{"as_of":"2026-08-18T11:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c763836ea67f7ed82c122c18b48f32cbf995e77dbfb0efddd0b37f433343df51","coverage":[{"denominator":84,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":84,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T14:14:38.775223Z","state":"measured"},{"denominator":84,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":84,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.15555/citation-record","integrity":"/paper/2411.15555/integrity","json":"/paper/2411.15555/citation-record.json","paper":"/paper/2411.15555"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.040471Z","title":"Partial FC: training 10 million identities on a single machine","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.040471Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:85bab695d4dc7246aa3b6c0e20e10ca6adfc91efa7d0129651dc8798616249ea","observation_id":"c59954a6-2e32-40e8-bc46-95e5990c49b9","resolution":{"observed_at":"2026-08-12T14:14:38.040471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.049490Z","title":"Idiff-face: Synthetic-based face recognition through fizzy identity-conditioned diffusion models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.049490Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:58fee81c3ba2484ff777ab301fe4c749a2cb437776e285f302716c5c647aaea9","observation_id":"cc633375-4431-46f6-968e-1d5249975914","resolution":{"observed_at":"2026-08-12T14:14:38.049490Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1809.08352","last_updated":"2018-09-22T00:16:18Z","snapshot_observed_at":"2026-08-16T17:31:00.770434Z","submitted_at":"2018-09-22T00:16:18Z","title":"Unrestricted Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.08352","snapshot_observed_at":"2026-08-12T14:14:38.055990Z","title":"Unrestricted adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.055990Z"},"links":{"cited_paper":"/paper/1809.08352","citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:8f2d477e15a5957e608ebe4c5ed1c0501e2d96c83a9e1f4bb2d738949e6b46dd","observation_id":"2f36f0c6-226c-4e93-8540-f443289ca3ed","resolution":{"observed_at":"2026-08-12T14:14:38.055990Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.063273Z","title":"An adaptive model ensemble adversarial attack for boosting adversarial transferability","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.063273Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:ef3d2ad8821e1fc00c0dd260402f06fdc8c5fd6d97c276e3e7538fd5b31bbc9c","observation_id":"b332073e-811b-43bb-873d-21d6e31cb3ba","resolution":{"observed_at":"2026-08-12T14:14:38.063273Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.071440Z","title":"Content-based unrestricted adver- sarial attack","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.071440Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:5e174feb54a1db9c09bc381a693b36f6fe07edb267c6c8dd45e2e40e29097e14","observation_id":"ce5fe198-c246-4c48-968d-76086442cf21","resolution":{"observed_at":"2026-08-12T14:14:38.071440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.478669Z","title":"Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition","venue":null,"work_id":"a032abc1-bae9-4823-bc74-472756d6a2ad","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.078656Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:7e145d369c810944a72a00c13c1fab1916f80bf104a470ab24166a4936216bad","observation_id":"4662df28-3f8c-4fa1-907b-31395a414944","resolution":{"observed_at":"2026-08-12T14:14:41.486125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.442944Z","title":"Towards solving the deepfake problem: An analysis on improving deepfake detection using dynamic face augmentation","venue":null,"work_id":"a4112ad3-e94e-4d67-982a-858c294343d8","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.085564Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:612c789c95071c5f414a07d0a8084e04f1a93d71218c17213446e3352909a9c8","observation_id":"80820cef-01cf-4613-b3d4-0ba21ffe18f1","resolution":{"observed_at":"2026-08-12T14:14:41.452404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.404129Z","title":"Arcface: Additive angular margin loss for deep face recognition","venue":null,"work_id":"1292d084-b02c-4600-8fe2-c06e0d5f0db8","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.097292Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:9a1a365d46976878425806b92a8a61a961dbb8c100aa9cac2d3038365ba455fe","observation_id":"eb6f2d28-94c5-49c2-83eb-a5f27c369f4c","resolution":{"observed_at":"2026-08-12T14:14:41.416368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.362130Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"5b798b92-60b1-4afe-9d56-3eb53d5407ea","year":2018},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.103595Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:d0f3ff54068fc49c1e4c6ec826fac8a6a5111412bdeaee2c149f02eb7b434f09","observation_id":"8fe92db0-059a-4242-afcd-dc846e698b2a","resolution":{"observed_at":"2026-08-12T14:14:41.381563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.337204Z","title":"Improving the transferability of adversarial examples with arbitrary style