{"as_of":"2026-08-14T23:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:cc38a1b6909b006a49c716abff6031da621a0d53321193bc790a4eecd509bdde","coverage":[{"denominator":89,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":89,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T19:01:26.982853Z","state":"measured"},{"denominator":89,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":89,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.07274/citation-record","integrity":"/paper/2412.07274/integrity","json":"/paper/2412.07274/citation-record.json","paper":"/paper/2412.07274"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.585798Z","title":"Segpgd: An effective and efficient adversarial attack for evaluating and boosting segmentation robustness,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.585798Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:cf43e5e1098b640f190916511a297b82d04ee7d97c016d01417132cbfb9c1da8","observation_id":"7c771da7-58ed-4532-92cb-458de2a3154b","resolution":{"observed_at":"2026-08-11T19:01:26.585798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.590587Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.590587Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:84b6b6d06b489359d995a9205907b4fa45a15324564ffaf415de01150064df03","observation_id":"6d100a05-138d-483e-9d83-e14233475462","resolution":{"observed_at":"2026-08-11T19:01:26.590587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.594985Z","title":"On the robustness of semantic segmentation models to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.594985Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:3c1c7a09b3650579c81b0701a1b55866d1c42771944ff7c44d8ed5d287975134","observation_id":"8e40a2bd-0dd6-4f12-a08d-d9c53cddab23","resolution":{"observed_at":"2026-08-11T19:01:26.594985Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.599662Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.599662Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:8a1c8c9aaa438a88a1e48b9ce84c7a609a7c85968c6a7f8a1202ba8dfadbdfe9","observation_id":"cf985e39-fb19-4ab7-a40e-9adf86e1b6f4","resolution":{"observed_at":"2026-08-11T19:01:26.599662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.604336Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.604336Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b3fd4a29fa6403ba7036262d7445a3e7b847d0844e5f5ddaa0c814a5bb8653e4","observation_id":"a729746f-b54b-42f9-9de4-c364caf95ee6","resolution":{"observed_at":"2026-08-11T19:01:26.604336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.609111Z","title":"Dast: Data-free substitute training for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.609111Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:edf35b8d6ead7989951752d89a143e83e54304c589ef10d1077c4172ed3a1ae1","observation_id":"8fd15976-83e1-44e7-8cca-89f9f4c28eaf","resolution":{"observed_at":"2026-08-11T19:01:26.609111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.614048Z","title":"Square attack: a query-efficient black-box adversarial attack via random search,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.614048Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:de2525e5bd026d29cb332fa54430d9eeaee21fa342b8d541e6c7806fd66ecd7b","observation_id":"5bfef3c4-b990-4a69-b541-28c5bc3fe733","resolution":{"observed_at":"2026-08-11T19:01:26.614048Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.619010Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.619010Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:692905da5865fcff82e6fd86b35b104277355391e3a92a3b597b94beebfce1f8","observation_id":"63d0aabc-ba1a-44bc-b2b5-9096f7040243","resolution":{"observed_at":"2026-08-11T19:01:26.619010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.623284Z","title":"Sign bits are all you need for black- box attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.623284Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:a75d26d3d951e07947da371cf0b904a784289f99dc0ddd8e8ce17e69b0b36157","observation_id":"a014bb5d-4ffc-492d-8546-a4c91fbe515e","resolution":{"observed_at":"2026-08-11T19:01:26.623284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.627518Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.627518Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:9988685eb84eab3cc4fced3594e1ebd43ccde1356f451ccff1d4d3e200823a7c","observation_id":"b6169289-c489-4733-bdaa-7c3b2d480bbd","resolution":{"observed_at":"2026-08-11T19:01:26.627518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.238347Z","title":"Black-box adversarial at- tacks with limited queries and information,","venue":null,"work_id":"400cb2b3-d856-488f-a43d-41e0e93c1b7c","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.631840Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:cf4bc167c2b2c4d5124fc5202cac9452b23aea41ed0033c46ab5df225625de41","observation_id":"7fd2032e-a8a9-45a3-92c9-53c72846246b","resolution":{"observed_at":"2026-08-11T19:01:28.244362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.223364Z","title":"Adversarial risk and the dangers of evaluating against weak attacks,","venue":null,"work_id":"856ad2df-ab0e-412c-90ea-fbbadbfa2ab4","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.636413Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:ad5684ecb0466c383ebf37ab437da9656f79c33c0f4c86709f9768afe422d763","observation_id":"4e37f5e3-993b-4dd3-b382-75eeb0e75c44","resolution":{"observed_at":"2026-08-11T19:01:28.228319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.207199Z","title":"Adversarial examples for semantic segmentation and object