{"as_of":"2026-08-11T13:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d754ee8caa568bf109c7fbca7a15b4d69e35e895932406bf917fa0f2c8841a4c","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:18:18.177963Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.20768/citation-record","integrity":"/paper/2412.20768/integrity","json":"/paper/2412.20768/citation-record.json","paper":"/paper/2412.20768"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.919945Z","title":"Deepfacerecognition: A survey","venue":null,"work_id":"7797517b-39d9-4ce7-81aa-172aa9bf5447","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.911180Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:4878b7f3cd1121c1325659bf46aa6f5732eb5e8a0029aff67385b7f44a2e5d9c","observation_id":"578aba0c-5e0d-49a3-a7df-8535956be6ee","resolution":{"observed_at":"2026-08-10T23:18:18.925069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.906533Z","title":"Entangled watermarks as a defense against model extraction","venue":null,"work_id":"33d17e59-abe6-4fbd-b219-771837ce8382","year":1937},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.915885Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:f9174d7e2d9b22f5573f5bb31b454753b3a0948551a96aa5fb256e966ad7d4ec","observation_id":"bf31b087-2975-4b31-a694-2324a9d6991f","resolution":{"observed_at":"2026-08-10T23:18:18.911156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.894908Z","title":"Sensitive-sample fingerprinting of deep neural net- works","venue":null,"work_id":"7291ad71-0eba-41b5-9fc4-58e64aa9f288","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.920080Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:6cdf68bffcca5542b41632617098d66e70e0e045ad841e0188315e71e5b1ca72","observation_id":"a6927a0f-2d82-4b24-b7b5-d21eca3fe5b2","resolution":{"observed_at":"2026-08-10T23:18:18.898919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.881825Z","title":"Deep neural network fingerprinting by conferrable adversarial examples","venue":null,"work_id":"5587da24-2c15-4f77-a9de-9af1b7c9a363","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.924765Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:e67d97fe042d37af4f2df330c81558e8b11bbacbf5a29fd2447d07abe58358d9","observation_id":"6dbbae55-9805-4a75-8ef0-67ae03f8fe11","resolution":{"observed_at":"2026-08-10T23:18:18.886307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.869810Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"4383db89-87fd-4109-b1dc-dc58f36c2a8e","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.928792Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:8e14de5021a695b3ff9312c090a564bb90e41734b9915a87f22194fe693ef210","observation_id":"1c194844-9baf-49b7-ad06-1a3c678b5ff7","resolution":{"observed_at":"2026-08-10T23:18:18.873995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:17.932832Z","title":"Importance estimation for neural network pruning","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.932832Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:4313f4b39099eea1a34b3e6968eee62ee649b1f1a8252cf5c2824d1accfa48d7","observation_id":"07985b72-9eb2-4cc8-a549-c92d1021ef17","resolution":{"observed_at":"2026-08-10T23:18:17.932832Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.849627Z","title":"Adversarial training for free! In Proc","venue":null,"work_id":"2034a4fd-c9e8-439a-aef0-5639588d11a5","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.937276Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:5555b3861d02da5d150e380e5b9eaf1321485334d5c072c642460c93a15936d0","observation_id":"618978e9-b37b-4ed0-a5d5-6df887b3eff1","resolution":{"observed_at":"2026-08-10T23:18:18.853875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.836970Z","title":"Evaluation-oriented knowledge dis- tillation for deep face recognition","venue":null,"work_id":"5bd951ca-01b4-4fba-b820-98485266fde9","year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.941634Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:c808e7649985a1549fffda8fdaff7707854e20200129693d9169801df3b0e98d","observation_id":"45c0c5e6-4c2e-45dd-b538-36d14e94f176","resolution":{"observed_at":"2026-08-10T23:18:18.842355Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.825494Z","title":"High accuracy and high fidelity extraction of neural