transfer","venue":null,"work_id":"ac661f12-0cb3-4c43-b6f3-ef5127d8e994","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.112156Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:20f01d488465ee6b8c8033ec6a0a0790932b34e44ece807af844b47c20328a4e","observation_id":"3913dce6-53bb-48fd-90a9-0f54b032296e","resolution":{"observed_at":"2026-08-12T14:14:41.343052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.298571Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"5f08771a-6255-4894-855e-c0ce1499ed49","year":2015},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.121432Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f1107402d9b9264d1a3ccf14a011e605b6d2ea0122ce4ecaab5baef06d326374","observation_id":"abf20aaa-4893-400f-9722-c786f7220e81","resolution":{"observed_at":"2026-08-12T14:14:41.309528Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.262375Z","title":"Lgv: Boosting adversarial example transferability from large geometric vicinity","venue":null,"work_id":"de3bc354-2deb-4049-9c59-c549d70a2d00","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.132139Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:0214d6839f31e8f6bf85162c2584ae135a5f53c11993d74c9719b7a307699b1d","observation_id":"3046de18-0231-4305-9af7-b244df6b7770","resolution":{"observed_at":"2026-08-12T14:14:41.273536Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.209262Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"96bd4d01-f5ef-4b86-a931-e7fc26abc07d","year":2016},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.138756Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:c84bf41e5e6eb7f778396b8a6b377e43a4a11a2ced1b75e773f168ea0c4c308e","observation_id":"802e57a2-3094-4cee-a3bc-cc5e56122adc","resolution":{"observed_at":"2026-08-12T14:14:41.218295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.181090Z","title":"Squeeze-and-excitation networks","venue":null,"work_id":"9a270c37-63c6-482f-ba62-65446d909ac8","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.149323Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f5958bd7946e37c7de2f57855a9d6f99a542d743a6b7dbe48ce6954ba1fbafb1","observation_id":"46f557ed-ed25-498e-9412-f499cdfc7af0","resolution":{"observed_at":"2026-08-12T14:14:41.190894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.157855Z","title":"Protecting facial pri- vacy: Generating adversarial identity masks via style-robust makeup transfer","venue":null,"work_id":"b49fcf42-a20d-4e14-81e9-6d82cb4527de","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.158622Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:c440b3892a6780488b63ef8f748153062efbc4b40a291649bbdf7a60ea0653a6","observation_id":"303df7dd-f0fa-4abf-8807-ceaf7f0778d5","resolution":{"observed_at":"2026-08-12T14:14:41.164163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.126247Z","title":"Huang, Manu Ramesh, Tamara Berg, and Erik Learned-Miller","venue":null,"work_id":"1b20d918-cf49-4f76-8e34-c5745974530c","year":2007},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.164585Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:42414195d7a0981aeb946e4e4db5eb9964ccb52b426d7a140203a95ec7d1de00","observation_id":"aa1679ff-eeb5-4dea-87fb-6a0e3b1daec7","resolution":{"observed_at":"2026-08-12T14:14:41.134698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.093967Z","title":"Curricularface: Adaptive curriculum learning loss for deep face recognition","venue":null,"work_id":"444f2573-1b76-4e2a-bf83-7c003a639239","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.173758Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:df601c3d2dc1c910c61d8e847a8fa87aef504083260d9055f891f2ebca757149","observation_id":"672ee2da-d0d9-41fd-9408-94c7883a8ee9","resolution":{"observed_at":"2026-08-12T14:14:41.105707Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.064294Z","title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition","venue":null,"work_id":"8dd4d9db-3170-4530-bc1b-ded8d3fe4f0f","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.185426Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:cf2d01660ae3ab450392440053560a2efb5c83e99a571d9dea8a97de9357f075","observation_id":"f3d14fea-b857-477a-bb74-3987605e7329","resolution":{"observed_at":"2026-08-12T14:14:41.071777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.033276Z","title":"Progressive growing of gans for improved quality, stability, and variation","venue":null,"work_id":"108b4596-4f39-4a2b-b90b-77651b05fb68","year":2018},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.193241Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:627e12c00499358de4871854523c1d1e7d40f8d2485850c4ce5c1654bd561c7b","observation_id":"b3d88c28-184b-4944-9607-c9ca95100f45","resolution":{"observed_at":"2026-08-12T14:14:41.046205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:41.004282Z","title":"Rethinking feature- based knowledge distillation for face recognition","venue":null,"work_id":"273135b6-2cd5-434a-b825-1eaa768a870c","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.200230Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:1f60d81c6ea3f282649a55903af79eb5feb8bf08628ef697cc3c6781e6b1cb28","observation_id":"fb3357fb-e394-4b28-a887-5dd2d0f20bb3","resolution":{"observed_at":"2026-08-12T14:14:41.014233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.970956Z","title":"Physical-world optical adversarial attacks on 3d face recognition","venue":null,"work_id":"49e64442-88ad-4ffc-99bb-587ef0742839","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.208320Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:a71bd3621aba929a7975248025acb76ac3a5857a31cb627915df54f676b2961d","observation_id":"df8d0c84-d176-441b-aa79-1ecbc60812a2","resolution":{"observed_at":"2026-08-12T14:14:40.982689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.926895Z","title":"Sibling-attack: Rethinking transferable adversarial attacks against face recognition","venue":null,"work_id":"74f41de6-9a8d-4764-8aa2-429258321f64","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.215372Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:eb71a9c3c9d6b6901fea4c8dcdedd83e899fe67eec42d0e3e7ae6c8cc2b4e116","observation_id":"eb466814-8518-4198-b6eb-f55ddae18a5c","resolution":{"observed_at":"2026-08-12T14:14:40.939724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.887914Z","title":"Adversarial example does good: Preventing painting imitation 9 from diffusion models via adversarial examples","venue":null,"work_id":"df03fe17-4cdd-4ec0-a88b-34779969d6ce","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.221625Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:8e4d0497176a4501e1208707c55db3395115b397e85fa595f306b07e818af0d0","observation_id":"ab3c1b58-21c2-4d3f-9638-dfc6346d6d14","resolution":{"observed_at":"2026-08-12T14:14:40.906467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.843875Z","title":"Hopcroft","venue":null,"work_id":"e1c9fad0-7fe7-4d49-9006-397256fda61e","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.229756Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:67346e75c2a3afd9a723047717f46f944cd8a94145251559e2e930094ae2da75","observation_id":"b782085c-e68a-479b-b365-c8a5c51192ff","resolution":{"observed_at":"2026-08-12T14:14:40.854095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.819930Z","title":"Enhancing generalization of universal adversarial perturbation through gradient aggregation","venue":null,"work_id":"b904cb39-4d2c-4f52-942a-ddf85b2316e1","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.236123Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:a7c6b61ff989589300d2dce191929f074374b2c74733d5761ec6898ec4e114db","observation_id":"1e2fe385-1875-4121-aeac-bf32cbb4e2db","resolution":{"observed_at":"2026-08-12T14:14:40.828002Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.785744Z","title":"TRM-UAP: enhancing the transferability of data-free univer- sal adversarial perturbation via truncated ratio maximization","venue":null,"work_id":"7cb0044b-7e77-4bdd-98fc-5a62e7ca17b8","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.244328Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:b19054904e9427e9199ab1be2a6dfbd858733c9a889093d04544731a0c7d67b4","observation_id":"bc6fd12b-3bec-4533-adb4-1a82c788ab38","resolution":{"observed_at":"2026-08-12T14:14:40.799433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.749493Z","title":"Frequency domain model augmentation for adversarial attack","venue":null,"work_id":"abb2f15e-3887-47b2-b41f-76eb77e1e22c","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.251098Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:a644977f537f1898fb492f848a44ba410183063396e75ef73552683466d63481","observation_id":"0d219478-d014-43ac-b931-385667e11a1f","resolution":{"observed_at":"2026-08-12T14:14:40.759029Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.261046Z","title":"Set-level guidance at- tack: Boosting adversarial transferability of vision-language pre-training models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.261046Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:7fb72f66828c9ca8ec70b5c36e65b41ec1ec890192648dff1b01aed794269d96","observation_id":"44fe9440-8ad7-42bb-9b57-08e7410876fa","resolution":{"observed_at":"2026-08-12T14:14:38.261046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.685570Z","title":"Magface: A universal representation for face recognition and quality assessment","venue":null,"work_id":"2f142d2a-2811-415e-8e4d-780a39daaca9","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.270175Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:0ec9bf79f33575eaeff19b0cf3161743df6480895c17ebd14d493b78b153010b","observation_id":"66f80d13-4142-41e5-89a8-20e636dc55bc","resolution":{"observed_at":"2026-08-12T14:14:40.699222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.651715Z","title":"Towards multiple black-boxes attack via adversarial example generation network","venue":null,"work_id":"41365d46-bc79-4f04-8183-1036a382ccfb","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.278241Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:c66d90ffdfcf53d91767f3e60efecac3142c6dc5c18a3346d687fd70f76b7458","observation_id":"ee1353fa-871b-4916-b053-d3ee08a39748","resolution":{"observed_at":"2026-08-12T14:14:40.659294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.621274Z","title":"Df-platter: Multi- face heterogeneous deepfake dataset","venue":null,"work_id":"2c473772-6604-4963-92ee-20b932ee9cdc","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.287883Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:b71077d27015de7b1f19b6026011a4d3184aa733f6ced7647b908902841cf6ab","observation_id":"b780e722-8727-43f4-87be-df306de61642","resolution":{"observed_at":"2026-08-12T14:14:40.628466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.591971Z","title":"Dynamic routing and knowledge re- learning for data-free black-box attack","venue":null,"work_id":"39a475a9-2a76-4070-a3ad-a5272965fa77","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.297930Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:76d6e1d4d17ffd6e442c7d18cad23a479d6324e7fa9a52801fae076d99e7a123","observation_id":"9af12c5b-892b-48cb-a07c-f537710a5a0b","resolution":{"observed_at":"2026-08-12T14:14:40.601587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.572873Z","title":"Semanticadv: Generating adversarial exam- ples via attribute-conditioned image editing","venue":null,"work_id":"3d44289a-e942-457e-8f40-d00695a07198","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.315287Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:6b639c26406618aaecca2e98e0808da507337dbc258c81655894b2480e0473bb","observation_id":"fff77797-72c5-46eb-ad86-ef44ed073f04","resolution":{"observed_at":"2026-08-12T14:14:40.580057Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.538321Z","title":"Facenet: A unified embedding for face recognition and clus- tering","venue":null,"work_id":"57425f13-ee48-4640-8fa5-6f0ddbac871b","year":2015},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.322984Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:9f46bdc1b7b219ce3b71798227fb21e4094428c21c0d20cec51f1398c75fe031","observation_id":"1ff50ed3-419f-49b5-b0ff-8ac348ef74c4","resolution":{"observed_at":"2026-08-12T14:14:40.551051Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.503748Z","title":"Clip2protect: Protecting facial privacy using text-guided makeup via adversarial latent search","venue":null,"work_id":"a1802027-ed3d-43cd-a1f4-f59547535edf","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.333291Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f32a054983e2b9d20b07a63b30dd973eed984fac16e4282eceefc18acfd54f02","observation_id":"58b3636e-2551-489d-92ad-bb8b987de0f5","resolution":{"observed_at":"2026-08-12T14:14:40.512181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.471765Z","title":"Jail- break in pieces: Compositional adversarial attacks on multi- modal language models","venue":null,"work_id":"f60eb733-1124-453b-8771-4a076a0f5631","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.340826Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:036d6c0555922b4404291474e526fe5cd4c0afd76d1574d017a2977a3dfa2142","observation_id":"fcbefc61-cb22-4be6-896b-3be15aaefbf9","resolution":{"observed_at":"2026-08-12T14:14:40.480773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.437541Z","title":"Benchmarking robustness to adversarial image ob- fuscations","venue":null,"work_id":"6ab43fdc-7c45-4220-93b7-429c42a46534","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.349808Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:9281a332599763b999d647c4aae34f073fa8fffb10ca7378e43c7acfdd1d9f07","observation_id":"29e8496b-3a2b-4b67-aa1e-2737ca73854a","resolution":{"observed_at":"2026-08-12T14:14:40.450795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.398066Z","title":"Circle loss: A unified perspective of pair similarity optimization","venue":null,"work_id":"fcc114b7-1964-47d5-871a-6b21140ff091","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.357883Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:c1d28d8dc243a1f60eff7344b4d4bdd0211f02f550c4da4b2f7b6ea748ec36a4","observation_id":"a789af04-bbe8-43cb-8da2-0caafda36ab1","resolution":{"observed_at":"2026-08-12T14:14:40.405741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.362750Z","title":"Diffam: Diffusion-based adversarial makeup transfer for facial privacy protection","venue":null,"work_id":"766db861-1eca-49b7-bfd3-4f4b58227943","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.367197Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:4ee2c58d7beb06c04bbab5684b4117288df559678a6fc76fbdc69819eb8f195f","observation_id":"3d2a099f-fc6d-4177-bbdc-d35186490eb5","resolution":{"observed_at":"2026-08-12T14:14:40.371578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.340156Z","title":"ACTIVE: towards highly transferable 3d physical camouflage for universal and robust vehicle evasion","venue":null,"work_id":"dfed77a7-ce06-4923-aa37-4908f44269a1","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.373128Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:525004b4a5e53c4373fefcc1a271d2970c08f66e0be6375ccea5828cca587620","observation_id":"763d0dec-aa93-4b7c-9df8-3ab6b20988ef","resolution":{"observed_at":"2026-08-12T14:14:40.348680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.305123Z","title":"Teachaugment: Data augmentation opti- mization using teacher knowledge","venue":null,"work_id":"b03b367a-ef45-40af-a8a0-03ed03606231","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.382011Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:013a9bb349d8752b7dec9a1fb73b9b64649bd816a19ac28af2013b45c7f2a86d","observation_id":"9fcb8012-0ce1-4669-ac38-d447fdcac74a","resolution":{"observed_at":"2026-08-12T14:14:40.316258Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.268199Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"59b99ca4-2c0c-492c-a5bf-e876868ccd13","year":2014},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.388806Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:e6a1a2ec216b716732ed17f3b5754ad860d5e675f6a6e970d5ccaa89fbcc7b8e","observation_id":"86c5d436-ce11-407e-a254-00af5017523d","resolution":{"observed_at":"2026-08-12T14:14:40.277558Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.241729Z","title":"RFLA: A stealthy reflected light adversarial attack in the physical world","venue":null,"work_id":"5d989bbc-6ff4-4ba3-9e21-0f7b43fa3807","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.394976Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:b3280e03a4b386e985f9f67ccdb39b2c014cdd553051130a8350881f4ac7f176","observation_id":"ebef361a-f953-4fb7-af43-825105498a4a","resolution":{"observed_at":"2026-08-12T14:14:40.248806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.208964Z","title":"Cosface: Large margin cosine loss for deep face recognition","venue":null,"work_id":"085515bf-8a54-4c9d-aaa8-dd0b0276b3b1","year":2018},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.404157Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:440ad12de06c794a0f7df82a4c2ad5bf28634d8b140c7b1de575508f97924b45","observation_id":"40c9cc64-3de8-47be-9916-dbb5137b2cd3","resolution":{"observed_at":"2026-08-12T14:14:40.220644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.180577Z","title":"Facex-zoo: A pytorh toolbox for face recognition","venue":null,"work_id":"14c44f12-f38b-4a72-b129-02afa583dbf7","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.439180Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:aa20f75982b273e33f12d803abcdd8f25ad104d8e83505786a43dfcc02c9f9f5","observation_id":"9cbc38ab-11d7-4cfd-8b63-9a5a4722c020","resolution":{"observed_at":"2026-08-12T14:14:40.191067Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.153290Z","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation","venue":null,"work_id":"4459d595-8c1a-488c-8a68-edcd2d63f4cb","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.449620Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:2851c3e862a9d6b8e1729ec0026a4590dc97e144e4436782008e080e723e78ff","observation_id":"7ee335e2-cfa2-445b-b2b0-a413e0bae264","resolution":{"observed_at":"2026-08-12T14:14:40.158952Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.121647Z","title":"Mitigating bias in face recog- nition using skewness-aware reinforcement learning","venue":null,"work_id":"8aaa021e-ae22-4170-a94e-8dd60b3cc65d","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.461383Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:a07dc1e724cdf48a995124ed598b6d09959b2f9f5985b057c65b755d44b911f0","observation_id":"dd08fa40-dc69-4cca-8aef-523d39a6dd2e","resolution":{"observed_at":"2026-08-12T14:14:40.131671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.094258Z","title":"Deep face recognition: A survey","venue":null,"work_id":"20cb3f95-a597-4d53-b091-c017c0964752","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.468591Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:40bf4aee662e8b9378146a2c77fbbc2ed0c151e3eefcde60a862a52c64ba4ad5","observation_id":"fa11bd0f-22e6-42ca-a66f-973c319106aa","resolution":{"observed_at":"2026-08-12T14:14:40.099841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.052278Z","title":"Racial faces in the wild: Reducing racial bias by information maximization adaptation network","venue":null,"work_id":"b6774a21-7495-4f2d-a1fa-79d76cab5ddd","year":2019},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.474269Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:71e33bab16b719cbe1edfc03c640d3de57d3d253db192ceb2f52a322b306d9ab","observation_id":"fdd2c3b6-93a1-4412-8dd4-172015a34977","resolution":{"observed_at":"2026-08-12T14:14:40.062939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:40.005680Z","title":"Meta balanced network for fair face recognition","venue":null,"work_id":"cd79fd57-c97b-411b-9c2f-b4c07e5a122c","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.480696Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:33ce75159a614942eaa78e5865a29cd064eb2ae66e68a8d37f499dafb7b951f5","observation_id":"f54a606c-1994-4252-a007-431bfe852ed3","resolution":{"observed_at":"2026-08-12T14:14:40.013793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.971015Z","title":"Delving into data: Effectively substitute training for black-box attack","venue":null,"work_id":"4aae075e-f761-4fc3-8176-0ac59c744123","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.486327Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:e077de1fb45009a7f938ae0ac765a18f8e1aa63652fbefac613c8c9dd9396205","observation_id":"43532d59-c02a-40c9-8d80-9ca96d9c0101","resolution":{"observed_at":"2026-08-12T14:14:39.983123Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.940067Z","title":"Dst: Dynamic substitute training for data-free black- box attack","venue":null,"work_id":"a3a8d659-d32c-4696-8836-adafeb8fb610","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.492770Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:0a78f9800153eecffd328aab297890e91359c79aac89eca4420f85aa834f88ed","observation_id":"940e8bda-2d9a-400d-b196-efd0b42b7a0c","resolution":{"observed_at":"2026-08-12T14:14:39.946213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.905514Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":"470e1ee0-e7a1-46f2-8e21-6c7ff648760b","year":1924},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.502468Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:02865e320aa4f452a3f25ae892c7a6859e22c67eb978e20f8330aba962063964","observation_id":"0770ceb6-00fa-4767-bb63-f6df7a1661d0","resolution":{"observed_at":"2026-08-12T14:14:39.918626Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.873747Z","title":"Mis-classified vector guided softmax loss for face recognition","venue":null,"work_id":"14d27675-0d04-456b-ab02-07d006a346e8","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.512576Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:ca97c68525a55ca63fca0c8bc43370c77f069c316a4053e9a32ba94ab584dbc3","observation_id":"2b09fba5-9f76-42ff-97c3-116d2488a1f2","resolution":{"observed_at":"2026-08-12T14:14:39.883740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.840671Z","title":"Structure invariant transformation for better adversarial