{"as_of":"2026-08-13T06:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9ce680b973b120e5e1427f95b85a4e400a2b9ac2ed467e7c2ae4044d008a84bf","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T13:01:00.911081Z","state":"measured"},{"denominator":44,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":44,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T09:10:42.075379Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.16622","snapshot_observed_at":"2026-08-04T09:10:42.075379Z","title":"Imperceptible adversarial examples in the physical world.arXiv preprint arXiv:2411.16622,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2510.16923","last_updated":"2026-07-06T03:46:15Z","snapshot_observed_at":"2026-08-09T11:58:46.296249Z","submitted_at":"2025-10-19T16:38:03Z","title":"UNDREAM: Bridging Differentiable Rendering and Photorealistic Simulation for End-to-end Adversarial Attacks","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T09:10:42.075379Z"},"links":{"cited_paper":"/paper/2411.16622","citing_paper":"/paper/2510.16923"},"observation_digest":"sha256:19d47b7c00ffb1b514c733c1038a22a15e9e1188141cb5a256ec5d750757b85b","observation_id":"fc0337ab-0e41-4330-acf8-1b287d45c42e","resolution":{"observed_at":"2026-08-04T09:10:42.075379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.16622","snapshot_observed_at":"2026-08-01T19:10:43.176904Z","title":"Imperceptible adversarial examples in the physical world.arXiv preprint arXiv:2411.16622, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.17077","last_updated":"2026-07-19T05:02:58Z","snapshot_observed_at":"2026-08-04T04:35:10.293670Z","submitted_at":"2026-07-19T05:02:58Z","title":"ALLUDE: A Unified Evaluation System for Configurable Attacks in Differentiable Environments","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T19:10:43.176904Z"},"links":{"cited_paper":"/paper/2411.16622","citing_paper":"/paper/2607.17077"},"observation_digest":"sha256:fa4dcde15d5661257a4d4772461ba9ee2b75dff41bab6c59fe00d51472b9be5f","observation_id":"fdcd07f9-f9b2-4c8e-92cd-ad13bbaf89b2","resolution":{"observed_at":"2026-08-01T19:10:43.176904Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2411.16622/citation-record","integrity":"/paper/2411.16622/integrity","json":"/paper/2411.16622/citation-record.json","paper":"/paper/2411.16622"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.958865Z","title":"Obfus- cated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"e061a997-bc8b-4b87-b056-ac368182d36b","year":2018},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.585489Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:da4a78c678fb718424a9c42593faf29a0764231c5e9289455ec5b514e339d434","observation_id":"9db6666d-54f4-4345-995f-56924c0af338","resolution":{"observed_at":"2026-08-12T13:01:01.964967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.941706Z","title":"Synthesizing robust adversarial examples","venue":null,"work_id":"b2570574-e264-419e-89b5-e759d3bb61ce","year":2018},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.591097Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:2198827c7b8f6cfdf67cf5ed7eb030fb24cdbd129df058d15896826583c5761b","observation_id":"b49d000d-404d-470e-a73f-c3d63c5c7078","resolution":{"observed_at":"2026-08-12T13:01:01.947300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.922569Z","title":"Digital color halftoning","venue":null,"work_id":"7fb5aca5-217f-4a5e-83bb-04de5943a737","year":2005},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.716173Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:cff1f6a4edc7463fa6ed3cb7c99cc8f5118bcad4c1678315f99d46acf55ad268","observation_id":"cf6bf55e-984b-4488-ba9d-890092252323","resolution":{"observed_at":"2026-08-12T13:01:01.927794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1308.3432","last_updated":"2013-08-15T15:19:34Z","snapshot_observed_at":"2026-08-11T05:54:56.124984Z","submitted_at":"2013-08-15T15:19:34Z","title":"Estimating or Propagating Gradients Through Stochastic Neurons for Conditional Computation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1308.3432","snapshot_observed_at":"2026-08-12T13:01:00.721447Z","title":"Estimating or propagating gradients through stochastic neurons for conditional computation","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.721447Z"},"links":{"cited_paper":"/paper/1308.3432","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:37519d78a09bc144181bdd621d9252c0134e5e596819e7cac24f3d4ba83c3eb7","observation_id":"737add64-df39-46af-8b4b-3a01a7c5a1b5","resolution":{"observed_at":"2026-08-12T13:01:00.721447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.904276Z","title":"Tide: A general toolbox for identifying object detection