detection,","venue":null,"work_id":"eb8e1820-9aa1-4e98-a7d8-c42d0e619bd0","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.640783Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:7ba7d6ab3920da5ac1ed3cad1d77253862341c78de563a56aeaf842b5a08d5e8","observation_id":"c5f87bfa-37d8-4e5a-8eb3-b4ab8f42d1b8","resolution":{"observed_at":"2026-08-11T19:01:28.212777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.191639Z","title":"Skip connec- tions matter: On the transferability of adversarial examples generated with resnets,","venue":null,"work_id":"985d852e-3fe5-45fd-9716-a01ca2da5b9c","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.645137Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:66a110e877962d26662c1811511d52f2e84e0b8c6b20e567335743f07d1d1373","observation_id":"09d7feb2-4545-4169-af43-b3c02556af94","resolution":{"observed_at":"2026-08-11T19:01:28.196269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.176704Z","title":"Gen- erating transferable adversarial examples against vision transformers,","venue":null,"work_id":"83b5bae6-06c4-4a54-be71-365d3dfd77f4","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.649281Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:c8612f37e11f18f153c11917486af5a3a9ea6b95c0db56b2d2ced115da5834a1","observation_id":"0b09827b-b3be-42bd-8573-2bc0898abc7a","resolution":{"observed_at":"2026-08-11T19:01:28.181466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.162052Z","title":"Diverse generative perturbations on attention space for transferable adversarial attacks,","venue":null,"work_id":"209a238c-079d-45fa-80bb-8fe49baaeee2","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.653415Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:34008c92fa7f4fba7694aaec020e4ac2b2aa19a02c47b75af8964ccaacefa66b","observation_id":"17f6becb-d5c2-4d70-86c3-30317080ff40","resolution":{"observed_at":"2026-08-11T19:01:28.167190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.147404Z","title":"Transferable adversarial attacks on vision transformers with token gradient regularization,","venue":null,"work_id":"fe58d109-37ee-4aaa-90cb-e4c21b5d3a35","year":2023},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.658068Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:07e521850151195104e2c2ea15fdd66b1a96c9f4f3dc1e06bc4126bc5d566aeb","observation_id":"a77e96a1-3ae1-4f65-a8b2-f51a7ed84eaf","resolution":{"observed_at":"2026-08-11T19:01:28.152153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.132674Z","title":"Transferable adversarial attack for both vision transformers and convolutional networks via momentum integrated gradients,","venue":null,"work_id":"153ddd46-615a-471a-8b9e-4b493f031ad4","year":2023},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.662230Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:c90ed58ea7f97fdb436312c71b584cce895cf062c345329bd8fa5e5c91a88cc1","observation_id":"dd9effa3-ce0b-47fc-96bb-949931637901","resolution":{"observed_at":"2026-08-11T19:01:28.137503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.117216Z","title":"Deep unsupervised learning using nonequilibrium thermodynamics,","venue":null,"work_id":"45fcae8f-64cf-4493-a5c8-d4fbe1050dba","year":2015},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.666575Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:7d35b406d1a785b373db387dd88dd6c5936a0f041889e4d1984db572c89cec0a","observation_id":"05c9f60c-39f0-43ea-8eb5-1122d8529c7b","resolution":{"observed_at":"2026-08-11T19:01:28.122093Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.101530Z","title":"Denoising diffusion probabilistic models,","venue":null,"work_id":"2078934f-e1fb-4442-88be-b362b00b117b","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.670708Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b646cd361231eb8f8b1b93018ea955a33fb033d87858f2092da5472de3d16de3","observation_id":"af7b9ac9-ff96-4cdc-aeba-abf07edeaa02","resolution":{"observed_at":"2026-08-11T19:01:28.106710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.081413Z","title":"Generative modeling by estimating gradients of the data distribution,","venue":null,"work_id":"60112358-d555-4750-bced-b8912587e89b","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.675007Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:9ce9ecc97ece3f71cd2666af4b23def7ddd0477b47b172927761e427d7e72c2c","observation_id":"5dfc8248-16b7-4099-9873-ff1959255878","resolution":{"observed_at":"2026-08-11T19:01:28.086615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.064253Z","title":"Rethinking adversarial transferability from a data distribution perspective,","venue":null,"work_id":"0dab3798-9126-48ab-9e47-b75d675f0607","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.679561Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:0d87e7b95b8e7bb5cdf92ad55089ac016bd13b603b053f62e2256235d60fdd42","observation_id":"cd6e8bc2-2827-4583-a2aa-59e745a7cdac","resolution":{"observed_at":"2026-08-11T19:01:28.069574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.047854Z","title":"Advdiffuser: Natural adversarial example synthesis with diffusion models,","venue":null,"work_id":"1b6f9c08-f3ef-490b-aa01-851f8203b456","year":2023},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.684735Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:057e88157308ff8deff73e6faf0aea5f15a86180a5f3474d344def502b51a29c","observation_id":"02770ac3-bcef-4150-bb29-2a01c25f3fd0","resolution":{"observed_at":"2026-08-11T19:01:28.052676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.032282Z","title":"Revisiting graph adversarial attack and defense from a data distribution