transferability","venue":null,"work_id":"bdf88515-8e3a-461f-a62b-962e7250f77d","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.519007Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:4db813403c073ddadd1046abcfa54688b372e6509fb3535cc77668a336efa92c","observation_id":"7ece2e10-68f5-47ba-851c-737994c1633f","resolution":{"observed_at":"2026-08-12T14:14:39.847043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.809640Z","title":"Tf-fas: Twofold-element fine-grained semantic guidance for general- izable face anti-spoofing","venue":null,"work_id":"1a7331b1-1286-45a0-b77a-cbcdb4f04af1","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.526973Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:689f8e2294e7571bfddf4eccc5ef8c4d3aa916876a81f3195c1ed996b93f1a9b","observation_id":"fb2daff8-f315-43c6-b4ce-57dad90241b5","resolution":{"observed_at":"2026-08-12T14:14:39.819807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.780821Z","title":"Uni- fied adversarial patch for cross-modal attacks in the physical world","venue":null,"work_id":"723647f9-394f-4ea2-88bc-54189be0087f","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.533433Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:154e21d0a1707fdeaeee635e4709f9cdf356b2d1f927e6e130d39ca3e790b3a1","observation_id":"e72f9ea3-38d7-4837-8e92-387ec4b60c67","resolution":{"observed_at":"2026-08-12T14:14:39.790971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.755718Z","title":"Physically adversarial infrared patches with learnable shapes and locations","venue":null,"work_id":"5b65ddcd-f26a-41da-b61c-3203257f5be7","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.541982Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:0fc9f6c8b4bc318950150001d026d33b80cdffbb256c1322bcf510cdab9866be","observation_id":"bb0face3-1ac3-4f06-b328-c595f59400e3","resolution":{"observed_at":"2026-08-12T14:14:39.762521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2009.12724","last_updated":"2021-09-13T13:05:55Z","snapshot_observed_at":"2026-08-04T04:41:19.051964Z","submitted_at":"2020-09-27T02:05:26Z","title":"Beneficial Perturbations Network for Defending Adversarial Examples","version":3},"cited_work":{"arxiv_id":"2009.12724","doi":null,"metadata_source":"pith","pith_arxiv_id":"2009.12724","snapshot_observed_at":"2026-08-12T14:14:38.921083Z","title":"Beneficial Perturbations Network for Defending Adversarial Examples","venue":"cs.LG","work_id":"087a644a-d5f0-42b7-88d8-9b29610fed62","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.547633Z"},"links":{"cited_paper":"/paper/2009.12724","citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:ccf2b3c54a43c10533d1d5115a3e99511241ab8d5d0c7cd635e83279e2b8fa24","observation_id":"5bdd1394-f92b-447c-973f-694973bea4de","resolution":{"observed_at":"2026-08-12T14:14:38.928963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.723335Z","title":"Im- proving transferable targeted adversarial attacks with model self-enhancement","venue":null,"work_id":"75c18627-1587-4880-8671-268dc1a67c43","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.557729Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:6b369d3105fa8340c5149a17efc43fba81fe2dea9550b62c169d684c9d221b72","observation_id":"f7822a1b-6339-479d-9fa3-b4b6a1fa38fb","resolution":{"observed_at":"2026-08-12T14:14:39.729730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.695970Z","title":"Improving transferability of adversarial patches on face recognition with generative models","venue":null,"work_id":"b3eb9d7d-d3d9-486b-8ac4-dbdeefc91afe","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.569193Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:6a0b58fac0b4516dee966cfb8c01847afe9791f216cefd2ee87226d6f225cc4b","observation_id":"c81689fa-37ab-40aa-a75b-2fdc72b11424","resolution":{"observed_at":"2026-08-12T14:14:39.701477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.663115Z","title":null,"venue":null,"work_id":"685cc0b9-eaaf-4ccb-b9d9-2e40da0ec9a2","year":2019},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.576111Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f33fe9860e7f7adbf73d572664c990e54b5da5897e59199e43b7ee5c2981a291","observation_id":"27b7daae-0937-48c6-9bb9-5f213cbe945c","resolution":{"observed_at":"2026-08-12T14:14:39.670641Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.632699Z","title":"Backpropagation path search on adversarial transferability","venue":null,"work_id":"c45f0ef0-b707-4c69-8db3-2fda44bb708b","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.587913Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:261352644b17505794a3a1190ac6d7d47106ba0cd87ef4c4cccd5901876206b4","observation_id":"3e9397d2-7795-48db-9220-501f82261de5","resolution":{"observed_at":"2026-08-12T14:14:39.647138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.602343Z","title":"Towards face encryption by generating adversarial identity masks","venue":null,"work_id":"a2b8cf62-dfa3-45a0-8df2-9f1143d8f1de","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.593841Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:1042dbc6492be134485c1b831cfb00cc889fc9de0edbd22be81b71aad5c61fb4","observation_id":"7ae3fe2f-8f8d-4296-9eef-3fabb6271390","resolution":{"observed_at":"2026-08-12T14:14:39.610120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.567015Z","title":"Towards effective adversarial textured 3d meshes on physical face