er- rors","venue":null,"work_id":"e611fa04-23b2-474a-bd0c-9da5ee003ffa","year":2020},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.727055Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:e3d0bcee43d239e44c75b5c7dc4a38cf1b8b297589b062258df98eb73f27b47f","observation_id":"90159e4d-5bf9-4ef6-985f-00227f2a9329","resolution":{"observed_at":"2026-08-12T13:01:01.910417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.885447Z","title":"Apricot: A dataset of physical adversarial attacks on object detection","venue":null,"work_id":"cd902f9d-88c1-4590-9253-2e4b8451b146","year":2020},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.732144Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:030394bbfa13179312979f8353a84b06ba0aedd2bf6d137c0ba89c5dff4fd294","observation_id":"9533c53a-77de-4163-b0de-60d7edc3a513","resolution":{"observed_at":"2026-08-12T13:01:01.890880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.867178Z","title":"Re- configuring the imaging pipeline for computer vision","venue":null,"work_id":"97286eb0-e814-4685-9f4b-33c7d578a15d","year":2017},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.737567Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:b4ac8c7ca84bff20758243016f0e14e5c4bf26d2e6140af9a9453fa6c084941a","observation_id":"b9910964-47e6-4a6d-9211-4e916e620a27","resolution":{"observed_at":"2026-08-12T13:01:01.873130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.849373Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"a65a13bb-eb59-4672-b36a-4c551670592b","year":2017},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.742432Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:ca8e02b259cd77028e44c82f1ddba86bbacebe7d29776710ad7bae8588730407","observation_id":"dff1fc5c-e63a-48a0-b3ed-878c70d41705","resolution":{"observed_at":"2026-08-12T13:01:01.854540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-12T14:46:48.605924Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-12T13:01:00.747229Z","title":"On evaluating adversarial robustness","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.747229Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:66d90a24bbad042415ae20e39a30096439e87b3e7608dad124407a585f2b580a","observation_id":"8e6f414c-794f-465c-b654-987dda379b74","resolution":{"observed_at":"2026-08-12T13:01:00.747229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.831810Z","title":"Are aligned neural networks adversarially aligned? Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"a81985dc-4bd6-4a4f-a79b-da7d2827fd27","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.752644Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:150fb52429539437de02466726b1c93baf8a7ee15868a382099c7eededf8104b","observation_id":"14acfe0e-b925-42c5-894c-b6b8591ae5a5","resolution":{"observed_at":"2026-08-12T13:01:01.837548Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.813469Z","title":"Shapeshifter: Robust physical adversar- ial attack on faster r-cnn object detector","venue":null,"work_id":"850da0b4-854c-403e-a3e1-74233c8e3bb1","year":2018},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.757530Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:6944f0cfd54eddd574b40df6ed988db54dd111f0a1c555cfc496daee23ecc559","observation_id":"871aeed0-fd18-4898-a349-56e00e175959","resolution":{"observed_at":"2026-08-12T13:01:01.819334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.795998Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"4a412c16-cf2d-40f7-b36b-a66c34fbf727","year":2019},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.762319Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:ed8d83070da9be405b3d04043a4e97c7471f47f72fe13e790fa5c528cad599f8","observation_id":"f5194775-c65c-4c2d-a2c1-f05b76ed2a26","resolution":{"observed_at":"2026-08-12T13:01:01.801370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.778067Z","title":"Oscar datagen toolkit","venue":null,"work_id":"fe2393a1-8ed2-46cf-b9bf-0da8080cb637","year":2023},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.767243Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:34065b7fb2af58a44c6a2ee78231b6f375d37d99534f49b2b42ce42989ae3a63","observation_id":"baf00dec-7d19-4cfe-bbd2-cfbf83bdb517","resolution":{"observed_at":"2026-08-12T13:01:01.783318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.759831Z","title":"Reliable evalua- tion of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"ef241594-198b-44e7-a213-0c9f6af4857d","year":2020},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.772189Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:bdecfc9527488225aee3f897252d3bceaec242df0833ca4412793a2c15bec2be","observation_id":"e0bb7069-1476-4b5d-bbfa-876d228fc9c3","resolution":{"observed_at":"2026-08-12T13:01:01.765628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.742014Z","title":"Guaranteeing