perspective,","venue":null,"work_id":"2a1c57cd-3574-4489-a3bc-effd460da173","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.689092Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:d5335ddc71f10d600e9d00f2074eb2165cc7fecd9012d589b3d474c98136280e","observation_id":"d8daaa0b-6f61-42ad-b10e-4573d408a6c3","resolution":{"observed_at":"2026-08-11T19:01:28.037390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.017313Z","title":"Robust evaluation of diffusion-based adversarial purification,","venue":null,"work_id":"836955ec-d115-40cd-a71f-9afbf021dd30","year":2023},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.693652Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:aa9f6c651967816fd9769b25ec3afdd4e1f0ae0b98c12db6d9d1f47933d6c9d1","observation_id":"d99a08e7-d0ac-4c09-b3c3-08b9539482b1","resolution":{"observed_at":"2026-08-11T19:01:28.022218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:28.002829Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":"195ef97f-4acd-4f26-acaf-99a53329eb76","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.697842Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b1ffe1b6c7517003489f1d0019d5509397b1fac303cd64203a6412be4fd61c6a","observation_id":"ffd7a169-c0e3-4279-8340-61f9b24209da","resolution":{"observed_at":"2026-08-11T19:01:28.007477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.14969","last_updated":"2022-06-29T02:42:05Z","snapshot_observed_at":"2026-08-13T15:34:13.869232Z","submitted_at":"2022-05-30T10:11:15Z","title":"Guided Diffusion Model for Adversarial Purification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.14969","snapshot_observed_at":"2026-08-11T19:01:26.702052Z","title":"Guided diffusion model for adversarial purification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.702052Z"},"links":{"cited_paper":"/paper/2205.14969","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:48fd4abf1ef9156268d2f595bf284b2bc6247bd8e97cfced23f922faa5c024bd","observation_id":"85180841-b7cd-4a4c-83c8-8b6c7def1f34","resolution":{"observed_at":"2026-08-11T19:01:26.702052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.988239Z","title":"Grad-cam: Visual explanations from deep networks via 11 gradient-based localization,","venue":null,"work_id":"0a3ee59c-154a-4e83-9600-c2e292991432","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.706972Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:ac6fc71f4f2571d666df52286a53e687a4e282aeeb177a472a68645e04733bb6","observation_id":"906afce9-ed55-4bbc-bcb2-ad2e2b34c602","resolution":{"observed_at":"2026-08-11T19:01:27.992987Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.711556Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.711556Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:36901f067076830bd067c88443bb8c54b22bd72c402fc4ce7280d1aa26032981","observation_id":"81d8e996-a2ee-42be-9bb7-e6a8b030d792","resolution":{"observed_at":"2026-08-11T19:01:26.711556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.964185Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"db697483-86fa-4cb0-a2d2-b37b7497bd35","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.716205Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:eb2e3dd6fcd267e0d9fd700df9e196f656bae7a701a24696cddc5c3d4dc4af9e","observation_id":"ec32aad4-c411-4d6b-a48c-8a9acd4725db","resolution":{"observed_at":"2026-08-11T19:01:27.968845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.948848Z","title":"Impact of adversarial examples on deep learning models for biomedical image segmentation,","venue":null,"work_id":"44d4cd0d-612c-4bc9-bb81-9a616360d3ee","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.720592Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:38b15bb3ee348f1c2620c02399df0c892cc633cfe8d13f41132baa408e9327e9","observation_id":"fb38a8c6-ad04-40d4-8334-d2be1978ddcf","resolution":{"observed_at":"2026-08-11T19:01:27.953800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.932917Z","title":"Fashion-guided adversarial attack on person segmentation,","venue":null,"work_id":"7f76c56d-dce3-411d-b071-586685c3241c","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.725199Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:53f15a3eb0cafef1eff1ef21d051a4d7f64e51ee6b53cda24b9b24f8d59a573a","observation_id":"d60e86ca-e173-4429-a433-8b6ed9e7d55f","resolution":{"observed_at":"2026-08-11T19:01:27.937753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.916470Z","title":"Universal adversarial perturbations against semantic image segmenta- tion,","venue":null,"work_id":"21c0bb80-a780-43ad-9fa6-f628b51fd4ed","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.729642Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:02006de4cecdfb683df1d97d83967c0da110f162b5d48c39553c03f1fe63d825","observation_id":"d890328a-9eb8-4479-8f71-a8f36dd164ba","resolution":{"observed_at":"2026-08-11T19:01:27.921784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.900806Z","title":"Data-free universal adversarial perturbation and black-box attack,","venue":null,"work_id":"3301c4df-40be-4c38-bccc-e581338ec1cc","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.733959Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:cf64b2517c30eef32753f066b394095b23a417df00f60f8225e1a4ec0c446efc","observation_id":"7d981086-e283-4be4-8dfb-98cda3d52bfd","resolution":{"observed_at":"2026-08-11T19:01:27.905755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.886452Z","title":"Query-based black-box attack against medical image segmentation