{"as_of":"2026-08-20T08:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:9c809d10dee68169331a3028efdb71f0e6014474dffae6ada0013e7bdc09e3f4","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:14:55.137005Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.20807/citation-record","integrity":"/paper/2412.20807/integrity","json":"/paper/2412.20807/citation-record.json","paper":"/paper/2412.20807"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.050327Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":"b0e5a9a6-be40-48e6-91ae-00ab4d6844af","year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.914591Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:c2b180dcf3bdc2389cb3c4625660fdc9e28ac37b99ee03fcce4b9df5be880bd8","observation_id":"dd989002-f14e-4a20-9e6c-3139de59e17a","resolution":{"observed_at":"2026-08-10T23:14:56.055013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.031388Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":"972bfe54-1a6d-40c8-b482-c7b534ea2df3","year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.919455Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8b1183eebae1dedb54535ef127f8a60fc541b5b44286374385488487105fe7ac","observation_id":"6e0b89c2-37f9-44eb-81e1-96e802ee985e","resolution":{"observed_at":"2026-08-10T23:14:56.036587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.017504Z","title":"Some methods of speeding up the convergence of iteration methods,","venue":null,"work_id":"397494b8-035c-47a7-b16e-d935f2b04301","year":1964},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.925803Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:73f25bbe56e539bcbec13dbd33fef538688f11abbfa34686fd9543944fe89f55","observation_id":"2d552a60-3b8f-4e99-90f3-4fa4f286d588","resolution":{"observed_at":"2026-08-10T23:14:56.022669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.003139Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"687e3718-ccc0-48e0-8994-b8c93e6088e2","year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.935951Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:7c563429e9c6367eda482188ae3d8de5fff9452cecc6b95b84339c04d74cbc1d","observation_id":"5be1b0d4-417f-4ca8-afa2-f2553b6141bd","resolution":{"observed_at":"2026-08-10T23:14:56.008545Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-10T23:14:54.941049Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.941049Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:ec32141f997adf6035c80a83832c4f50fe04ce86dec999147ec39c474aa9da1f","observation_id":"1cf63b37-379c-4702-879c-321f7969dddb","resolution":{"observed_at":"2026-08-10T23:14:54.941049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.985419Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"d24548c3-8c99-4b72-a6b4-74f986f08899","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.947164Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:1b9beedd5a79b92b8d7f1e848440b520be44692ad8478c93f2dcd82a922901c6","observation_id":"ccc826b3-babe-4924-9783-34277b8a7320","resolution":{"observed_at":"2026-08-10T23:14:55.992619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.969887Z","title":"Evading defenses to transferable adversarial examples by translation -invariant attacks,","venue":null,"work_id":"6dfa5b4d-6a0f-40c2-80a4-4bcb25c6374e","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.952719Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:e6baf23a15b9a9ba9b4b4a38233e885895816d991d28fe9c3a93bff61eb9cecd","observation_id":"dc677325-04b3-4de5-b366-82630da5cc4a","resolution":{"observed_at":"2026-08-10T23:14:55.974801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.954034Z","title":"Learning with pseudo- ensembles,","venue":null,"work_id":"a8ed3f67-ca91-434e-9bce-b4a96b1a9228","year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.959824Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:78cee134f3c414b38c68c97f6a300bc46f66e062ac80f32210f7b1bff106772b","observation_id":"abb9b394-cda6-463d-8e4d-1b89655f128e","resolution":{"observed_at":"2026-08-10T23:14:55.959004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.938111Z","title":"Enhancing adversarial example transferability with an intermediate level attack,","venue":null,"work_id":"de16c3f2-cbf7-44b2-92d6-118ed3d9184a","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.966106Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:753fdb168d0478c6cf01288b3ec65c08bd0a62f61fbb6429ac53b73df8a077b2","observation_id":"41de455f-2fda-405c-8d00-95782e4a42b2","resolution":{"observed_at":"2026-08-10T23:14:55.944017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.923602Z","title":"Yet another intermediate -level attack,","venue":null,"work_id":"e03aa4f5-878c-43e9-b02e-ba7332b1f330","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.971465Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:100d968d0b9d5d08c446dd4c48ac75d00fdabd4def79d0551ad831d09249aa7d","observation_id":"ea152028-3db6-4b1c-adf6-adebc17b9181","resolution":{"observed_at":"2026-08-10T23:14:55.928501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.910672Z","title":"Enhancing targeted transferability via feature spa ce fine -tuning,","venue":null,"work_id":"c14dc183-478a-48b8-900b-59cfeea7969e","year":2024},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.975978Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:192536bc5da869e464ab4989f9e18d6410b06d40fd9c3cf623b5134d17fc2d9d","observation_id":"86a4dbb7-42f5-4d22-b548-0bd660b396b1","resolution":{"observed_at":"2026-08-10T23:14:55.915105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05407","last_updated":"2019-02-25T14:18:11Z","snapshot_observed_at":"2026-08-14T19:36:09.254749Z","submitted_at":"2018-03-14T17:09:27Z","title":"Averaging Weights Leads to Wider Optima and Better Generalization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05407","snapshot_observed_at":"2026-08-10T23:14:54.982284Z","title":"Averaging weights leads to wider optima and better