{"as_of":"2026-08-14T19:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:29edb3c450460915c347411a0525dcae55df2de912816649e5ff85d092666b1b","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T13:32:43.541240Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.16162/citation-record","integrity":"/paper/2411.16162/integrity","json":"/paper/2411.16162/citation-record.json","paper":"/paper/2411.16162"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-12T13:32:43.386413Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.386413Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:4cf6f3f8739e7c63fed90422aa08eb9bcee46cdada7fbcbe7f74525a536d5fdc","observation_id":"3f71ce10-26d4-46b0-a6fb-c5af140d3b2a","resolution":{"observed_at":"2026-08-12T13:32:43.386413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T13:32:43.395100Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.395100Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:eb78d17cc1df959e6be69acef242cb7dafc0f48761b3793f8f0aede50811404a","observation_id":"44a7707d-19dd-4e00-a41e-67794b68d496","resolution":{"observed_at":"2026-08-12T13:32:43.395100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.403293Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.403293Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:96b5c9d9efce343a68292cfa1345f1a8a99b0c9bd9f5850a1bf6031efa321c9a","observation_id":"96620aed-f6b8-4383-ada9-f6625b51552e","resolution":{"observed_at":"2026-08-12T13:32:43.403293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.972884Z","title":"Sparse and imperceivable adversarial attacks","venue":null,"work_id":"55514257-b74b-4e03-83d2-b9aa6426fd6d","year":2019},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.409451Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:db3901ef831bc835e7700c0754641df69adb79050da89f955f32abda6ab078d6","observation_id":"095c2f0a-0257-4ac6-ad99-846526bcfd77","resolution":{"observed_at":"2026-08-12T13:32:43.977830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.957138Z","title":"Sparse adversarial attack via perturbation factorization","venue":null,"work_id":"d33ccae1-fc13-41fd-8ebb-a314c6debb32","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.419315Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:27910be4b45dd3c2c4bed945693d0bb66730df8748c7ab613ad88314bed6b73c","observation_id":"f4786bd9-71f5-45a6-a3ba-c92a5c0d2f1e","resolution":{"observed_at":"2026-08-12T13:32:43.963027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.939384Z","title":"Mind the box: l\\_1 -apgd for sparse adversarial attacks on image classifiers","venue":null,"work_id":"5cea8b70-dfb0-427f-8a87-d93f924e2b7e","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.425871Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:92d6e57e9d59caa7ae80a84a6f9aa651b642cb183e93e62e4149b3701fc645cf","observation_id":"89af1b6e-f553-4930-955d-85ede9148ef3","resolution":{"observed_at":"2026-08-12T13:32:43.945141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.923282Z","title":"Greedyfool: Distortion-aware sparse adversarial attack","venue":null,"work_id":"c1c62c09-9c03-4652-9cd2-83a8c699ecf4","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.432368Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:300e5213e28821c2d27b51a19d11d52159f1433ebc45b8d86684bebae3c8ddd0","observation_id":"7f180394-d211-49ba-807a-b6bee5797747","resolution":{"observed_at":"2026-08-12T13:32:43.928566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.904734Z","title":"Physical passive patch adversarial attacks on visual odometry systems","venue":null,"work_id":"fbdad5c5-1bb9-47d2-9344-a70a36b92fcb","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.437605Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:03dc803ab23dc5c6221316569bf592bdf106208221f58b39a10562224b7b6012","observation_id":"7af533b5-0779-4fcd-8de8-f33bfa9ce7fb","resolution":{"observed_at":"2026-08-12T13:32:43.911044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.11099","last_updated":"2020-07-06T03:06:26Z","snapshot_observed_at":"2026-08-14T12:00:00.872031Z","submitted_at":"2019-10-18T02:20:17Z","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.11099","snapshot_observed_at":"2026-08-12T13:32:43.442166Z","title":"Evading real-time person detectors by adversarial t-shirt","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.442166Z"},"links":{"cited_paper":"/paper/1910.11099","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:23d9fe36535d63aad4813fba79d8e9180a20444bd26917e722d4632c3c1970c3","observation_id":"0d70a4dd-badf-4676-a7e7-106eee03cd47","resolution":{"observed_at":"2026-08-12T13:32:43.442166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.887995Z","title":"The translucent patch: A physical and universal attack on object detectors","venue":null,"work_id":"770d40d7-8e1d-42ea-8a21-0689e1c45f4e","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.447262Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:6444ec12a6293e9f865a93860efc158e41d532b6ac141bf1dea00eb6036f7690","observation_id":"f11ed155-bd86-4cde-893b-08756bb3df13","resolution":{"observed_at":"2026-08-12T13:32:43.892937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.872438Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks","venue":null,"work_id":"737605f5-e26c-4282-9e3b-7471290be16b","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.452567Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:d4f57fe2f1300a6d3522594258b6eb0c19b74ec1d915f953be7ccdea8eeda215","observation_id":"4cf06a25-bd99-443b-a62c-0af855f4f774","resolution":{"observed_at":"2026-08-12T13:32:43.877076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.857115Z","title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector","venue":null,"work_id":"95ec1e1f-e86d-454d-942a-cb0666199318","year":2018},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.457450Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:74f6f01ccddfb2f8de279e1f9a8fd87c33ddd79bc66b9604cec83c9cb35845ba","observation_id":"c381690b-822e-4bac-8e63-13d7c72235df","resolution":{"observed_at":"2026-08-12T13:32:43.862246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.834417Z","title":"Adversarial