AI Robustness Against Deception (GARD)","venue":null,"work_id":"bd125826-4ced-4227-93c1-707779f06c78","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.777087Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:cdd483409f23ccb9f9a467717d1c63596a3522cc7d8b7b9f94717a0091b69b66","observation_id":"72d51e1a-7a13-401a-9e64-703d3eacf9a9","resolution":{"observed_at":"2026-08-12T13:01:01.747348Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.782140Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.782140Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:0ea901fdb6411e8e11fc2154ba8ce5078aba9c14661931ba302d2cb8942745cd","observation_id":"64a1f403-e1dd-443c-8db7-59ebda92827f","resolution":{"observed_at":"2026-08-12T13:01:00.782140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.711772Z","title":"Deep learning-based autonomous driving systems: A survey of attacks and defenses","venue":null,"work_id":"13badab0-4eb4-44f0-8778-894cccfac7ba","year":null},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.787214Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:975b4d7cee5db55ed6b3eef0668d4942bc1ac53e17bc5b8c77e770008f6f6775","observation_id":"51657c17-d621-400d-a556-a4894199922b","resolution":{"observed_at":"2026-08-12T13:01:01.717577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.792422Z","title":"Carla: An open urban driv- ing simulator","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.792422Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:a6de1fe70bc774479f8f36afec9270a87a8ce0c7172c7332a25aea1626bb0089","observation_id":"8d25c2e2-c4f3-473f-8389-5321a59750bb","resolution":{"observed_at":"2026-08-12T13:01:00.792422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.679782Z","title":"Unreal Engine","venue":null,"work_id":"6963bb8d-af89-4d02-8f81-c056f2e138ee","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.797300Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:b5ffb613435c1d3b7d4b8b6c5d85b7f4e645e3bae3df740d6042a4bcf0886f17","observation_id":"e5669159-146b-46ad-a20c-84198b7df5e2","resolution":{"observed_at":"2026-08-12T13:01:01.685320Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.662011Z","title":"Black Hat AI Track Submissions: Obser- vations and Feedback","venue":null,"work_id":"6e43ffa6-4245-41f3-be82-44177e0d7188","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.802224Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:1cace61ef4be0f290e4c15dca5323cfd3fac7f59127a81f15f30e3e3db762504","observation_id":"0a364b3d-d3aa-48a2-ab90-c71eace7e304","resolution":{"observed_at":"2026-08-12T13:01:01.667751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.643533Z","title":"Connecting the digital and phys- ical world: Improving the robustness of adversarial attacks","venue":null,"work_id":"b1b0d0f7-d3b4-4225-99f1-9e6cd25780be","year":2019},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.807141Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:6eb9fb3bc782853ab00b8a865ba191bffbbf24b8b6af22ae2a571203ef73f2d3","observation_id":"92e01465-a16b-4c85-8c75-cecfce5ad33e","resolution":{"observed_at":"2026-08-12T13:01:01.649444Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.626440Z","title":"Detecting physical adversarial patch attacks with object detectors","venue":null,"work_id":"03bfc89a-8ed2-452c-8cef-a89574f84030","year":2022},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.811763Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:0f9fedb13f78385da23bf947e599c700f72c4af5f5df377a155dedfacbcbf3aa","observation_id":"061ad958-0555-439b-b049-10a40c8f7c95","resolution":{"observed_at":"2026-08-12T13:01:01.631721Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2006.12057","last_updated":"2020-07-31T00:01:27Z","snapshot_observed_at":"2026-08-12T08:58:35.723384Z","submitted_at":"2020-06-22T08:14:52Z","title":"Differentiable Rendering: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2006.12057","snapshot_observed_at":"2026-08-12T13:01:00.816295Z","title":"9 Differentiable rendering: A survey","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.816295Z"},"links":{"cited_paper":"/paper/2006.12057","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:3b6b97b7ef854204be3910ac3b01952dd99850a0e9a6972a90b3e5fc988fef06","observation_id":"29ce29c9-01bb-4dec-9880-5bc8b6ee9b97","resolution":{"observed_at":"2026-08-12T13:01:00.816295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.608767Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"e5102737-b5b6-4a4d-b2e1-9e921ac1978c","year":2018},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.821655Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:d0968ee4fc85d737aee9958e48789a593a4212165c6263132f390f481a01b74f","observation_id":"0dacbbf5-5a31-48ce-b413-c82fcec638d6","resolution":{"observed_at":"2026-08-12T13:01:01.614327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.827651Z","title":"We