net- works","venue":null,"work_id":"f112ed1e-6706-4b21-9a4b-b3acc3c879eb","year":2020},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.947033Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:ca0a2febeea4a544ea79114f63baf7b69408042fc6ad9dc3bf97a5089b812542","observation_id":"2e7b8913-d680-4b99-9e4e-49848063704f","resolution":{"observed_at":"2026-08-10T23:18:18.829614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.813333Z","title":"Knockoff nets: Stealing functionality of black- box models","venue":null,"work_id":"2cefe077-124f-4dd0-96a5-73a0387d533c","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.951412Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:7a4d1a912f30c204a4548966d2e2006295130196935d380ce3af654a22e25361","observation_id":"68ac62c0-10c9-40ee-bbbc-dceee21eff97","resolution":{"observed_at":"2026-08-10T23:18:18.817465Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.801775Z","title":"The karolinska directed emotional faces: a validation study.Cognition and emotion, 22(6):1094–1118, 2008","venue":null,"work_id":"d6f810ab-b4af-457d-8fbd-d06be1311763","year":2008},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.955649Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:872090d7f3a23cd17c715e18d09d08cdefe1797130a3773a194deada2b2c38ed","observation_id":"ecf15a67-4616-4cb5-b6f0-f25ab91258be","resolution":{"observed_at":"2026-08-10T23:18:18.805770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.789544Z","title":"Embedding watermarks into deep neural networks","venue":null,"work_id":"26f54d5b-a11c-4a6c-8fa8-0b8d25fbffb9","year":2017},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.960363Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:a3629c0ce04beae5ec3c80e5a4095ec62f67d150e82dc6c9f6f9359a345f0eba","observation_id":"be0aae8a-2d5c-490d-9242-a9190e0195a6","resolution":{"observed_at":"2026-08-10T23:18:18.794333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.03648","last_updated":"2018-04-10T17:51:28Z","snapshot_observed_at":"2026-08-02T02:39:39.393271Z","submitted_at":"2018-04-10T17:51:28Z","title":"DeepMarks: A Digital Fingerprinting Framework for Deep Neural Networks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.03648","snapshot_observed_at":"2026-08-10T23:18:17.965120Z","title":"Deepmarks: A digital fingerprinting framework for deep neural networks.arXiv preprint arXiv:1804.03648, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.965120Z"},"links":{"cited_paper":"/paper/1804.03648","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:225e65ae308fbd356059d2a9696cc4910801af82e221458272d60e625dfb2c22","observation_id":"e602435e-e4fc-4d2c-9bec-a57f10dc0b01","resolution":{"observed_at":"2026-08-10T23:18:17.965120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.778223Z","title":"Re- thinking deep neural network ownership verification: Embedding passports to defeat ambiguity attacks","venue":null,"work_id":"5a2a280d-bda3-41a2-b004-96ffbc0ea00a","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.969640Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:f976f530e1c58c4d0dfb022da6b9f40aed6e5d389f9046fda5b70f7c4c71f94b","observation_id":"7ce13101-849d-47df-ae0f-8b47c187c754","resolution":{"observed_at":"2026-08-10T23:18:18.782325Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.767536Z","title":"Passport-aware normalization for deep model protection","venue":null,"work_id":"c9b979b6-6227-455a-9445-319b6ee153cc","year":2020},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.974447Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:a46a6914a68c63a6738e760a26bc0c88f02db9ae2ae6a0205995fc74cbc15a11","observation_id":"bd1691cb-8e55-457d-a078-e2a32a08e33f","resolution":{"observed_at":"2026-08-10T23:18:18.771426Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.756118Z","title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring","venue":null,"work_id":"1abb5190-e66b-45b9-ac76-12a6d69b0daf","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.981161Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:9def3178456abff37a9ff533d47e6ae34141ee4e7850846d708c08ddce2ae117","observation_id":"3a02054b-f08a-4719-99bc-884dac3ab521","resolution":{"observed_at":"2026-08-10T23:18:18.759952Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.743037Z","title":"Protecting intellectual property of deep neural networks with