model,","venue":null,"work_id":"9a65a518-5fb3-4489-b52d-2190efce082e","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.738191Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:71caae2610f8ef9b50ddbbd46ceabe4d468b36b138a17a4ac10504759d882518","observation_id":"caad3714-23b0-4cd3-911d-5fd1052712f9","resolution":{"observed_at":"2026-08-11T19:01:27.891096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.871690Z","title":"Surfree: a fast surrogate- free black-box attack,","venue":null,"work_id":"71f15686-c5f7-4eb3-a9ac-ff1ce766983b","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.742769Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:382dcf7df916d2e4ca72f04b10813d061b4dccdf736cfb0aac0b8b6bb2dae1ee","observation_id":"e1a7dcb7-e7da-4660-a157-ec5532daa269","resolution":{"observed_at":"2026-08-11T19:01:27.876461Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.856481Z","title":"Simulating unknown target models for query-efficient black-box attacks,","venue":null,"work_id":"ca769386-eeb4-4429-8e07-74e0dbc462c8","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.747656Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:995b8e0ef02b8eacfbc2a4d397eb8dccd381d529fa50801f98e1cac134e8229a","observation_id":"2a4c5f08-e29e-428b-a73e-4c216d323cfd","resolution":{"observed_at":"2026-08-11T19:01:27.861280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.839761Z","title":"Diversity can be transferred: Output diversification for white-and black-box attacks,","venue":null,"work_id":"270f26de-a327-4514-959e-7cc680544ba8","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.752643Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:1ce7be19377f3a11fa9ac09a187c58fb98d12727b5e9e1c8f2ec166ea062fd30","observation_id":"b06b975f-7893-4dcb-9b95-1e4f2c1c9f2e","resolution":{"observed_at":"2026-08-11T19:01:27.845613Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.823707Z","title":"Geoda: a geometric framework for black-box adversarial attacks,","venue":null,"work_id":"a608354b-a987-4445-b10a-de8269463211","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.757160Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:e6376facd61d244a09553f2f271c7c8d3c45f65d469da21f4340164707086d1b","observation_id":"f129f5d5-8f42-4460-a153-9bdf19183adc","resolution":{"observed_at":"2026-08-11T19:01:27.829571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.806508Z","title":"Boosting black-box attack with partially transferred conditional adversarial distribution,","venue":null,"work_id":"3e161eb3-a88a-4010-989e-df20ca6f6c37","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.762006Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:70e54300b2165dddc03ee65c8549f9935ad74d4e898f609a0dd60d6e1f27a1fa","observation_id":"10671a85-89d2-4488-86d6-aa2b92621920","resolution":{"observed_at":"2026-08-11T19:01:27.812417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.790976Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":"6f74e865-b7c9-43c6-b3a7-bff24a3e0d1f","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.766230Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:650eece2bb8549029625afc48b88360c52fdb230720bcc74d8819db85115fa15","observation_id":"047bd209-0de2-4945-96df-48869570969a","resolution":{"observed_at":"2026-08-11T19:01:27.796753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.776118Z","title":"Parallel rectangle flip attack: A query-based black-box attack against object detection,","venue":null,"work_id":"91e03edf-57b2-4d0d-9513-23472bb696fa","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.770577Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:819e7f790756d10c4c95b93417766bb2e9bb585259bd1e30fb184a69facfe8af","observation_id":"e92837dd-6aec-4dc4-bf20-3ac48e32977a","resolution":{"observed_at":"2026-08-11T19:01:27.780914Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.761407Z","title":"Boost- ing the transferability of adversarial attacks with reverse adversarial perturbation,","venue":null,"work_id":"63e02d8d-0ecf-4f51-a416-d254aeee5965","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.775599Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:6e5f28dc26d0af4b4a8176936d879e193640e586affc9ea5bc37cc0b223dc8bd","observation_id":"e74ecff1-95d8-47e9-b4b5-bc4710b7b680","resolution":{"observed_at":"2026-08-11T19:01:27.766394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.746041Z","title":"Frequency domain model augmentation for adversarial attack,","venue":null,"work_id":"f502692b-1654-4625-b3b6-335143e9d888","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.780069Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:e60e1e2c71154cad3479fdea8c1c7529a196c6257e7dd62310fa5d329303f1d4","observation_id":"b91394f2-8b95-43dd-9ddb-48aa394a7781","resolution":{"observed_at":"2026-08-11T19:01:27.750919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.730696Z","title":"Transferable adversarial perturbations,","venue":null,"work_id":"33448073-aef6-4652-ab68-50cad64ab5cb","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.784423Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:57d6054381114965b99a20c569e7294d4ac2ccbc44be63675f8bc2569f22ba47","observation_id":"dc6a18d6-07d9-4c3c-932a-383d1f777853","resolution":{"observed_at":"2026-08-11T19:01:27.735599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.715946Z","title":"Fda: Feature disruptive attack,","venue":null,"work_id":"6ddff856-4498-4f72-aec5-feea7adc9ce1","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.788836Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b04e6e15ff051ca07e9040edc302ac280f8d6a19b0c610612728a3d5a38e4ff9","observation_id":"c3be5989-285c-4703-b162-57b90c0f80b2","resolution":{"observed_at":"2026-08-11T19:01:27.720612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.701143Z","title":"Feature