{"as_of":"2026-08-14T10:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1170cd5f0773628f35870b8dc3bd632d7bdec9e5e76a03719d463c6d65ca7d67","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T18:10:08.838524Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.11795/citation-record","integrity":"/paper/2411.11795/integrity","json":"/paper/2411.11795/citation-record.json","paper":"/paper/2411.11795"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.250938Z","title":"Soft-to-hard vector quantization for end-to-end learn- ing compressible representations","venue":null,"work_id":"fd3f65a9-ecab-493c-8680-afc440728b04","year":2017},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.699395Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:96f8b89b3e1d13b50a88db8c4c67284a98466cc0d2ca54a1f182939922f69aed","observation_id":"c94f2c3d-f802-48ae-8e1e-eb6a12b2c201","resolution":{"observed_at":"2026-08-12T18:10:09.254245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.242535Z","title":"Video compression dataset and benchmark of learning-based video-quality metrics","venue":null,"work_id":"44092a5e-249b-4c8e-aa43-e030e7c07c58","year":2022},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.703374Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:952306885348011d6ad1f5041b76efde38ad56fbd34567dd2edd11c621c90721","observation_id":"9e285832-e098-493f-a665-b585a1637555","resolution":{"observed_at":"2026-08-12T18:10:09.245507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.232881Z","title":"Comparing the robustness of modern no-reference image- and video-quality metrics to adversarial attacks","venue":null,"work_id":"b0ffd17f-eefc-4b0f-9110-ecb504a2a8a2","year":2024},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.706634Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:ba397fea85bd8e45a8789c7169bf4d7fd63b76c1ab9b89faf8c23cae80ef40a2","observation_id":"1fe8e5be-46aa-4b4b-904b-818bdc2177b1","resolution":{"observed_at":"2026-08-12T18:10:09.236735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.224311Z","title":"Contour detection and hierarchical image seg- mentation","venue":null,"work_id":"d1961aca-13b7-4856-bb59-171728bfe767","year":2011},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.709698Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:914b7061faaf0b79527dd7be4356596fd567b561b8942f1c0ed87839b920d30e","observation_id":"18b8d4c6-712d-411f-b987-964e7d386a59","resolution":{"observed_at":"2026-08-12T18:10:09.227403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.214824Z","title":"The jpeg ai standard: Providing efficient human and machine vi- sual data consumption","venue":null,"work_id":"a4c79be1-0bed-40a5-9303-10155651e564","year":null},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.712888Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:24fab4251624dd59ea26dfba7b7d083d2b90ed6c17eea60281a13769cb1625ce","observation_id":"2292dd63-e972-4d6c-898b-7fd0105fd91e","resolution":{"observed_at":"2026-08-12T18:10:09.217968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01704","last_updated":"2017-03-03T14:53:13Z","snapshot_observed_at":"2026-08-06T14:10:12.161882Z","submitted_at":"2016-11-05T21:39:53Z","title":"End-to-end Optimized Image Compression","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01704","snapshot_observed_at":"2026-08-12T18:10:08.716472Z","title":"End-to-end optimized image compression","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.716472Z"},"links":{"cited_paper":"/paper/1611.01704","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:f1c19d6a8553adad2fee5950958b2dec8210b992bd7360620be43bff896d6f12","observation_id":"da88b0c9-f84a-4c21-a8e1-0b77dd36a69a","resolution":{"observed_at":"2026-08-12T18:10:08.716472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.205997Z","title":"Variational image compres- sion with a scale hyperprior","venue":null,"work_id":"e4b23259-4d96-4199-ba21-d85504674947","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.720565Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:d9446f3aba47725cab24d40b2040ea8ac365604d7a3bbc6ed262026e6e85dc00","observation_id":"f4cc8404-b110-4baa-a98d-3a3ab958e52b","resolution":{"observed_at":"2026-08-12T18:10:09.209175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06347","last_updated":"2020-03-20T17:59:15Z","snapshot_observed_at":"2026-07-06T07:45:46.835717Z","submitted_at":"2019-04-12T17:59:30Z","title":"Unrestricted Adversarial Examples via Semantic Manipulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.06347","snapshot_observed_at":"2026-08-12T18:10:08.723656Z","title":"Unrestricted adversarial examples via semantic