watermarking","venue":null,"work_id":"7f52e320-3246-49a7-8124-2a9c7f1a8aa5","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.985938Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:26320c5215bc5a7032e80aa2638aa4cf648ae292ed9af351f7a151bcec0eaf83","observation_id":"3e52912a-9583-4bfc-98bc-d58740c65369","resolution":{"observed_at":"2026-08-10T23:18:18.747186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.730347Z","title":"Deepip: Deep neural network intel- lectual property protection with passports.IEEE Transactions on Pattern Analysis and Machine In- telligence, 2021","venue":null,"work_id":"32c61c15-e22b-45ee-b0c7-7c58a287c6a7","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.990336Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:c9305ba089858dc38bd16060ca8bf4d550d2b31c99867e93d699f1b68c2a6eee","observation_id":"021b4b3b-4fa2-4e2b-a500-fb649c79e4a5","resolution":{"observed_at":"2026-08-10T23:18:18.734844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.717970Z","title":"Anti-distillation backdoor attacks: Backdoors can really survive in knowledge distillation","venue":null,"work_id":"7017cf68-8e01-48ab-b87b-8433f0227ad3","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.994763Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:e545fbcf63aa3f97a815cdea45cdb490f090d6d4c4602751414877436471192d","observation_id":"30185c61-8fef-4e58-a07b-84335c9c0081","resolution":{"observed_at":"2026-08-10T23:18:18.722100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.706242Z","title":"Ipguard: Protecting intellectual property of deep neural networks via fingerprinting the classification boundary","venue":null,"work_id":"277c7328-9119-4f80-959e-e4b1e24afe44","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:17.998874Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:ef38e6599ef5637d543c133555346df5b88ffe5c82a873bb62ee01f7fbe93d11","observation_id":"566b1812-18b1-4c11-80ff-d2658b623806","resolution":{"observed_at":"2026-08-10T23:18:18.710071Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.693865Z","title":"Modeldiff: testing-based dnn sim- ilarity comparison for model reuse detection","venue":null,"work_id":"7e4c232b-4d63-4613-91ea-f3f4a323155a","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.003552Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:c33ec157559db648ebc043228e9914ae41ca99fd4e91e1b046ab1a6dadba22c2","observation_id":"7e60c2b8-0d4d-4895-93e5-bc8c739022db","resolution":{"observed_at":"2026-08-10T23:18:18.698189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.08602","last_updated":"2022-05-08T02:27:17Z","snapshot_observed_at":"2026-08-09T22:05:37.481200Z","submitted_at":"2022-02-17T11:29:50Z","title":"Fingerprinting Deep Neural Networks Globally via Universal Adversarial Perturbations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.08602","snapshot_observed_at":"2026-08-10T23:18:18.010434Z","title":"Fingerprinting deep neural networks globally via universal adversar- ial perturbations","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.010434Z"},"links":{"cited_paper":"/paper/2202.08602","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:db2bd224faa7904f6018393551a5c49ed2922f01fb1d6c175e33941fd8fa55df","observation_id":"ebc25582-630c-437d-b12c-31b9bf10960a","resolution":{"observed_at":"2026-08-10T23:18:18.010434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.681359Z","title":"Fingerprinting deep neural networks-a deepfool approach","venue":null,"work_id":"e44ecc08-bb7d-4030-9fdc-f69b95d5367d","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.016142Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:200f8047467dce035b11a7878032d707ec2b05c76b015b3a54fd19fce0901698","observation_id":"f2a953a2-6aa5-4b4f-bf24-bf679897aaa3","resolution":{"observed_at":"2026-08-10T23:18:18.686182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.666327Z","title":"To- wards deep learning models resistant to adversarial attacks","venue":null,"work_id":"72add532-9303-4d14-bdfc-6d9fdd0a00c7","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.023549Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:a36090d2d3ef9f64bd5f1b9b5c73936fc7c9d9aeddfe791da5e58197d3a578c6","observation_id":"bc273046-b412-49f9-9c86-3c536e79902b","resolution":{"observed_at":"2026-08-10T23:18:18.670660Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.652859Z","title":"A survey of transfer learning.Journal of Big data, 3(1):1–40, 