recognition","venue":null,"work_id":"867ae3c5-fc9a-4398-a1c2-ec39bd9bc4fe","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.607315Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:b23e4756f5cf899c789a9bc31864213461722bcdd218cc162f39ce299204f92b","observation_id":"0c7d8114-a42c-4d5c-9ae8-337287ea88b7","resolution":{"observed_at":"2026-08-12T14:14:39.577208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.538946Z","title":"Adv- makeup: A new imperceptible and transferable attack on face recognition","venue":null,"work_id":"cdb677f2-3913-4b90-9aeb-cfd7702b5620","year":2021},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.614282Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:7187642a9aa5c158e72fd525eb07faa9a6aee3660649c75fe6825057b5144c6d","observation_id":"ccacb050-4531-4d4b-8029-5f05cddc49bb","resolution":{"observed_at":"2026-08-12T14:14:39.546570Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.514096Z","title":"Natural color fool: Towards boosting black-box unrestricted attacks","venue":null,"work_id":"b5b62917-c383-440d-87b3-15bd42aabd2c","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.621275Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:2b7651cc2a7f2d60caae8c66eb47bc986ac6eaac826d26f1271bd5deab720745","observation_id":"43d68ae8-7f39-4bb2-9ba0-b8ee220a3d11","resolution":{"observed_at":"2026-08-12T14:14:39.524523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.475983Z","title":"Npcface: Negative-positive collaborative training for large-scale face recognition","venue":null,"work_id":"ca87b62a-a1b0-43d1-bdef-3d6a08effaca","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.627940Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f22eb100e64c5f598b881a03c7594285f3573f4f28fc14548e3913661cd61597","observation_id":"73e28479-bb78-4bbe-b443-07bc66c02852","resolution":{"observed_at":"2026-08-12T14:14:39.484337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.435790Z","title":"Towards adversarial at- tack on vision-language pre-training models","venue":null,"work_id":"fc02f4d4-9f89-4bec-b728-5bb87d96aa1f","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.635216Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:ee365e2f4f0d767592a4de7f961ba896b71d00f8e5585daad78f0134e039ac32","observation_id":"4a485259-5118-40c3-acea-9774e252032c","resolution":{"observed_at":"2026-08-12T14:14:39.447900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.405132Z","title":"Adversarial autoaugment","venue":null,"work_id":"7e852512-d4f6-4ce1-a751-f6521e9819e1","year":2020},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.641584Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:4e8c469b960d1e921ac53297c3a14f44f2cefd1d32905d9d167d9fc9f9e67a42","observation_id":"c095da32-05b8-4648-8908-264d148d78cc","resolution":{"observed_at":"2026-08-12T14:14:39.412744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.379390Z","title":"Adversarial learning with margin-based triplet embedding regularization","venue":null,"work_id":"9ed8815d-e9a6-4639-86d2-394c04690981","year":2019},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.647282Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:3296611baad7a39ac7c5b70497d3e863169248a986303408d5260a7dca231206","observation_id":"c4fc488c-0985-4a83-ab98-16c8939c0663","resolution":{"observed_at":"2026-08-12T14:14:39.386871Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.347955Z","title":"Towards transferable adversarial attack against deep face recognition","venue":null,"work_id":"52703e74-535f-425f-8b4d-f5722acea2b3","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.654887Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:373a8df09de4d1f62374a6f99c3045f102b1d5be8a2e25ae1515f859ebb0bd46","observation_id":"6a08eee4-5d34-45c6-b642-d5990942aca3","resolution":{"observed_at":"2026-08-12T14:14:39.357138Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.323279Z","title":"Improving visual quality and transferability of ad- versarial attacks on face recognition simultaneously with ad- versarial restoration","venue":null,"work_id":"ae003028-e4ea-4929-8a02-022a2ab23d1a","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.661495Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:27d28ba9f8504830c901175772bc3a55e3da1206cbf6cbebc059a95252138be3","observation_id":"90a59fef-c50c-47b7-80ca-d9563bfef7f1","resolution":{"observed_at":"2026-08-12T14:14:39.334611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.295774Z","title":"Improving the transferability of adver- sarial attacks on face recognition with beneficial perturbation feature augmentation","venue":null,"work_id":"a3648157-753d-43ea-83a1-5ea8c12bb2a1","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.668331Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:f3cb744e61f66a597fb4f6914a2e0b1db30e9cfde29e93064868c00b72decb5b","observation_id":"c74da496-cc1c-4cbb-8c43-858bb0d94e8e","resolution":{"observed_at":"2026-08-12T14:14:39.308767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.16940","last_updated":"2025-05-17T11:24:41Z","snapshot_observed_at":"2026-08-16T13:49:09.559773Z","submitted_at":"2024-05-27T08:30:29Z","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","version":2},"cited_work":{"arxiv_id":"2405.16940","doi":null,"metadata_source":"pith","pith_arxiv_id":"2405.16940","snapshot_observed_at":"2026-08-12T14:14:38.865491Z","title":"Adversarial Attacks on Both Face Recognition and Face Anti-spoofing