manipulation","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.723656Z"},"links":{"cited_paper":"/paper/1904.06347","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:84e65530dcfd06c69b53a596ff21ce01bbc42384067f8aaf8e722b484ac04e25","observation_id":"2cc57b0a-bbd4-4909-84c2-fb1d273ada02","resolution":{"observed_at":"2026-08-12T18:10:08.723656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.197851Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"8e89f4f7-8b21-4d68-9fdf-f35d42398edd","year":2017},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.727194Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:afde1242a92144b3716a0c9ee9e1e635aed2adf2c27774fae02066aed11a123e","observation_id":"6b5c035d-19aa-4628-a71f-5838c05bc00e","resolution":{"observed_at":"2026-08-12T18:10:09.200685Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.187814Z","title":"A survey on adversarial attacks and defences","venue":null,"work_id":"9887702c-1ffb-473e-af3c-938e171f5ec6","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.730605Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:9f69e88e3650a0e3c9b5c8bd95cb4b6689dc15f3fcdc59ba1d7619ee4b1f3282","observation_id":"3292f4f5-ab02-48ed-8b74-e827ce95649f","resolution":{"observed_at":"2026-08-12T18:10:09.191948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.179257Z","title":"Toward robust neural image com- pression: Adversarial attack and model finetuning","venue":null,"work_id":"a0034ab2-d6c9-4994-87f3-be9f21d4ba9f","year":2023},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.733436Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:aa022d58bfbf4611e90b46df65a3f237074f4901cd132221c186e52d4a8129c4","observation_id":"e55a42bb-c433-43d7-b862-eb391db6485c","resolution":{"observed_at":"2026-08-12T18:10:09.182630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.170814Z","title":"Toward robust neural image com- pression: Adversarial attack and model finetuning","venue":null,"work_id":"2543ef93-4cfe-4950-a96c-b96c843da070","year":2023},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.736996Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:36b308f7d2cdb056bd6e7306550593c5f28121b64ceb7ee77b3bda4ce11f2f58","observation_id":"2c0d817c-0dd0-4ed0-be19-cc1c46fb94df","resolution":{"observed_at":"2026-08-12T18:10:09.173936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.161280Z","title":"Learned image compression with discretized gaussian mixture likelihoods and attention modules","venue":null,"work_id":"361a1291-7746-44c9-bde6-4e3e7bff9c66","year":2020},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.740033Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:428a620e80a5ee018a71d9868e3a4684894d03883b0bc7062c0e732ab68d2fe3","observation_id":"a45a66c1-0fee-4103-8116-549f4fa66baf","resolution":{"observed_at":"2026-08-12T18:10:09.165104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.152572Z","title":"Nips 2017: Adversarial learning devel- opment set","venue":null,"work_id":"13f66133-b7a7-4b7c-a752-4f2ec299c440","year":2017},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.742965Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:4b175ab68fe46ae5399882caffe051f0b16fa1e216defa4b1b624dc7746a0af9","observation_id":"8ff8fdff-475d-4668-bf96-28dbb45ceec3","resolution":{"observed_at":"2026-08-12T18:10:09.155480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.144301Z","title":"The cityscapes dataset for semantic urban scene understanding","venue":null,"work_id":"c90bc3e1-bc1c-43f3-bea1-f6871bf887a1","year":2016},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.746378Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:bd441576685fd798dc565440ec1131072fd83a50c9c8af578f17069d09edb5a5","observation_id":"634d5fac-0f5b-4d8a-a6ef-dde37e606a4f","resolution":{"observed_at":"2026-08-12T18:10:09.147464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.135383Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"698e7830-b516-4c5a-bd18-c7ec667b28fc","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.749691Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:4746a0b915658d837e0b6709e7b44771beaa1960de6420828184b07a43aebbf2","observation_id":"a098237b-2f84-4b94-9af4-4bde0aab123f","resolution":{"observed_at":"2026-08-12T18:10:09.138463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.127110Z","title":"Lossy image compression with quantized hierarchical vaes","venue":null,"work_id":"2c73bec5-6368-492d-b3c6-4913ac8d1e2f","year":2023},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.752552Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:e0d34fb86d08be82cb53431db8e1ea14a168d055b8e28c7ce7ad4c6aa24e9a96","observation_id":"2bc99580-39fa-476e-bcaf-0194cc3676c9","resolution":{"observed_at":"2026-08-12T18:10:09.130017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.118461Z","title":"Neural image com- pression via attentional multi-scale back projection and fre- quency decomposition","venue":null,"work_id":"d14bc9fe-5dde-4125-8523-da7bff1d38a5","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.755913Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:db7c3dc09f7547215ec301e2cf231938ee9d8ba266df9186de3e4d7ec6318761","observation_id":"762f0954-17ca-45bd-a10e-515b75d19a42","resolution":{"observed_at":"2026-08-12T18:10:09.121776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.108242Z","title":"Elic: Efficient learned image compres- sion with unevenly grouped space-channel contextual adap- tive coding","venue":null,"work_id":"cec303b9-ae50-4109-81e1-d4dceb31e7a6","year":2022},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.759517Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:ad31d787dd0487d44d7d5d24484d43a4b482ae7f8dff7621105721f44d3d6fee","observation_id":"de60ec70-81b8-4c5d-8940-0d0e2122f17b","resolution":{"observed_at":"2026-08-12T18:10:09.112037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.099072Z","title":"Kodak lossless true color image suite","venue":null,"work_id":"0c16e6b8-52e6-48ad-992d-dcaa6c64dd1c","year":1991},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.762247Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:3405e7f3ff76a54d88b1ec32c0a25f6bd876dcc0e3d34a7143cf48fdd450bd62","observation_id":"d564f530-2555-4ed8-8ad9-299922deb34a","resolution":{"observed_at":"2026-08-12T18:10:09.102008Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.091107Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"c53e65a9-f90e-4911-93b0-93442543d985","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.764924Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:05bb0e5cddff5307b4acc692470e410990f8a3a1c969407cd9df19c5085eb56f","observation_id":"2459db9c-3550-4d59-b06d-f67081f8a661","resolution":{"observed_at":"2026-08-12T18:10:09.093839Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.082800Z","title":"Deep contextual video com- pression","venue":null,"work_id":"cb485387-5e9d-47a1-823a-8b1854e28d2b","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.767618Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:22427327e074653983ee757a2abc8b3753cb08901a5656914e174221ecd7d5da","observation_id":"d730c84f-defe-4c17-a0ed-f0300bc405b8","resolution":{"observed_at":"2026-08-12T18:10:09.085752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.074728Z","title":"Vmaf: The journey continues","venue":null,"work_id":"407362c7-5925-4a55-92fa-505d0c188541","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.770424Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:94ac66f2e54986b7fd63e5b11348b20fb54074e8384510ea905a483c40e3a6b6","observation_id":"f00bd9a0-de82-46c2-9601-f78af3bb1046","resolution":{"observed_at":"2026-08-12T18:10:09.077666Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.066637Z","title":"Manipulation attacks on learned image com- pression","venue":null,"work_id":"219aae32-9086-4a75-8fd4-20862b54d734","year":null},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.773499Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:1b7eac675afcae3038c6f4a5e1ac945ed85892c5a6a76d611a31968fec5f286a","observation_id":"6f48a617-5ffc-4961-82d6-2614c9610419","resolution":{"observed_at":"2026-08-12T18:10:09.069733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.057511Z","title":"Learned image compression with mixed transformer-cnn architectures","venue":null,"work_id":"0ec09553-44c4-4deb-b0ea-ad7f288a7cc3","year":2023},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.777265Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:a8ae7b2e4cc070e7c67a957d879d0a7423d53c2df711ea1c90fc1b5fe15d027c","observation_id":"70e6d93c-5f15-4669-9b03-0da09cc552ff","resolution":{"observed_at":"2026-08-12T18:10:09.060761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.048424Z","title":"Frequency-driven imperceptible ad- versarial attack on semantic similarity","venue":null,"work_id":"90478a73-0e63-4bc0-93b7-37b9605e87a0","year":2022},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.780431Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:fa7bd2a066f69c23ae080189ec88c15e958bdb2045460a39a5693ae18179c868","observation_id":"6b785482-4ff6-4634-b38c-8e73f1bf3b31","resolution":{"observed_at":"2026-08-12T18:10:09.052390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.040056Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"7120e315-84a1-40a1-9daa-85c95fe1faee","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.783143Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:7117f5d6dd7ac14bfdee65a0f53a2ec81567a2026489f16485ef7f4751a036ff","observation_id":"aeb9da19-541f-4fb0-a489-18e7675f10dd","resolution":{"observed_at":"2026-08-12T18:10:09.043269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.031319Z","title":"High-fidelity generative image compres- sion","venue":null,"work_id":"c205ccdf-5b00-4d27-b788-60c57c4befe4","year":2020},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.785965Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:c7b688c965c88c4d37b3bdd678aceb8c4e20f1aa7879cc35f4a5392d62d30f34","observation_id":"26200545-068a-4ad3-9acf-a6e743830339","resolution":{"observed_at":"2026-08-12T18:10:09.034459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.021851Z","title":"Joint