2016","venue":null,"work_id":"7f8cb58d-87d2-4a10-8bcc-16980c549066","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.028760Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:2854190dbd355b5655d795fe6fb9321ffa8a4e739e6db58bd8a743f5e7088bd6","observation_id":"419376ab-cef4-427d-830f-94029c57480e","resolution":{"observed_at":"2026-08-10T23:18:18.657785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.641087Z","title":"Are you stealing my model? sample correlation for finger- printing deep neural networks","venue":null,"work_id":"8f173565-d1ee-4759-96e6-26778170e9b3","year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.033214Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:9e93832303b2af8fb15e8d1ea1426fa51ea1de8cf6a46b00c65d58b304d34b4e","observation_id":"b84a6e84-fa3a-48c3-9d7b-d9b9129ffd0b","resolution":{"observed_at":"2026-08-10T23:18:18.645337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.624031Z","title":"Benchmark- ing neural network robustness to common corrup- tions and perturbations","venue":null,"work_id":"4944dcfb-4aa5-4e85-9625-eec29ebe9758","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.037539Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:908fcf6905a24162b30ce4551b3fb97ce306c9226e46db8966a52a99aeca4f5d","observation_id":"0f33025f-7e1e-411f-8a4e-97005990d1f5","resolution":{"observed_at":"2026-08-10T23:18:18.629282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.611872Z","title":"Deepface: Closing the gap to human-level performance in face verification","venue":null,"work_id":"99310a3f-bdf8-45e1-b171-c4e4d6dbf71a","year":2014},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.041876Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:722c3e5e261b9e819fcd7f627e205c18e1c1e2ee5bdaab9fc7e1229a69520f65","observation_id":"64f760a4-5df6-4d15-9618-ab1d6f18224f","resolution":{"observed_at":"2026-08-10T23:18:18.616027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.599814Z","title":"Convolutional neural networks for medical image analysis: Full training or fine tuning?IEEE Transactions on Medical Imaging, 35(5):1299–1312, 2016","venue":null,"work_id":"f06b2223-4b73-4b54-884a-a5eaaa02d3df","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.046121Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:10c66282d6a95a9d22a173bc9b669571d7caf127cce048da66bd626dbb2385be","observation_id":"96168b36-5c40-4e0e-a5ba-080eb2cc9977","resolution":{"observed_at":"2026-08-10T23:18:18.604017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.586050Z","title":"Few-shot backdoor defense using shapley esti- mation","venue":null,"work_id":"cbe98767-2fb6-4b47-b502-e9ff7bbdd55b","year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.050639Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:bac563c974fec8e9198f9ed846deb0a83cac3ef57617eba6ce5da3c6063ca9d5","observation_id":"0487304a-d0f0-4e4f-976f-3e0a0ca96441","resolution":{"observed_at":"2026-08-10T23:18:18.590996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.572217Z","title":"Defending against model stealing via verifying embedded external fea- tures","venue":null,"work_id":"0d05401e-e82f-4d55-a35b-a982f95bad54","year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.055014Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:6e358c1d816655600fad7e5809a68ae54c432f6ebf60b6a686d3bceccc1ae26c","observation_id":"0caa2738-e506-4321-a196-0649acabf757","resolution":{"observed_at":"2026-08-10T23:18:18.577000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.556890Z","title":"Deepfool: a simple and accu- rate method to fool deep neural networks","venue":null,"work_id":"da3f183b-ae3e-44ec-9a9e-e4309d386cca","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.060170Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:f7ee71db04a50de987bfc40844e720de2f83e53ef3336e5c5d8b8931ca7dfaf3","observation_id":"00526310-fd8e-4409-9451-1b545e96d7de","resolution":{"observed_at":"2026-08-10T23:18:18.562435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.544053Z","title":"Universal adver- sarial perturbations","venue":null,"work_id":"6463e401-000a-473e-a641-d90e75189c44","year":2017},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.064879Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:4082d80744a16282e03cee172e9e4834d66cc02b28c9fcbc1219410cd0c79294","observation_id":"9748d7a7-eb78-478f-9b65-14ced1a0bbfd","resolution":{"observed_at":"2026-08-10T23:18:18.548124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.532078Z","title":"Copy, right? a testing framework for copyright protection of deep learning