32:19.484+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1909.02436","last_updated":"2019-10-09T08:14:58Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-14T05:04:31.091511Z","submitted_at":"2019-09-04T14:36:23Z","title":"Are Adversarial Robustness and Common Perturbation Robustness Independent Attributes ?"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":1,"verified_fuzzy":24},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 1 inbound Pith citation observation for arXiv:1909.02436."}