importance-aware transferable adversarial attacks,","venue":null,"work_id":"16a98424-b7c5-473c-a7d5-2887565909b7","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.793244Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:11899f5c7dd02b7741ffd7a23c38c1068d7ec83bf48fd67d6b615bbefeecb050","observation_id":"3b747e99-b03f-4841-9ccb-ac918779e6f5","resolution":{"observed_at":"2026-08-11T19:01:27.705653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.685414Z","title":"Boosting the transferability of adversarial samples via attention,","venue":null,"work_id":"e2ef1e49-1a61-418b-aa00-f9d66686c508","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.797666Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:3635b81c33a6a35f3701c148a12a8e8d734472e824da07cfdae1ed9c287e8e54","observation_id":"ded3ae18-6e85-4339-b7ad-45ecdc52a780","resolution":{"observed_at":"2026-08-11T19:01:27.691231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.669426Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":"a8f123c8-1aa8-4878-bbda-bc10d20e628e","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.802304Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:1688f37c88b18bfb0c5bcc77db41dfa22ad7d80989f19290d6798090e334d009","observation_id":"c8d23e42-bd5b-4527-b45c-cb05f05063ea","resolution":{"observed_at":"2026-08-11T19:01:27.674648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.654900Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":"71c7a399-aa34-4062-8635-9490350f40d1","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.806455Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:cc6d6717ee94927569811e2d2ab3fef14dfe2566543f7df7be731b4882247af8","observation_id":"36766b4d-c468-4dfa-9df2-17deb8336341","resolution":{"observed_at":"2026-08-11T19:01:27.659772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.639144Z","title":"Stochastic variance reduced ensemble adversarial attack for boosting the adver- sarial transferability,","venue":null,"work_id":"cf263422-0701-4ddb-b8fe-ffb26876cd55","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.810737Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:8bc3b21e16a51fc40070f05e99df8dd0207bda7512d80e47312852a759a7097f","observation_id":"a2d88488-4c3e-4e66-b8e1-66c0eb65bc7e","resolution":{"observed_at":"2026-08-11T19:01:27.644887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.624216Z","title":"Toward understanding and boosting adversarial trans- ferability from a distribution perspective,","venue":null,"work_id":"b9e80d91-9297-4fa7-97ba-f122b13df778","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.815443Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:fab8c6fef017f2b0aaf06670f5d99d056cd42a27e04ca9e62ee63f6c1c1be36d","observation_id":"ba8df23d-4934-44ca-85d2-febe4f2042c4","resolution":{"observed_at":"2026-08-11T19:01:27.629063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.609434Z","title":"Admix: Enhancing the transfer- ability of adversarial attacks,","venue":null,"work_id":"029fd317-9360-4007-b0bd-78a1c74099ff","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.819673Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:7db7553f322a45d0bef4096b6c512dcdd6565dea38403a73ef5507d1e3cd4cca","observation_id":"9f719f52-03db-4f96-b9a2-20f6b38e268e","resolution":{"observed_at":"2026-08-11T19:01:27.614231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.594083Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":"4de4ea23-8331-46b3-aff8-2a9025d2f965","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.823858Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:c1ac06469709d789acc2ff3cca30c726559c6bab40fc7079186db0385591b935","observation_id":"3c986c88-bacd-482f-94e7-a5160125da98","resolution":{"observed_at":"2026-08-11T19:01:27.599130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.578744Z","title":"Improving the transferability of adversarial samples with adversarial transformations,","venue":null,"work_id":"c9e1bd67-23c7-41c4-b5a9-b2bb15702be7","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.828201Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:8cf3ba6e71598d90deba557cfb4a8a10becd750662315046942b97e1cf0855f9","observation_id":"8c146337-8534-4da4-99c4-ea05d12ed033","resolution":{"observed_at":"2026-08-11T19:01:27.583517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.561866Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability,","venue":null,"work_id":"400a6553-75fe-433d-a270-f031ebc85180","year":2024},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.832901Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:16f453d74cc71cb3ad897d1a4b230d32e24a910a98bc1aafcfa1d0982fda318a","observation_id":"0625bc95-e130-497e-9970-6bcf0029324f","resolution":{"observed_at":"2026-08-11T19:01:27.567519Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.08192","last_updated":"2023-11-30T14:40:54Z","snapshot_observed_at":"2026-08-13T11:43:02.108040Z","submitted_at":"2023-05-14T16:02:36Z","title":"Diffusion Models for Imperceptible and Transferable Adversarial Attack","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.08192","snapshot_observed_at":"2026-08-11T19:01:26.837294Z","title":"Diffusion models for imperceptible and transferable adversarial attack,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.837294Z"},"links":{"cited_paper":"/paper/2305.08192","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:6ed1d88975d009535e287434fe2022752ece39f16869498484e56d9c70c9c29a","observation_id":"b8ce2616-bd93-44ee-9af6-93252da9db0f","resolution":{"observed_at":"2026-08-11T19:01:26.837294Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.544992Z","title":"Classifier-free