models","venue":null,"work_id":"ad37cd12-5b0c-4b4c-8dd9-b4363f427360","year":2022},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.070440Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:5b02dd89ac714ac19570160a9effb8d4a2ebafb4cbe40025e145d3355dd71a64","observation_id":"6bf14895-bca4-4dc1-82ec-cf8b940de902","resolution":{"observed_at":"2026-08-10T23:18:18.536030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.519788Z","title":"Cloudleak: Large-scale deep learning models stealing through adversarial examples","venue":null,"work_id":"1435ea55-8318-4ead-9c19-0bdc49eae3b3","year":2020},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.074748Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:cfd8a43fecf9c64a43c1da989980c65bbbd1cc1aa1ce81c9b428664f447f5ccf","observation_id":"c9138acd-2572-43ab-9627-676f26ebbe59","resolution":{"observed_at":"2026-08-10T23:18:18.524322Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.504557Z","title":"Surpassing human- level face verification performance on lfw with gaus- sianface","venue":null,"work_id":"0b3d56e5-83d5-4251-9a5a-7e573a1c0764","year":2015},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.078970Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:feebb6d48b1e52b5ff5c2e2a7f32d1ba80e9c6339e5a0d183be1444cd1f881c0","observation_id":"f0283d65-50e3-4283-9864-332fa32a0459","resolution":{"observed_at":"2026-08-10T23:18:18.508909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.492360Z","title":"Discriminant analysis in correlation simi- larity measure space","venue":null,"work_id":"77eedbda-adac-4e56-a81f-6cd83b214849","year":2007},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.082799Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:5eeaa19d6571ae5c4a2ab858742f1990aea9d6a3289cbe770d1779b9dcd3e85d","observation_id":"bf1e6b80-9f8b-429e-9dc5-597d79b28ddf","resolution":{"observed_at":"2026-08-10T23:18:18.496207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.479147Z","title":"Correlation congruence for knowledge distillation","venue":null,"work_id":"e10075f1-7a36-4f9f-be4b-9a91b1ec35b0","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.087646Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:08fc737f5f8e4e68929912a589bfc9c9a8e208911affd946c2a84f9980dc33ed","observation_id":"5db18b2a-5c4a-46a9-93a3-f6d7a71d2732","resolution":{"observed_at":"2026-08-10T23:18:18.484370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.467822Z","title":"Cosine similarity metric learning for face verification","venue":null,"work_id":"12c1fb45-c1df-46a2-bebd-f7c2c87bfc3b","year":2010},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.091758Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:cc9fda1e46c1da062bbd3e9edb216797edfe85de559bc246d537ddf36cc95e89","observation_id":"5088bbbc-3f79-4eea-95fa-0f58efaf3396","resolution":{"observed_at":"2026-08-10T23:18:18.471715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.456227Z","title":"An explicit description of the reproducing kernel hilbert spaces of gaussian rbf kernels.IEEE Transactions on Information Theory , 52(10):4635–4643, 2006","venue":null,"work_id":"7286d4f2-d487-4fcb-9c0a-ce5a3dadb889","year":2006},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.096574Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:43f4946a562f5fe40afb4bcb7bbcb5ce09da8e240781484639423cf8dd4fcb46","observation_id":"d4087ec2-4470-452e-9813-4bb3101825bb","resolution":{"observed_at":"2026-08-10T23:18:18.460533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.444242Z","title":"Scale invariance and noise in natural images","venue":null,"work_id":"8c1d1aea-4ecb-4dd0-8d55-7d16ef74a0ab","year":2009},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.100881Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:b23dcf7a610287ea3f07507fe125d73429da726648505ff9216dbbf7a0525f86","observation_id":"8f590a63-8555-467a-9ac6-ae3158257df9","resolution":{"observed_at":"2026-08-10T23:18:18.448782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.433128Z","title":"On detecting adversarial per- turbations","venue":null,"work_id":"a58c87a6-f86c-46e1-8950-a48c4ad40ed6","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.104698Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:550ee9333446012a9d1ba798c0b13d44c540eb699b901e6f5a15187d48c31bf4","observation_id":"8a410dc3-5fd6-4121-9aaf-a720bbf9cbd1","resolution":{"observed_at":"2026-08-10T23:18:18.436973Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2102.01356","last_updated":"2021-04-21T01:57:53Z","snapshot_observed_at":"2026-08-10T13:57:08.924044Z","submitted_at":"2021-02-02T07:10:22Z","title":"Recent