can always catch you: Detecting adversarial patched objects with or without signature","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.827651Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:2b26090537db7c17d79824fb3d9f8b93a186fd2c9939d4f5bb979ec761443fbd","observation_id":"8c7a7c5d-cea4-4292-8a68-62c361c1d7c2","resolution":{"observed_at":"2026-08-12T13:01:00.827651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.833081Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.833081Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:3e98da034cc3e8a79eb26c3e10e04ff87e3b3a7b1596f373778140793bfd8a65","observation_id":"dcf0f00c-8ed8-488c-9206-10d947063900","resolution":{"observed_at":"2026-08-12T13:01:00.833081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-12T13:01:00.837782Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.837782Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:72cac38490bdb58b62ff0dd5c23c370c175f804986a242af7ba874551bc21395","observation_id":"5323c0e3-2cd7-4dc4-9707-fb1f3b50ea8e","resolution":{"observed_at":"2026-08-12T13:01:00.837782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.578316Z","title":"Hardware-in- the-loop end-to-end optimization of camera image process- ing pipelines","venue":null,"work_id":"23b04661-3c02-4319-a7a6-cf7ddac7e511","year":2020},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.842887Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:e7bbacf5b27a3a38e37289ce06c222b264c8b340d2e0b8189eb564de0a0349cb","observation_id":"ed2761aa-4b14-4e62-8455-aa9216e52c7a","resolution":{"observed_at":"2026-08-12T13:01:01.583624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.847975Z","title":"Pytorch: An im- perative style, high-performance deep learning library","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.847975Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:e9a24e6efd87d7ef344cced32d5a5f29bbfa496c7d31d9de0d2110a793ff0657","observation_id":"96056e22-1bb8-43cd-a67c-bcef1323ade2","resolution":{"observed_at":"2026-08-12T13:01:00.847975Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2007.08501","last_updated":"2020-07-16T17:53:02Z","snapshot_observed_at":"2026-07-06T09:38:53.228850Z","submitted_at":"2020-07-16T17:53:02Z","title":"Accelerating 3D Deep Learning with PyTorch3D","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.08501","snapshot_observed_at":"2026-08-12T13:01:00.852411Z","title":"Accelerating 3d deep learning with pytorch3d","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.852411Z"},"links":{"cited_paper":"/paper/2007.08501","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:bb5f34d2a91cb4f89f401bd426a4489097b83ff2a31fc0ba69b877189e10ecc4","observation_id":"d5d44a53-9ac0-441b-a5f9-98b69d4a165d","resolution":{"observed_at":"2026-08-12T13:01:00.852411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.551372Z","title":"A survey on deep learning-based real-time crowd anomaly detection for secure distributed video surveillance","venue":null,"work_id":"386b809d-d155-4c15-a342-62a31df58914","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.857791Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:38e11e202abb9e5ad3f7042c3accf5dd1844674f5100aaa00195756d4aa3f0c2","observation_id":"07eb400c-baa4-4d33-82fc-8749d42271b4","resolution":{"observed_at":"2026-08-12T13:01:01.556918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.534796Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"ebef410f-86b9-4ab0-9c67-d255b74e0e53","year":2016},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.862427Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:c0b4b0de55262e6e503cc0bb03ff7fb7e878e2ecd5cabc52a64324897fe9edba","observation_id":"79f99334-85ca-4592-b250-6c734030e684","resolution":{"observed_at":"2026-08-12T13:01:01.540041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.516924Z","title":"armory, 2023","venue":null,"work_id":"f113c7de-3408-4b20-a6bf-d40809fec70f","year":2023},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.867090Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:99b5c8afb8b6df91e7a8e8c91c75e3ad72be4d8f4e78d8a09d6479b9dc9c5563","observation_id":"c0e7102b-51f3-49f5-8352-feede508ce89","resolution":{"observed_at":"2026-08-12T13:01:01.522990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.497660Z","title":"Dta: Physical camouflage attacks using differentiable transforma- tion