autoregressive and hierarchical priors for learned im- age compression","venue":null,"work_id":"9400a472-4562-4816-8e7e-47002c8409eb","year":2018},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.788804Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:f7f218bf287e19412fc7aa421844aecad2fac3591e4940fad73b740d7b0a5e1a","observation_id":"e45e3221-021e-4b7f-a04c-83f4d40846b2","resolution":{"observed_at":"2026-08-12T18:10:09.025837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.013213Z","title":"Pick-object-attack: Type-specific adver- sarial attack for object detection","venue":null,"work_id":"0db3aa7f-5cd0-45e8-a74d-869d5acfccba","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.791645Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:edc51e03b708ccc63da317769e437401d5e81791e16d924a8b4633f7dc4a0149","observation_id":"50efed2f-c974-4fc8-9b3a-0800252be804","resolution":{"observed_at":"2026-08-12T18:10:09.016220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-13T15:43:37.769321Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-12T18:10:08.794370Z","title":"Diffusion models for adversarial purification","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.794370Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:0e034b13d45a0f2b3f0772663ed7f63b7dea894863a65c783e18e8b939fa22ad","observation_id":"cd20691b-e38c-4dcc-9167-25187d306e8d","resolution":{"observed_at":"2026-08-12T18:10:08.794370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:09.004545Z","title":"The ciede2000 color-difference formula: Implementation notes, supplementary test data, and mathematical observations","venue":null,"work_id":"62be417d-5c45-4486-a48c-ac164a9eb52f","year":2005},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.797603Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:c28c4278899087250234080a718acf471ad10da2bbef50fea437a9a2a6660448","observation_id":"a7f7f3ed-bc1e-43ae-9bec-ed8b23abad8a","resolution":{"observed_at":"2026-08-12T18:10:09.008263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.996048Z","title":"Jpeg ai image compression visual artifacts: Detection methods and dataset, 2024","venue":null,"work_id":"dc391680-595b-4b2f-9d8c-51cf99e7d274","year":2024},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.801084Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:f36faf70db725f64b501362c87cd306923562bd9d0b9947aaf7a90b4edd67534","observation_id":"eb884a24-916f-4bd9-83a3-43872f15f662","resolution":{"observed_at":"2026-08-12T18:10:08.999202Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.05071","last_updated":"2023-02-10T06:02:29Z","snapshot_observed_at":"2026-08-13T12:47:37.461337Z","submitted_at":"2023-02-10T06:02:29Z","title":"EVC: Towards Real-Time Neural Image Compression with Mask Decay","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.05071","snapshot_observed_at":"2026-08-12T18:10:08.804297Z","title":"Evc: To- wards real-time neural image compression with mask decay","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.804297Z"},"links":{"cited_paper":"/paper/2302.05071","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:4015b4d0342ab6a85ae6d82f9a93c1231dfd86462196e2d0cf058a1985e1396c","observation_id":"49b5c643-0832-4195-a4e1-f53711b2182f","resolution":{"observed_at":"2026-08-12T18:10:08.804297Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.987617Z","title":"Simoncelli","venue":null,"work_id":"eb8d0a9f-b7b9-47a0-8d61-e0683653170a","year":2008},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.807962Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:4a273999e8c4deec878ca519b5d444def3972bea7d94f67039386ade66fd62e4","observation_id":"647bf31f-76bd-4608-a29f-707b45ad254f","resolution":{"observed_at":"2026-08-12T18:10:08.990578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.978705Z","title":"Wang, E.P","venue":null,"work_id":"b4317e24-fcdd-494b-a15d-643d94119ecb","year":2003},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.810933Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:9538a1dd7c7f6739f2720dfc2ab0ee983e9e4af2813a0964072afd2d7c787b50","observation_id":"c41418de-0eff-4298-8ed2-742728bf25f2","resolution":{"observed_at":"2026-08-12T18:10:08.982185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.968959Z","title":"Physical adversarial attack meets computer vision: A decade survey","venue":null,"work_id":"9fe920b7-3162-4e74-8b8e-2336f99b2466","year":2024},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.813691Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:def53fbad1e97141e63e385e554db21f39f2f9c113d45d57a5f2658a0b9dfa65","observation_id":"f3172bc8-ea3c-4bdb-9785-7156b3f782f8","resolution":{"observed_at":"2026-08-12T18:10:08.973272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.959847Z","title":"Slimmable compressive autoencoders for practical neural image