{"as_of":"2026-08-14T18:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fa3208f2bbd2859719b6bbae4d53b64d943690a806f445a5919892a032946441","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T10:56:43.943937Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.18776/citation-record","integrity":"/paper/2411.18776/integrity","json":"/paper/2411.18776/citation-record.json","paper":"/paper/2411.18776"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.834540Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.834540Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:df87e47cecfecdc9ea2073ccd3cca0a334dd23b52e43cbbd786394fdd216c7bf","observation_id":"45fe610b-09ba-4b26-9030-f7c728b231c8","resolution":{"observed_at":"2026-08-12T10:56:43.834540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.838161Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.838161Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:d4c92a92aa60e78485177af500fb9c6c6d41a2eed654c6efcceb14025cb26d96","observation_id":"948919b1-3026-4006-a0de-62c3848d332f","resolution":{"observed_at":"2026-08-12T10:56:43.838161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.844649Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.844649Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:d4fa6fdfba2016a31ed1068aa96fa694a3616fe24601a4a05fe7750f076a0eb6","observation_id":"dac85b56-e6e6-4642-8132-74b5dc9425d2","resolution":{"observed_at":"2026-08-12T10:56:43.844649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00069","last_updated":"2018-09-28T20:09:04Z","snapshot_observed_at":"2026-07-06T07:04:59.871975Z","submitted_at":"2018-09-28T20:09:04Z","title":"Adversarial Attacks and Defences: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00069","snapshot_observed_at":"2026-08-12T10:56:43.847680Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.847680Z"},"links":{"cited_paper":"/paper/1810.00069","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:89bfe425519a5ca86f89b2877c2f543a94cc6cd601141e983c79ab03b73e22d2","observation_id":"af0c7b31-d6e4-48c4-bb09-0ab4bde60183","resolution":{"observed_at":"2026-08-12T10:56:43.847680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.252593Z","title":null,"venue":null,"work_id":"bdc9921e-42ca-463d-8bc8-fb8f12559c7a","year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.850939Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2643631cbfbc848aa4f506881eca98b5ade78df84edb7c6d8f165a4029aa77e2","observation_id":"64c96d27-293f-42f1-82d5-20c2fb1e89f7","resolution":{"observed_at":"2026-08-12T10:56:44.255228Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.244518Z","title":null,"venue":null,"work_id":"97f41b1d-0eb6-4067-b96d-e32e58eabc4d","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.853911Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:839f9a5401335029d195072bcf60cab9db48d4205f06a7786f77ed95453ff1ca","observation_id":"dce810f6-00d6-44c5-9306-10d174af74a5","resolution":{"observed_at":"2026-08-12T10:56:44.247292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.856845Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.856845Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:1eadad3d792dd8e0305bd2fd1cffa398a6d1b43a5671caeb94a0c93cc785bc75","observation_id":"71ec5873-32e7-4f4f-bc15-dd5897829eaf","resolution":{"observed_at":"2026-08-12T10:56:43.856845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.230294Z","title":null,"venue":null,"work_id":"c2d4a01c-6627-4cca-9716-27ba14ebb5f3","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.859056Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:9a1d4dc457872ac2808fa90cb767650f66a6db14bcc3022fb1e9609330cbcea0","observation_id":"39bac62a-709b-48ee-9c6e-0c367f33194f","resolution":{"observed_at":"2026-08-12T10:56:44.233332Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.221523Z","title":null,"venue":null,"work_id":"48e69683-c71f-48f8-9aee-eabd05a60832","year":2002},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.861270Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b281d3008fd66f5a3a02cebbb92c0ca0b3d480fac431cb2b238bf0215b46ac1e","observation_id":"5d294d29-5bed-49b6-a0ac-942769bb4893","resolution":{"observed_at":"2026-08-12T10:56:44.224442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T10:56:43.863349Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.863349Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b2bf6e02637b99bf43d631ee7a82526e678f8bcdf77b0ea0726e045b3948e782","observation_id":"1b1fd88c-e0c2-4557-b3bf-7133e15a9454","resolution":{"observed_at":"2026-08-12T10:56:43.863349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02531","last_updated":"2015-03-09T15:44:49Z","snapshot_observed_at":"2026-07-06T04:11:24.157003Z","submitted_at":"2015-03-09T15:44:49Z","title":"Distilling