sticker: A stealthy attack method in the physical world","venue":null,"work_id":"cf0ef7a3-6eec-497c-9b93-3ab84f6bc590","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.468797Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:7893c2e33d5a10ff3a9cb69ad38403e6a648baae2f56bb36fab5b0b7b71bd618","observation_id":"cfdfc25b-1c7a-44ed-aa99-42274168ba37","resolution":{"observed_at":"2026-08-12T13:32:43.840592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.817569Z","title":"Sparsefool: a few pixels make a big difference","venue":null,"work_id":"e2a93839-38c7-4d50-a363-0ebb492fde4a","year":2019},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.477988Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:5bedccfb408fd2b09d1f185027158730221a6483f90acd2e420e2bd7cdeab9f3","observation_id":"c746c27d-d18d-4c72-b8c6-ed1d367876fa","resolution":{"observed_at":"2026-08-12T13:32:43.822557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.482358Z","title":"Generative adversarial networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.482358Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:98261603e40196e0cf1402afc92c129757f6a4269c0b73e2db4c1aab5390325f","observation_id":"df96dbeb-9435-411b-8547-6a7cc42cfe9a","resolution":{"observed_at":"2026-08-12T13:32:43.482358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.787498Z","title":"Sparse and imperceptible adversarial attack via a homotopy algorithm","venue":null,"work_id":"d2bb9a48-0873-4c71-b0e1-1fb65bdd8d61","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.489060Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:84d838aecd0a7c5600b907d6d63df1d6b91bc324da3062e0c33e7e9a55024166","observation_id":"17606f56-7558-477d-8c09-ee4d94044bd2","resolution":{"observed_at":"2026-08-12T13:32:43.794913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.495125Z","title":"Sparse and redundant representations: from theory to applications in signal and image processing","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.495125Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:d2f935943dfa260372c0089845a60f03ea35201ccc3ee8480f80834edbba09d5","observation_id":"1b0de2c4-4469-4b43-a9ec-965d536fafd5","resolution":{"observed_at":"2026-08-12T13:32:43.495125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.501037Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.501037Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:d7ba44cc22d44a6095ef36579dd937c4b1b8d7b9b88da8a72f25ce244d66823e","observation_id":"9d7d48be-a785-4fd8-88f0-f423df80585d","resolution":{"observed_at":"2026-08-12T13:32:43.501037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.508961Z","title":"Rethinking the inception architecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.508961Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:7f37a16686ff009a1a5561fdb14bc979e9351f5fa4e5bb42cb86f36dd5daede6","observation_id":"6ff17f0f-c50f-43f9-a81d-ef36439d27b6","resolution":{"observed_at":"2026-08-12T13:32:43.508961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.732147Z","title":"Resnet 50","venue":null,"work_id":"e71a1655-72fd-4a12-95ac-85dd56e66008","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.514560Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:b30f8ce2829a5823ff1ab558c0ddc2ca38484401372073f716e03e84aaafa5f7","observation_id":"e343c87e-6e8c-49fc-896a-822b87ad918c","resolution":{"observed_at":"2026-08-12T13:32:43.740079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.520831Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.520831Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:1e5c39fcc15291786b7fe5d0b6c064a6cf97b4cb2654a251e2efef949101e91b","observation_id":"a4b06e26-11b5-4f87-9181-6144076596b5","resolution":{"observed_at":"2026-08-12T13:32:43.520831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.528810Z","title":"A convnet for the 2020s","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.528810Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:5e79c6398fcb51955328e80ff3886aa504cfdf2d472ca31f8bb9c485c107e3ea","observation_id":"60f36b61-9287-4d75-9490-e0584791f8dc","resolution":{"observed_at":"2026-08-12T13:32:43.528810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-11T03:41:16.906633Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-12T13:32:43.534316Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.534316Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:bbd34250b186bd5037917a55aa7807d0c848c46cf7014d42915f2c7ded0c85f2","observation_id":"74a94fbc-cd4e-4400-b2e5-5f70f7b654db","resolution":{"observed_at":"2026-08-12T13:32:43.534316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.675998Z","title":"Do adversarially robust imagenet models transfer better? Advances in Neural Information Processing Systems, 33: 0 3533--3545, 2020","venue":null,"work_id":"6d85c53d-36eb-420b-9b7e-1ff91fe058f4","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.541240Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:3d28158ef1f33ee0cf4c036979f2fa0b141f6672ce0c0ec9674600469ec712e5","observation_id":"de3612b0-cbbc-474f-971b-9117ed8a30f7","resolution":{"observed_at":"2026-08-12T13:32:43.686041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-14T02:12:34.493595Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":13},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2411.16162."}