compression","venue":null,"work_id":"3332212e-8cc0-46a6-b710-a34e303d9c63","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.817105Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:b3b1b714868fd30530f5bc0a3ab088fd02ef4e7a196f38fbabf78e6e7e26b459","observation_id":"34b2b2a4-9d09-4e41-bd1a-92bd54a3268d","resolution":{"observed_at":"2026-08-12T18:10:08.963398Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.949719Z","title":"Slimmable compressive autoencoders for practical neural image compression","venue":null,"work_id":"42d4c387-15a2-4ddb-98a7-4b7a8ec57968","year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.820641Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:583e523b1500c191045d8ca2cde5f16f88f9d85e8287d117f463d264929eb958","observation_id":"169c5ac1-3957-45d4-aaa9-7479ae8ec846","resolution":{"observed_at":"2026-08-12T18:10:08.953119Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.940410Z","title":"Lossy image compression with conditional diffusion models","venue":null,"work_id":"a84a3e35-f33d-4d24-97d2-50455677b8b8","year":2024},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.823480Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:466839019ac52f2bdd79410820d6ccbc88f254c74f22f11e44c6ba2fe0c312ab","observation_id":"e0e0250c-cd10-4fdf-9b50-a94f85c4d0e4","resolution":{"observed_at":"2026-08-12T18:10:08.943925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.931488Z","title":"Improving inference for neural image compression","venue":null,"work_id":"43f24feb-a12c-4f94-94d1-0a5f302f1360","year":2020},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.826293Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:b95cc1678f5f79bc5ad5be3ac42330dcce196426959abc2daadbb6f5dfb1cb97","observation_id":"cf014336-bd7f-406e-8be7-0e0aae9145aa","resolution":{"observed_at":"2026-08-12T18:10:08.934781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01498","last_updated":"2022-01-04T09:52:21Z","snapshot_observed_at":"2026-08-13T20:05:52.914255Z","submitted_at":"2021-03-02T06:35:09Z","title":"A Survey On Universal Adversarial Attack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.01498","snapshot_observed_at":"2026-08-12T18:10:08.829141Z","title":"A survey on universal adversarial attack","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.829141Z"},"links":{"cited_paper":"/paper/2103.01498","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:02f8a68c98e39051528d1e4924345cb1881e8d24b459511d472e62b9aa1ad100","observation_id":"68bf4bc4-0c19-481f-9d19-4a82ca7915ad","resolution":{"observed_at":"2026-08-12T18:10:08.829141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.10345","last_updated":"2024-03-27T12:49:52Z","snapshot_observed_at":"2026-08-13T04:39:33.846115Z","submitted_at":"2024-01-18T19:23:07Z","title":"Attack and Defense Analysis of Learned Image Compression","version":3},"cited_work":{"arxiv_id":"2401.10345","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.10345","snapshot_observed_at":"2026-08-12T18:10:08.860164Z","title":"Attack and Defense Analysis of Learned Image Compression","venue":"eess.IV","work_id":"9294a481-4c39-4fad-93dd-5483c8d23158","year":2024},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.832209Z"},"links":{"cited_paper":"/paper/2401.10345","citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:019aabb580748c5bda4618a741f958bff2134678e79edde39287abd535e3a0b2","observation_id":"daff2c3e-e953-46c7-b3f8-8a3c2c2a042f","resolution":{"observed_at":"2026-08-12T18:10:08.865669Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.922071Z","title":"The devil is in the details: Window-based attention for image compression","venue":null,"work_id":"5c0d453e-68e9-4e44-8071-bbab19f91fee","year":2022},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.835791Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:cd1cc5e9dedc33ef5887d69c4e51946511833287accf3dbff7aa99bf9e58057e","observation_id":"677e9f9b-1847-4772-a010-e1ecb7897999","resolution":{"observed_at":"2026-08-12T18:10:08.925293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T18:10:08.910101Z","title":"Bsq-rate: a new approach for video-codec performance comparison and drawbacks of current solutions","venue":null,"work_id":"7604890e-6372-45cb-89cf-58572b2f6f68","year":2020},"citing_paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T18:10:08.838524Z"},"links":{"citing_paper":"/paper/2411.11795"},"observation_digest":"sha256:25b4d3c92cfdfe74b6b3c24a443838896d132f40a2b3b876f33a30a91236fc20","observation_id":"e78e51b7-8210-4abf-8c72-5cf5cd247f80","resolution":{"observed_at":"2026-08-12T18:10:08.914828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.11795","last_updated":"2024-11-18T18:08:52Z","latest_version":1,"primary_category":"eess.IV","snapshot_observed_at":"2026-08-13T17:10:09.260451Z","submitted_at":"2024-11-18T18:08:52Z","title":"Exploring adversarial robustness of JPEG AI: methodology, comparison and new methods"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":39},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:2411.11795."}