the Knowledge in a Neural Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02531","snapshot_observed_at":"2026-08-12T10:56:43.865913Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.865913Z"},"links":{"cited_paper":"/paper/1503.02531","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2330457810e9f6da2c32c7f2758aff45867ec4287ae12ea13db7bace9d4ba03b","observation_id":"006a708b-0858-4043-9ff5-2acdb30656e2","resolution":{"observed_at":"2026-08-12T10:56:43.865913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.213099Z","title":null,"venue":null,"work_id":"021b9195-8ceb-4c95-8526-e4bb3ed7e39d","year":2024},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.868464Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:5930d8515a9ef84a27c2ef0887130c95e22384f5395e5dc0f7e550e35400fed1","observation_id":"922f70d7-78c5-4b95-a891-8206c6713a91","resolution":{"observed_at":"2026-08-12T10:56:44.215938Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.204207Z","title":null,"venue":null,"work_id":"0b9e3365-da8b-494c-a355-3b504e93eaff","year":1987},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.870622Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:0653a547247c066efacb692641f6a27e5dd271abe499a7f2c4cae6150e88f134","observation_id":"5c5fb5ff-87c1-454b-89ab-61f555be90dc","resolution":{"observed_at":"2026-08-12T10:56:44.207177Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.195868Z","title":null,"venue":null,"work_id":"07ec255a-e957-4226-9e07-3564487d4a6b","year":1988},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.872860Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:88e2d700a0701301b83582f45a4c70bd299309c293a07f775e1a74395c8a3916","observation_id":"e2669584-9db4-46b2-a1b8-3ff350c985bf","resolution":{"observed_at":"2026-08-12T10:56:44.198776Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.187520Z","title":null,"venue":null,"work_id":"79eb889e-40fa-402a-87e0-8f3b73cc4980","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.875319Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:f96390eeda12c4a4d1a8bae8017c84af61e2314b5a726eaa3d68591c3e549787","observation_id":"25dcc605-ab9f-4644-852d-7a5ebc7c543b","resolution":{"observed_at":"2026-08-12T10:56:44.190410Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.179266Z","title":null,"venue":null,"work_id":"e8fefb97-dc06-420c-9519-bdda0125cbde","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.877695Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:c4cde96796d1e1b997b6ec43974057f61e47533339bc73283df7e8cd768c2c3b","observation_id":"9df0ef8e-44da-45b6-9b67-06e9b708c78b","resolution":{"observed_at":"2026-08-12T10:56:44.182107Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.171236Z","title":null,"venue":null,"work_id":"214fa6d9-0b2d-47dd-adf6-fe59c9d9191f","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.880047Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:5bbdadf8575058c9bb5a5746f53e9db8523af3817f97e4d3bf7b957fce3e978d","observation_id":"93b51c7c-0607-4a2a-a1d4-446ea75e94a0","resolution":{"observed_at":"2026-08-12T10:56:44.174002Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.06059","last_updated":"2019-12-12T16:07:20Z","snapshot_observed_at":"2026-07-06T08:44:06.481703Z","submitted_at":"2019-12-12T16:07:20Z","title":"Grid Search, Random Search, Genetic Algorithm: A Big Comparison for NAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.06059","snapshot_observed_at":"2026-08-12T10:56:43.882385Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.882385Z"},"links":{"cited_paper":"/paper/1912.06059","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:29bd8be4a30a11d03076cff0205c8a5b5b799ba9b9cf1c283c9faa2ab491920e","observation_id":"ccb3a67b-5445-4305-8d54-07629b80fad9","resolution":{"observed_at":"2026-08-12T10:56:43.882385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.885084Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.885084Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b0166654b63cba40e82ad380fe32a56b57e881a48ca67d342d81147262f8a5d5","observation_id":"ce33d872-d739-4ef8-a2d5-8019982d4d5f","resolution":{"observed_at":"2026-08-12T10:56:43.885084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.14267","last_updated":"2023-07-16T06:05:14Z","snapshot_observed_at":"2026-08-13T12:35:41.264417Z","submitted_at":"2023-02-28T03:01:58Z","title":"Adversarial Attack with Raindrops","version":2},"cited_work":{"arxiv_id":"2302.14267","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.14267","snapshot_observed_at":"2026-08-12T10:56:44.031913Z","title":"Adversarial Attack with Raindrops","venue":"cs.CV","work_id":"1eeb37f8-9768-42c9-bbc2-ba5e5017dc65","year":2023},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.887540Z"},"links":{"cited_paper":"/paper/2302.14267","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:709e71613f630b170f877a7373fd132a12dd565de6ffed9756367b6b3db26a8e","observation_id":"cb4f2f48-df0d-409c-9886-2652ec17be2d","resolution":{"observed_at":"2026-08-12T10:56:44.035165Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02494","last_updated":"2017-12-07T05:13:54Z","snapshot_observed_at":"2026-07-06T06:13:11.382074Z","submitted_at":"2017-12-07T05:13:54Z","title":"Adversarial Examples that Fool Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02494","snapshot_observed_at":"2026-08-12T10:56:43.890556Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.890556Z"},"links":{"cited_paper":"/paper/1712.02494","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:58572104e90d47fc6596b49d39cc1e22a6468400cd4f5875df771193cfbae54b","observation_id":"4f5b9afb-9ae2-4496-8b7a-fb9c62613fc7","resolution":{"observed_at":"2026-08-12T10:56:43.890556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.03337","last_updated":"2017-10-26T21:53:58Z","snapshot_observed_at":"2026-07-06T06:03:25.270202Z","submitted_at":"2017-10-09T22:20:59Z","title":"Standard detectors aren't (currently) fooled by physical adversarial stop signs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.03337","snapshot_observed_at":"2026-08-12T10:56:43.893416Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.893416Z"},"links":{"cited_paper":"/paper/1710.03337","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2d8c082d7bd5b1e93c7d486089d85410a7fc4e9fe31661786118d0ee970921f8","observation_id":"34d1b2cc-3421-416d-983b-17c252811037","resolution":{"observed_at":"2026-08-12T10:56:43.893416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-12T10:56:43.896370Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.896370Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:75d9c9b82bd7cbee349d62ff0cdcd8450ac39684c803f70335aec9fc0438f129","observation_id":"887c33ff-5268-4646-b39c-9b8ba363304d","resolution":{"observed_at":"2026-08-12T10:56:43.896370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.158019Z","title":null,"venue":null,"work_id":"6a225b96-3318-40ad-80ee-5bc18665de69","year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.899280Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:d17cc690a354d212090911fe881784d78b8cf4a4f3afcd1fb57be3dbca27166d","observation_id":"f458a912-2dac-4e11-8c39-8ff4e1d26f2d","resolution":{"observed_at":"2026-08-12T10:56:44.160855Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.149518Z","title":null,"venue":null,"work_id":"02a1d8f6-02fb-409e-a0a0-11062b18196b","year":2012},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.901931Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2173dc344934dd7681cbe18bc3f86cf564fcb0d2629710cde4a920af44c7adcb","observation_id":"e483c579-771b-4043-92eb-ac79015fc95c","resolution":{"observed_at":"2026-08-12T10:56:44.152502Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.904494Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.904494Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