diffusion guidance,","venue":null,"work_id":"40eb49e0-6b1e-489e-a4d6-26aadebcb36e","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.842112Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:6a538e6d6020d6ebe669f17b5a039fea93e661ed1d331fd26cfb24a899d38753","observation_id":"6b5057aa-ebcf-42ac-b8c0-3d182b00920f","resolution":{"observed_at":"2026-08-11T19:01:27.550615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.529364Z","title":"Auto-encoding variational bayes,","venue":null,"work_id":"cb63cb5c-64dc-4696-a605-7362ee53dd63","year":2014},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.846678Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:f778083b671f9f06d4828403902589162700a5c2862d525d91c8063851f63b89","observation_id":"38c2adc0-6ce1-4a80-8ccb-31808fa819f7","resolution":{"observed_at":"2026-08-11T19:01:27.534194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.514382Z","title":"Variational inference with normalizing flows,","venue":null,"work_id":"4e3fad8b-c740-45a0-b27c-b446cc1b2c1e","year":2015},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.851990Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:ebc2d8e2a2524867d595799c2cd31b975c53ba03d83f05cab0fa6e7e95edbb0b","observation_id":"273176bf-d445-414e-b3c1-beff570f974a","resolution":{"observed_at":"2026-08-11T19:01:27.519257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-08-11T15:38:14.931716Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-08-11T19:01:26.856514Z","title":"Denoising diffusion implicit models,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.856514Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b1588699031c731e731af460ba40b5b493592690fe98b1c0cbfbe03c7a28315c","observation_id":"0cd274dc-5873-4298-9ebb-daf8247f38a3","resolution":{"observed_at":"2026-08-11T19:01:26.856514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.498387Z","title":"Camouflaged object detection,","venue":null,"work_id":"7f2aee6b-9bd1-45e2-bb00-4523c90b8e9b","year":2020},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.861209Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:8a61fdadb494a80fcaadc74e434e855972550447c7d02ad82b92deb6282e3c89","observation_id":"eef3de05-6dc8-437b-94c0-2ca25a555a30","resolution":{"observed_at":"2026-08-11T19:01:27.503280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.480763Z","title":"Simultaneously localize, segment and rank the camouflaged objects,","venue":null,"work_id":"10d08bc8-39cd-4321-a2cc-0bf468b6365f","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.866391Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:5936fb7c7ba1401590360acfea6dec3aa71b5cd1f3403d8e13ba92a904cd2b1a","observation_id":"cd065586-5e4f-4387-aca1-78790a7694ce","resolution":{"observed_at":"2026-08-11T19:01:27.486392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.870802Z","title":"The pascal visual object classes (voc) challenge,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.870802Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:658fb43f0d380a01a64cb7b4691d69c96b646f6008eed02acc767b3a5d44910d","observation_id":"cc0cc517-1de6-4877-af7a-bff5fae4a526","resolution":{"observed_at":"2026-08-11T19:01:26.870802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.452211Z","title":"Vision transformers for dense prediction,","venue":null,"work_id":"32b6c43a-c35b-40da-bedf-e05456ae6f49","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.875309Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:2d84e1a11c99af24484a904bb827587ce9676ccb261375b508e14493e370df5f","observation_id":"4d6bf4b8-376c-446c-a051-7b3376dbd999","resolution":{"observed_at":"2026-08-11T19:01:27.457208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:26.879945Z","title":"Pvt v2: Improved baselines with pyramid vision transformer,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.879945Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:4bf8f5d964be0be0015d65c00c2018cf128ac9ff317649f427680c2161615f22","observation_id":"f3151ea2-9bac-43ab-a0b0-d3ecc3ad7ae2","resolution":{"observed_at":"2026-08-11T19:01:26.879945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.422325Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"8e02737b-ed98-429b-aae5-300e9d64ffd9","year":2016},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.885047Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:4939a48cd3d0a1a42ed9c79979582caba325bb65e96ca3b389e519d7bb93b1d6","observation_id":"cc6ea28f-8763-4279-98fd-c9ea64253200","resolution":{"observed_at":"2026-08-11T19:01:27.427972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.407068Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows,","venue":null,"work_id":"436674a9-ef6c-4930-b4fa-3cc3ff35e1ac","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.889734Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:5a834d6cc50598ca06373e3c9bd5f11dbd9d289d6ac116f4c1ec5db2bf4c68d1","observation_id":"2b5c4ff1-1abd-4e76-b853-500f355789d0","resolution":{"observed_at":"2026-08-11T19:01:27.412176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.390693Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"957b25b5-0eab-4509-b857-5bad16597f88","year":2015},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.894163Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:0077a3e1aad1ed053ee0976fd7fbd679d5e28ced75ab75b4974cb94ceac3da68","observation_id":"72837b38-c585-48b1-9a59-36d2a604b75f","resolution":{"observed_at":"2026-08-11T19:01:27.396532Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.10127","last_updated":"2022-12-30T12:12:38Z","snapshot_observed_at":"2026-08-13T19:36:45.096291Z","submitted_at":"2021-04-20T17:12:51Z","title":"Generative