Models","venue":"cs.CV","work_id":"11861630-9181-4299-a3e2-e9606bccb556","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.678466Z"},"links":{"cited_paper":"/paper/2405.16940","citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:2b8f16a11815876016053fbc9e9b9a1f15bfe6fdec7c2fd6cbb53c3f6a01b8b4","observation_id":"511e645f-55da-405f-b8e4-4339f3d62379","resolution":{"observed_at":"2026-08-12T14:14:38.877176Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.263333Z","title":"Rethinking imper- sonation and dodging attacks on face recognition systems","venue":null,"work_id":"6b4ea388-97f2-4da7-973f-2f78900c6211","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.685449Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:5de59ed3843575dfec0cb8335d92fa354f24c25ffbbb7f301d2b66de490c4445","observation_id":"03e9f3c8-21bc-4ace-97de-098ad06f85de","resolution":{"observed_at":"2026-08-12T14:14:39.277346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.230010Z","title":"Adaptive mixture of experts learning for generalizable face anti-spoofing","venue":null,"work_id":"24d5fe2c-18ca-4a67-aa3a-7ad7581020a6","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.709461Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:51207b9d31bd9e633bd80c805bbb45808600e913a13c32da914278e83e18f760","observation_id":"81569d8a-f6b4-4533-928f-423b76e48d62","resolution":{"observed_at":"2026-08-12T14:14:39.238631Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.203502Z","title":"Generative do- main adaptation for face anti-spoofing","venue":null,"work_id":"f4e517d1-a6ed-46c9-a822-7465013ace9d","year":2022},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.714825Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:e324b8f8457247975b8a2719d3f914a529ae0ed78d2b5711d766c114d1d7da49","observation_id":"77822af6-ef75-4958-93bd-4f36a930d7bd","resolution":{"observed_at":"2026-08-12T14:14:39.209381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.167079Z","title":"Instance-aware domain generalization for face anti-spoofing","venue":null,"work_id":"01a52e02-c161-4d91-a127-08c38a1b530d","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.722417Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:76451dd19543d380b6fe7a7b3aa1be2289a939c721bc4eaccc48879f0ce6c82c","observation_id":"6e753dfc-667c-4f3d-b860-a2eea9a90dc0","resolution":{"observed_at":"2026-08-12T14:14:39.175531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.126470Z","title":"Test-time domain gen- eralization for face anti-spoofing","venue":null,"work_id":"105116ea-48cf-44fe-805b-632d4d7cf015","year":2024},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.728333Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:36fdc19f5f8f94cd78595184cf10238e224e7f63d83e8509239f163933702a52","observation_id":"8eaa26fb-2715-4ffe-8fab-87295a20bc73","resolution":{"observed_at":"2026-08-12T14:14:39.137293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.088165Z","title":"Advclip: Downstream-agnostic adversarial examples in multimodal contrastive learning","venue":null,"work_id":"0bb56838-4102-4e71-a6e0-f3eac1bf16d5","year":2023},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.738519Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:5374a9f9724e9f4df2bb70025e743edcece9ca6da3cd52d442e2a1cbd12d80bf","observation_id":"764b977a-122a-4391-b247-f8531e1ef361","resolution":{"observed_at":"2026-08-12T14:14:39.102630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:39.055207Z","title":"Boosting adversarial transferability via gradi- ent relevance attack","venue":null,"work_id":"619a41af-b7e0-4663-9e1f-e8e8c4007669","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.746162Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:33b6c23d35109f733073dfaa77d492c214750ba3723c4c531ec6c9138ce755ef","observation_id":"7970d548-ceab-414b-992a-f0af826cde91","resolution":{"observed_at":"2026-08-12T14:14:39.062860Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.973533Z","title":"The supplementary includes the following sec- tions: • Section 7.1","venue":null,"work_id":"0ec02041-7273-464c-b83e-91e3087cf536","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.775223Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:9f174931475d9926604bd79ea7bf18e4a511c1cf7b0046cbae745ca0eef0889b","observation_id":"bffb984b-f0d6-46ea-9879-9890a1f8f760","resolution":{"observed_at":"2026-08-12T14:14:38.980599Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:14:38.999635Z","title":null,"venue":null,"work_id":"be23986a-2d4d-4bb8-8b5c-c5ad41cc31ca","year":null},"citing_paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation","version":3},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-12T14:14:38.759019Z"},"links":{"citing_paper":"/paper/2411.15555"},"observation_digest":"sha256:72b46f4c5457b4b78a0f4944ffcacc47e316665df88d73438a6e633749437e58","observation_id":"07c2b73b-1ef1-4c96-8f4e-d792b9ad7806","resolution":{"observed_at":"2026-08-12T14:14:39.032417Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.15555","last_updated":"2025-03-29T07:19:50Z","latest_version":3,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T17:32:57.581205Z","submitted_at":"2024-11-23T13:22:37Z","title":"Improving the Transferability of Adversarial Attacks on Face Recognition with Diverse Parameters Augmentation"},"reference_resolution":{"displayed":84,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":2,"verified_fuzzy":73},"total_outbound_references":84},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 84 of 84 outbound references and 0 inbound Pith citation observations for arXiv:2411.15555."}