:6eb63db80c31c9b4de668f08a32cd4e21545f7c5c9ca90e8092e2a7fa155b799","observation_id":"432e8879-d57e-4c57-8e0c-5977da0611c7","resolution":{"observed_at":"2026-08-12T10:56:43.904494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.136129Z","title":null,"venue":null,"work_id":"bf308c0f-7760-4383-be7c-10bb0c7254f0","year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.907427Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:051dddc93eb5e642ff6b1168b46724b8378f8d6206e87c1e820c53eafde4ae23","observation_id":"85c7b490-7905-4f01-a324-2fe30ded0325","resolution":{"observed_at":"2026-08-12T10:56:44.138975Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.910016Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.910016Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:a9a2728e6869f6457b06cb3ea885767ccc673243f563782f307c1d2b771883d2","observation_id":"54e1f883-5bab-48a7-b4da-cd8c13162172","resolution":{"observed_at":"2026-08-12T10:56:43.910016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.119239Z","title":null,"venue":null,"work_id":"ccb8e020-1429-4188-8371-1ffc8dae6ede","year":2023},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.915960Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:5c7055c289e6f24abdfa7cf79e5d5d9651b483f4cb9f37b00226e65030395878","observation_id":"c607afd0-a94b-43c9-9524-ce9072929152","resolution":{"observed_at":"2026-08-12T10:56:44.121842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.918587Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.918587Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:611bd05a752ccded9b044c5d42fc987ef97e242052b899d1c618ee1458a1a9c3","observation_id":"24cbc291-f357-4e0b-8a8e-44fe7ffb82c3","resolution":{"observed_at":"2026-08-12T10:56:43.918587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1506.01497","last_updated":"2016-01-06T06:30:17Z","snapshot_observed_at":"2026-07-06T04:19:53.343717Z","submitted_at":"2015-06-04T07:58:34Z","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.01497","snapshot_observed_at":"2026-08-12T10:56:43.921116Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.921116Z"},"links":{"cited_paper":"/paper/1506.01497","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:62fd848b27c71f7098cb999cc19d440827f29ff41663f01f9d68bb31fe76b87a","observation_id":"431fb2f4-84e6-40f6-8a8c-61701554fda7","resolution":{"observed_at":"2026-08-12T10:56:43.921116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.106661Z","title":null,"venue":null,"work_id":"db05d431-14f1-4441-99af-4c3b5c528d50","year":2014},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.924490Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:4e664ca29197bb43836ab8f473b4f0747c089ebdd7c3dfeee3a4c8a9fb784c85","observation_id":"ad05b9fe-04c5-4834-ad1a-57f188bcc7bf","resolution":{"observed_at":"2026-08-12T10:56:44.109076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06430","last_updated":"2018-05-31T20:05:27Z","snapshot_observed_at":"2026-07-06T06:24:02.844055Z","submitted_at":"2018-02-18T19:39:28Z","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.06430","snapshot_observed_at":"2026-08-12T10:56:43.927063Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.927063Z"},"links":{"cited_paper":"/paper/1802.06430","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:121b7d458c2e0ac8550558a1cf0ee94755c939c405cc8e1a606c5d4fd176c8fd","observation_id":"501315a2-3772-41a7-8086-5363da384a35","resolution":{"observed_at":"2026-08-12T10:56:43.927063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02780","last_updated":"2018-03-26T20:28:30Z","snapshot_observed_at":"2026-07-06T06:17:47.185268Z","submitted_at":"2018-01-09T03:33:33Z","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","version":3},"cited_work":{"arxiv_id":"1801.02780","doi":null,"metadata_source":"pith","pith_arxiv_id":"1801.02780","snapshot_observed_at":"2026-08-12T10:56:43.986215Z","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","venue":"cs.CR","work_id":"674250c5-5c72-4f11-9544-376b8fb428c3","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.929721Z"},"links":{"cited_paper":"/paper/1801.02780","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b498e1d5cdb22f985