Transformer for Accurate and Reliable Salient Object Detection","version":5},"cited_work":{"arxiv_id":"2104.10127","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.10127","snapshot_observed_at":"2026-08-11T19:01:27.068384Z","title":"Generative Transformer for Accurate and Reliable Salient Object Detection","venue":"cs.CV","work_id":"4fbd99a0-8271-49b3-897a-292c8d101299","year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.898572Z"},"links":{"cited_paper":"/paper/2104.10127","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:78da90432d6fdee9512863a46fdf5e13c1942eee150520ad99ae417c8db26b1a","observation_id":"82202fd0-3aa8-4320-a140-eb95f5efeb57","resolution":{"observed_at":"2026-08-11T19:01:27.075672Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.372884Z","title":"Encoder- decoder with atrous separable convolution for semantic image segmen- tation,","venue":null,"work_id":"5423ede2-969d-41e2-b904-8dbb373e25da","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.903440Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:c09a11735beafda4ced03312ea8a69fbe653ea760d1e8cdc85a7de94a9b22d64","observation_id":"3c7f8533-a193-447f-8412-91d65c81e96f","resolution":{"observed_at":"2026-08-11T19:01:27.378338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.04861","last_updated":"2017-04-17T03:57:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-04-17T03:57:34Z","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.04861","snapshot_observed_at":"2026-08-11T19:01:26.907749Z","title":"Mobilenets: Efficient convo- lutional neural networks for mobile vision applications,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.907749Z"},"links":{"cited_paper":"/paper/1704.04861","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:760787dee223b1d78d4a5a602327c2bb70b4f5858cbafc2606c9a7ad9e5f2f65","observation_id":"7e19158a-2e79-4438-8b22-651b33cc6ebd","resolution":{"observed_at":"2026-08-11T19:01:26.907749Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.356782Z","title":"Pyramid scene parsing network,","venue":null,"work_id":"af5b31fd-71b3-43a4-9dff-c3330c1efe6c","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.912473Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:b0ccc14a4fe54e3942728a9729ab6e4ab7aa333d9bf3a32d744084fb02de8c59","observation_id":"fa73ccc1-9eea-4d94-af7f-4434ae1de5c0","resolution":{"observed_at":"2026-08-11T19:01:27.362058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.341095Z","title":"Fully convolutional networks for semantic segmentation,","venue":null,"work_id":"f9050743-ff28-4ef2-9cba-ed58f12cdcc2","year":2015},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.916741Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:c21031cc003dffbd06a20c7ed8d83c80c1144941cdc489fa3e6e07527c7b3a39","observation_id":"dc56803e-c63d-4780-8ca4-564ea6a027fa","resolution":{"observed_at":"2026-08-11T19:01:27.346225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.325637Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"168ba5f8-8072-4dc2-bea2-6344f6e8ac07","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.921128Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:e9546c57d4b05872fb0532be05336712ce938109e831c7c8506e5a8137cb50f8","observation_id":"6d409f21-726e-45c3-9ae5-45bdac09558d","resolution":{"observed_at":"2026-08-11T19:01:27.330342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.309751Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"1a27f37a-fc89-42c8-b890-211a36e58ab0","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.926295Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:2b8614aaed8b2bb04bdb04b0e59a92b2ab4c2c9ec9709fc971de270fe299b2c7","observation_id":"86d86bce-c03c-470c-8400-3ae9004f0980","resolution":{"observed_at":"2026-08-11T19:01:27.315430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.293374Z","title":"Enhancing adversarial example transferability with an intermediate level attack,","venue":null,"work_id":"6b1e87ee-60ec-48c7-b661-395a86962d39","year":2019},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.930476Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:a736db545ff86b592058210dfdcd4ba8dbd3f2e3375623a45a2be1721ac0f8f6","observation_id":"1336eeea-86bb-4f89-9ee1-3e7d0510e873","resolution":{"observed_at":"2026-08-11T19:01:27.299552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.277838Z","title":"Improving adversarial transferability via neuron attribution-based attacks,","venue":null,"work_id":"364cc73e-1d90-46d0-a3db-18b82fcbfae9","year":2022},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.934696Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:78c61b801750fc61203a9b238084ccbc23e3a2429b15988ce7b33226d95d7688","observation_id":"7dbfc57b-cb71-430c-ab5e-9e3d09de1ff8","resolution":{"observed_at":"2026-08-11T19:01:27.283161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.262675Z","title":"Enhanced-alignment measure for binary foreground map evaluation,","venue":null,"work_id":"0fbd38be-7dae-41b9-8085-d570b33de39b","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.938784Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:580b64804ed3a479299736ee4f372d77099ba1955051630ce936b0edf15da9da","observation_id":"91662e94-c0e0-419b-834d-01ff50999721","resolution":{"observed_at":"2026-08-11T19:01:27.267365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.247251Z","title":"Structure-measure: A new way to evaluate foreground