Advances in Adversarial Training for Adversarial Robustness","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.01356","snapshot_observed_at":"2026-08-10T23:18:18.109226Z","title":"Recent advances in adversarial train- ing for adversarial robustness","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.109226Z"},"links":{"cited_paper":"/paper/2102.01356","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:b4ec1b80f9ece99998e7d707054809150842110900feef3f2110d0ae03f48897","observation_id":"7a78bd04-7ff6-4c17-829e-7f0140482777","resolution":{"observed_at":"2026-08-10T23:18:18.109226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.420753Z","title":"Adversarial machine learning at scale","venue":null,"work_id":"eff7d3d8-0037-410a-bef8-15d7b74579d9","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.114220Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:4fafc4cd58edac4027298cc12d9fc7384e66784ae4f2a21073ffd4dc8e544c70","observation_id":"507e883c-e754-4a72-9fd9-123e243a20fb","resolution":{"observed_at":"2026-08-10T23:18:18.424861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.408759Z","title":"Data-free model ex- traction","venue":null,"work_id":"44bdc9a6-9bdc-49c6-87ef-a382fa8bf92c","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.118979Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:b205550ce727628497a67c0a6e34a31ffb86e05b26b117156ea1dcb559f96fe6","observation_id":"682eb422-1b7e-415e-8933-a59172d9bf46","resolution":{"observed_at":"2026-08-10T23:18:18.412812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.395183Z","title":"Knowledge distillation: A survey","venue":null,"work_id":"5f74794a-fe08-49c4-8cd8-6582ef23cf96","year":2021},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.123549Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:2d481e6bd05ad4e2c7663cebb959ac9ee95beb5d0c683aa05e2b50e86ecc98bf","observation_id":"d6109706-a56b-4dbf-81fa-45c3d40c150e","resolution":{"observed_at":"2026-08-10T23:18:18.399216Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-10T22:24:05.831832Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-10T23:18:18.127980Z","title":"Very deep convolutional networks for large-scale image recog- nition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.127980Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:0f7d8eac8937c36d94a73da03fdf5e95c278057c7cb30d34dbf4d48172248818","observation_id":"6dac09a9-2f5a-4a3f-9e15-073a91e13dcf","resolution":{"observed_at":"2026-08-10T23:18:18.127980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.380994Z","title":"Deep residual learning for image recogni- tion","venue":null,"work_id":"1ce3dd9d-f34d-40f5-99bd-386581cd04fa","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.133251Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:598403072694cbe3d1be449e76b0f9c54d12f27588dbc9b4ce051076be7dc6d2","observation_id":"288a023d-9e93-43da-a9f5-77fb761ca346","resolution":{"observed_at":"2026-08-10T23:18:18.386530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.367634Z","title":"Densely connected convo- lutional networks","venue":null,"work_id":"acbc28be-9fd1-4e0a-a63e-27c38420e0b3","year":2017},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.138021Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:91804b2b5f8947e9bed922d00a1f4a438adafe5872799bf3b83d99270c1eb0b6","observation_id":"d74b88a4-0f88-4f6b-8ed2-5106ba64748e","resolution":{"observed_at":"2026-08-10T23:18:18.372343Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.353535Z","title":"Mo- bilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":"7128b046-009c-44cc-8f80-242aed780256","year":2018},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.142751Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:389f3762e704bcc695666c478560a6d487fdb0cd5c3e138ae7f9f35391ae1dc0","observation_id":"1fb37ca8-6eae-465d-9f6d-5cbead838a6b","resolution":{"observed_at":"2026-08-10T23:18:18.358090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.340457Z","title":"Generating adversarial examples by makeup attacks on face