b7ddf676875429a35d3d4cfb8dd11de98000d4fdb915185","observation_id":"a3faf653-eecc-4976-9466-4af623f22cde","resolution":{"observed_at":"2026-08-12T10:56:43.989049Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.099247Z","title":null,"venue":null,"work_id":"da5fd0ab-55c1-45c3-9ac8-7480ed47db96","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.932098Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b41dc37dc8f3b769282f44a1566b68d923c3cdfa5338ec17314fa77273fb15d8","observation_id":"50229133-300c-42a0-9028-af315a32107c","resolution":{"observed_at":"2026-08-12T10:56:44.101779Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-12T10:56:43.934334Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.934334Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:9caae00f15afa68833e94e3f5afcc0c27048b5bf60e0f72bedb989a54bb0b420","observation_id":"a82b13a1-165b-4fe1-bfba-fc24f9e84227","resolution":{"observed_at":"2026-08-12T10:56:43.934334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.091404Z","title":null,"venue":null,"work_id":"5ea2d4c5-6f85-4af9-ab53-be4f98c3c41e","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.937006Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:aa549f77f46189f7c1296e01379feea19ad2d7189ba73d21bec5c227bee995f7","observation_id":"1f520288-97b6-4c59-b9c9-77a70d6e1e95","resolution":{"observed_at":"2026-08-12T10:56:44.094065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.083759Z","title":null,"venue":null,"work_id":"7f8b4454-7139-4fdf-8a79-3834a8de0916","year":2021},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.939377Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:53c1a129cd0fd19a8b5eae70d3b4dfa4638b648dcc38a479060e2f5bfa4679a0","observation_id":"2dd8dd52-a490-41b1-9731-3a7c85291cb4","resolution":{"observed_at":"2026-08-12T10:56:44.086294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.09552","last_updated":"2020-02-14T20:07:55Z","snapshot_observed_at":"2026-08-08T14:08:39.341444Z","submitted_at":"2019-09-20T15:11:09Z","title":"Defending Against Physically Realizable Attacks on Image Classification","version":2},"cited_work":{"arxiv_id":"1909.09552","doi":null,"metadata_source":"pith","pith_arxiv_id":"1909.09552","snapshot_observed_at":"2026-08-12T10:56:43.965241Z","title":"Defending Against Physically Realizable Attacks on Image Classification","venue":"cs.LG","work_id":"0ea5fca5-0cd8-42de-b2b4-ba640c09af1a","year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.941603Z"},"links":{"cited_paper":"/paper/1909.09552","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:bb8d7f1eaa88779a0ad787c6fd84988889661f74c38ceae6b318e4601e48847a","observation_id":"86a93e97-d52e-4623-be7d-2b69fc214758","resolution":{"observed_at":"2026-08-12T10:56:43.970468Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.075970Z","title":null,"venue":null,"work_id":"61881a1d-237f-4e66-b03a-3048b1b87dd3","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.943937Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:5ec6f1dd9113a75fe42f7158b4b993a141b4a045fccd5dd11215a2ed9870add9","observation_id":"d9006c88-05a1-40b1-8a83-e5da4a59406b","resolution":{"observed_at":"2026-08-12T10:56:44.078729Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.912809Z","title":"In 2016 IEEE symposium on security and privacy (SP)","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.912809Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:d7f0824f74061cc8d6f8991bf7b93917fb6884a7cb528facd6c3bf8a96476d2b","observation_id":"8a428018-f195-46a8-9c1e-657b8154719d","resolution":{"observed_at":"2026-08-12T10:56:43.912809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T10:56:43.841184Z","title":"arXiv preprint arXiv:1712.09665 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.841184Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:44fd5312fb30c1a5133a7f20496c4c519027c85ec3c390eb9b34aee91947fdab","observation_id":"883d5582-374a-46b9-8b63-68e016de2219","resolution":{"observed_at":"2026-08-12T10:56:43.841184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-13T22:24:14.595245Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":39,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2411.18776."}