maps,","venue":null,"work_id":"20f60618-a25e-4604-9817-d036ee7781ae","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.942910Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:3eb4ab803fb7cadd437b7cd90b45b4a39185c1f2cd3d96f2f1023efaaa54447b","observation_id":"7cc15fa6-1433-4c3f-8b06-f144c911e604","resolution":{"observed_at":"2026-08-11T19:01:27.252226Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.11368","last_updated":"2021-11-22T17:26:21Z","snapshot_observed_at":"2026-08-13T18:16:35.436100Z","submitted_at":"2021-11-22T17:26:21Z","title":"Adversarial Examples on Segmentation Models Can be Easy to Transfer","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.11368","snapshot_observed_at":"2026-08-11T19:01:26.947135Z","title":"Adversarial examples on segmen- tation models can be easy to transfer,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.947135Z"},"links":{"cited_paper":"/paper/2111.11368","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:3a8e37781547b32b1fddbf6ce60610e125f220ce099fb36df6c948946f4ce6e8","observation_id":"72a71ebe-0441-43b4-8008-ad8add7dc3a5","resolution":{"observed_at":"2026-08-11T19:01:26.947135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.229866Z","title":"Prior convictions: Black-box adversarial attacks with bandits and priors,","venue":null,"work_id":"03b29200-ee43-4466-b78c-4989ae23b131","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.951748Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:f9e46bd81f83324ed43f1e3218727522ec260c6d6dbfa26e50f5012ae9267c1a","observation_id":"7a0e08ad-1d7f-4c7c-8bab-e32820e69eba","resolution":{"observed_at":"2026-08-11T19:01:27.237092Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-11T19:01:26.956059Z","title":"Ensemble adversarial training: Attacks and defenses,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.956059Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:35222c752a7483565a3d276d9ba441e7b47e25e0e2df00aed9a81a49dc3ce8a4","observation_id":"452cdd27-0bcf-44ca-b493-4cff1687058a","resolution":{"observed_at":"2026-08-11T19:01:26.956059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.212829Z","title":"Learning to detect salient objects with image-level supervision,","venue":null,"work_id":"7b2a722d-db9b-40a7-932e-d9fba9e0e9d6","year":2017},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.960769Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:bc86f10ec97bfa31267065bc2fbc46f0c83b0bfc2c2a34e0dbe91e81892d6fa0","observation_id":"5188ed90-d0fa-42fe-853a-5b8a81c63a2e","resolution":{"observed_at":"2026-08-11T19:01:27.218139Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.195238Z","title":"Design and perceptual validation of per- formance measures for salient object segmentation,","venue":null,"work_id":"600e1e8f-681d-429e-bf1d-b59ae255947a","year":2010},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.965238Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:9760fa6c42944b8b0400fef8189a1a6d8cb5bbce3f34be136d31e84e33d1306a","observation_id":"a3b2c955-f6f7-4ee4-939b-0ce4ea602c2e","resolution":{"observed_at":"2026-08-11T19:01:27.200471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.178132Z","title":"Saliency detection via graph-based manifold ranking,","venue":null,"work_id":"4cee9a97-1e5f-4662-b727-9c49b5abb317","year":2013},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.969509Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:2b24249177317ff87d7430d4cafd72acf90a67ffa7f5666f70d4d93facc74ceb","observation_id":"c1c0e4cc-2fd7-49fd-9a8c-18ab34918721","resolution":{"observed_at":"2026-08-11T19:01:27.183729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.161710Z","title":"Hierarchical saliency detection,","venue":null,"work_id":"64032cb3-88a7-4b43-a14e-614f67921f43","year":2013},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.974041Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:51b2ecb5614107386d9efdfd0f1b8bffc5c14323414840d55c76c5a7d1141d72","observation_id":"3bd380fe-9fb2-4024-b431-db41b13d8243","resolution":{"observed_at":"2026-08-11T19:01:27.166796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.146512Z","title":"The secrets of salient object segmentation,","venue":null,"work_id":"ebbfcbe9-7400-4bcf-ab3a-20916f46e422","year":2014},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.978510Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:a375650bfc215cd0d11bdac986d532f5c7a1d91802443483e935fda95153143b","observation_id":"947e175a-286d-495d-a1aa-9f8a6224ba6e","resolution":{"observed_at":"2026-08-11T19:01:27.151487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T19:01:27.131356Z","title":"Salient objects in clutter: Bringing salient object detection to the foreground,","venue":null,"work_id":"262427ca-8b18-46bf-8bc1-2e78f5c9a722","year":2018},"citing_paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-11T19:01:26.982853Z"},"links":{"citing_paper":"/paper/2412.07274"},"observation_digest":"sha256:13ca1f034c4e6f6c97a05dd18de0128a905f0d2fb19536a90bb59a587037f7e5","observation_id":"c5047211-997f-4d0e-bf2a-eb0edca870f1","resolution":{"observed_at":"2026-08-11T19:01:27.136335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.07274","last_updated":"2024-12-10T08:02:27Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-14T16:32:56.423402Z","submitted_at":"2024-12-10T08:02:27Z","title":"A Generative Victim Model for Segmentation"},"reference_resolution":{"displayed":89,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":1,"verified_fuzzy":69},"total_outbound_references":89},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 89 of 89 outbound references and 0 inbound Pith citation observations for arXiv:2412.07274."}