network","venue":null,"work_id":"8e586b95-90d8-4c38-b41d-3cff6633542e","year":2022},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.872032Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:ad936ae72611a455686e82541eb77c6274db4207d84e754f49dbc0daddd638e9","observation_id":"38ff3393-d57b-401b-9ae0-cd1b5b3a64b7","resolution":{"observed_at":"2026-08-12T13:01:01.503835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-12T13:01:00.877025Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.877025Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:c8c7e7bcf4d21686b3968910a6abdb6f36c6101b58bbcaa27aa9ee7147ef6e29","observation_id":"235d32e2-4f95-4167-ba0a-3b400c87b5f8","resolution":{"observed_at":"2026-08-12T13:01:00.877025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.480719Z","title":"Adversarial Patch Attack against CARLA Object Detection","venue":null,"work_id":"d37a5618-3974-45c4-a1d8-4ddeac857a19","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.882281Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:9861951922b6e1497552d4fbe56ef92ff57ffd042b852ccb3c4d6a6175c1df4d","observation_id":"2301187c-310c-441a-be72-61cb6208be66","resolution":{"observed_at":"2026-08-12T13:01:01.486060Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.462432Z","title":"CARLA Object Detection Model Weights for GARD Eval7","venue":null,"work_id":"7d22afb4-4aa1-433d-b111-7a0e0ebe8529","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.887024Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:288bc31169b39e18037240bc1e67d2b29e177338496d1c1b694978defae79750","observation_id":"683bbd2a-7c1d-4160-9186-a2890d387d51","resolution":{"observed_at":"2026-08-12T13:01:01.468824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.445613Z","title":"Detection of ArUco Markers","venue":null,"work_id":"361ef087-cba9-4ab5-a4f6-4af8a4b15a1c","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.891785Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:23f57fb557e290345342a644426a27e1c02f7d7c6cb17bb927ea97520a34dd89","observation_id":"93820b14-3dff-4cf1-8c89-4d6c56bf1c3f","resolution":{"observed_at":"2026-08-12T13:01:01.450890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.427015Z","title":"PyTorch Perspective Transforma- tion API","venue":null,"work_id":"84aafd1b-f133-4c33-bc0d-38216321867e","year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.896471Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:66d45395d210ac26cdcc3d334f546375253529b9cf228c62401a6a7e711a45b9","observation_id":"801f6700-44f0-4836-b7fc-98fac9ee2278","resolution":{"observed_at":"2026-08-12T13:01:01.432927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:00.901125Z","title":"Making an invisibility cloak: Real world adversar- ial attacks on object detectors","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.901125Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:f44cec90ded5726e939803ef0619fdcdc8b7742c9473f75b332ab06b023dfb6c","observation_id":"159c3684-91f8-43a6-aab1-f5c6b08694d1","resolution":{"observed_at":"2026-08-12T13:01:00.901125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:01:01.392947Z","title":"Modular ad- versarial robustness toolkit","venue":null,"work_id":"5c0d36ff-de7d-42b5-b0de-1ae1d5e1ef4f","year":2023},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.905998Z"},"links":{"citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:2c43bb155d3a72ef46b92140f97442ca4a5d119b319cd11c905511ae20f737e7","observation_id":"409c3cff-6ec9-403a-b293-a961622516a7","resolution":{"observed_at":"2026-08-12T13:01:01.401196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.15853","last_updated":"2024-10-15T09:36:19Z","snapshot_observed_at":"2026-08-13T04:10:53.093416Z","submitted_at":"2024-02-24T16:50:10Z","title":"RAUCA: A Novel Physical Adversarial Attack on Vehicle Detectors via Robust and Accurate Camouflage Generation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.15853","snapshot_observed_at":"2026-08-12T13:01:00.911081Z","title":"piggy bank","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T13:01:00.911081Z"},"links":{"cited_paper":"/paper/2402.15853","citing_paper":"/paper/2411.16622"},"observation_digest":"sha256:bcc356d50d511608e5b59ab38520a0c8aa5f5bcc2fb60d5ed46e837fd65d51e4","observation_id":"5588c4ce-b9ba-4df7-a89e-dc7761008981","resolution":{"observed_at":"2026-08-12T13:01:00.911081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.16622","last_updated":"2024-11-25T18:02:23Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-13T05:57:17.813812Z","submitted_at":"2024-11-25T18:02:23Z","title":"Imperceptible Adversarial Examples in the Physical World"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":29},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 2 inbound Pith citation observations for arXiv:2411.16622."}