recognition","venue":null,"work_id":"f1335735-9136-4fb7-95f8-888a6ca032b1","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.147159Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:69002651db8150bcc16657ea9e891c662798ea50c9aa393a93074ea335ea6abb","observation_id":"5493ffd0-0051-4ed1-967f-02bef9022f81","resolution":{"observed_at":"2026-08-10T23:18:18.345109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1708.06733","last_updated":"2019-03-11T20:45:33Z","snapshot_observed_at":"2026-07-06T05:56:16.413472Z","submitted_at":"2017-08-22T17:31:54Z","title":"BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1708.06733","snapshot_observed_at":"2026-08-10T23:18:18.151496Z","title":"Badnets: Identifying vulnerabilities in the machinelearningmodelsupplychain","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.151496Z"},"links":{"cited_paper":"/paper/1708.06733","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:441f565a41a484ae35eb5a8f82fde1c003fdfe8de5cb9c0a0c782bf361dcaa38","observation_id":"ce16d307-84f2-464e-81f2-2d1d3a8a81d8","resolution":{"observed_at":"2026-08-10T23:18:18.151496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.327691Z","title":"Ms-celeb-1m: A dataset and benchmark for large-scale face recognition","venue":null,"work_id":"45ebac75-76c6-489c-afbd-2f4aca59dbc8","year":2016},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.156187Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:1930fc68b250a18a48e80ae44b7d302e24cd567f54fc8daf17531a9bfb25f62b","observation_id":"ccc94a78-63a3-4765-a5fa-06e0eed1766b","resolution":{"observed_at":"2026-08-10T23:18:18.332013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1411.7923","last_updated":"2014-11-28T16:05:18Z","snapshot_observed_at":"2026-07-06T04:02:01.303133Z","submitted_at":"2014-11-28T16:05:18Z","title":"Learning Face Representation from Scratch","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.7923","snapshot_observed_at":"2026-08-10T23:18:18.160114Z","title":"Learning face representation from scratch.arXiv preprint arXiv:1411.7923, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.160114Z"},"links":{"cited_paper":"/paper/1411.7923","citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:075965ecc7f07ae42504a856c7c6805efc767ab37c8b31dde33556ae71050aee","observation_id":"fd166c1c-1772-40c0-a07f-e6d22d32a17d","resolution":{"observed_at":"2026-08-10T23:18:18.160114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.313817Z","title":"Arcface: Additive angular margin loss for 16 Jiyang Guan1,2 et al","venue":null,"work_id":"75e7b294-e678-463e-94ff-0ce7ecbf8a12","year":2019},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.164544Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:80dbd5d083622793ecaaee691ecc6d6624b67cd9a1dada126d792a2ecfeeadc5","observation_id":"b0cb3849-3451-4fba-adac-c44ca8b2f9b8","resolution":{"observed_at":"2026-08-10T23:18:18.318676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.301809Z","title":"Tiny imagenet visual recog- nition challenge","venue":null,"work_id":"d883eb50-ad47-4100-8a45-ccd5e27e2526","year":2015},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.168811Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:1642e19ee65ba322bcc4691a20ec780ba8b7c490cf641e902700a07610e500af","observation_id":"b579fb27-9d22-4d4b-b5ee-96fe8408c542","resolution":{"observed_at":"2026-08-10T23:18:18.306111Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.172716Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.172716Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:c7e5df45907e4797ec7eddb95a909856a9867fd929e5c3598ceacdd132fef7da","observation_id":"5dec9c38-df45-429e-9f07-02e05053df55","resolution":{"observed_at":"2026-08-10T23:18:18.172716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:18:18.278366Z","title":"The relationship between precision-recall and roc curves","venue":null,"work_id":"23808dac-18f7-452b-8af5-c0a865e8cfc7","year":2006},"citing_paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T23:18:18.177963Z"},"links":{"citing_paper":"/paper/2412.20768"},"observation_digest":"sha256:8df92c7d23bc73bf333c8fc14a2c4c3dd22389d97fb081c5a7adeb8e121e4243","observation_id":"a754842d-f40a-4ed3-b997-179c1a28c23b","resolution":{"observed_at":"2026-08-10T23:18:18.284490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.20768","last_updated":"2024-12-30T07:37:06Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T23:09:25.453306Z","submitted_at":"2024-12-30T07:37:06Z","title":"Sample Correlation for Fingerprinting Deep Face Recognition"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":50},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2412.20768."}