generalization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.982284Z"},"links":{"cited_paper":"/paper/1803.05407","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:e07eebe21a4d696c748ebafa3b44aacb81703c2185dea68382188cc94c207e06","observation_id":"939f5856-8acf-4f09-93df-a81ca50372a6","resolution":{"observed_at":"2026-08-10T23:14:54.982284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.897727Z","title":"There are many consistent explanations of unlabeled data: why you should average,","venue":null,"work_id":"9a61e40b-dfbb-4e09-bf8c-9baae76adec6","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.987829Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:50ca2b9f94566501bd7c21005eaeb096ec28fe75bd47638a0297a5bb3b31208d","observation_id":"12e7dcfc-13a2-427a-ba06-bd5f0e340748","resolution":{"observed_at":"2026-08-10T23:14:55.902108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.884118Z","title":"Transferable perturbations of deep feature distributions,","venue":null,"work_id":"2aa6dd2f-1c83-42ae-be2d-2ef1b2c089b9","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.993835Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:ef34310ba9af95fc47df7d6a87a64acbe9b3de5730111c7448c7659d6251d6f5","observation_id":"04704021-b56e-4a5e-a5b2-626ff368edf2","resolution":{"observed_at":"2026-08-10T23:14:55.889082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.649740Z","title":"On generating transferable targeted perturbations,","venue":null,"work_id":"31c1c207-2f27-4331-87fb-2e58212ad1f2","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.999045Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8d5ddad422f0da483e3cc34a5fb784e10173130d1a89ac9b5119dcceca1289e5","observation_id":"449c1a3b-03a6-4667-96ae-d80c268a03ca","resolution":{"observed_at":"2026-08-10T23:14:55.655430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.634396Z","title":"Boosting transferability of targeted adversarial examples via hierarchical generative network,","venue":null,"work_id":"44869205-0ef8-41e2-94a8-127bee1aaa42","year":2022},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.004095Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:29733f298085d8f398c261e240cea4cadb8d8d093ced7fe8357fd3bdf785dcb2","observation_id":"fcc744a2-7a5b-43b6-a006-127519c804cb","resolution":{"observed_at":"2026-08-10T23:14:55.640314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.617918Z","title":"LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations,","venue":null,"work_id":"921446b9-6f13-47bf-aabf-845ac8e781ac","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.009930Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:552c94ed431d5ecace457cb24e6be67002ae8576d66d777761811943ad90a2ea","observation_id":"809ea35c-399b-4ab8-aac6-455dbde8cfee","resolution":{"observed_at":"2026-08-10T23:14:55.623298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.601227Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"0da24e50-d300-48f5-808b-90e7019146f1","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.014380Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:19aa26a8b06c05f0aec34d0eb90ebbf14dd1e6449471f08d83b8f1424c238cfd","observation_id":"557a5223-7ef6-412b-8ac2-79ff8e060bf2","resolution":{"observed_at":"2026-08-10T23:14:55.607189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.580212Z","title":"Towards transferable targeted attack,","venue":null,"work_id":"122a19a9-14fc-451b-a207-eeda07bc1ba6","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.021127Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:7f040992cea8ca1e74953b2383e430079a91142ea236f2c9251e1b02b7d255cd","observation_id":"f4e0c76f-549b-4c88-ae96-79a4a924742f","resolution":{"observed_at":"2026-08-10T23:14:55.589912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.560010Z","title":"On success and simplicity: a second look at transferable targeted attacks,","venue":null,"work_id":"f5d934a8-0755-4810-a865-b6b714294cce","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.026917Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:e086eb03ce715cbd086d72a550078fb2f15d494dcb25e87ffae2a1407b01606c","observation_id":"89b5ca35-3b52-4a2f-824c-fe9064075fe8","resolution":{"observed_at":"2026-08-10T23:14:55.566412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.543301Z","title":"Enhancing targeted transferability via suppressing high-confidence labels,","venue":null,"work_id":"66933c62-8fdc-43ea-b7fe-84dacafd8b9c","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.032377Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:55aad0b3ebe82628597a8ede26acd450acb4e2c8924c970ea8735ab81c8c8f84","observation_id":"dbb2a026-bd13-42b4-ac2b-f83e9e6b9ed3","resolution":{"observed_at":"2026-08-10T23:14:55.548492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.527784Z","title":"Logit margin matters: Improving transferable targeted adversarial attack by logit calibration,","venue":null,"work_id":"c24d0411-8f52-4166-9f8b-3ae710d1c0ea","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.037192Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:aa9a565b3ee7e830ce6dcf40c2a25727be18ac1c9af8cd66643277cfbeb5ac67","observation_id":"b3a8c632-7db7-462f-97bb-34aa459d1d4e","resolution":{"observed_at":"2026-08-10T23:14:55.532969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.509647Z","title":"Enhancing the self -universality for transferable t argeted attacks,","venue":null,"work_id":"d6ee9a06-6e18-4d51-9ab3-1cf03f68c385","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.041616Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:29c68262cf58e5c3ad2bfaba869ee844e12fa21a6f877a245c7175bcbc73724e","observation_id":"af398228-7588-47a0-8237-ad977bb89b3a","resolution":{"observed_at":"2026-08-10T23:14:55.514830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.492313Z","title":"Feature space perturbations yield more transferable adversarial examples","venue":null,"work_id":"997d3587-1789-44ae-951d-c6050206b3ff","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.046641Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:9619f94aca24a8dcd865c626ba21beb15151683ce91dbfb28237ed9cc4ee3636","observation_id":"80e8a0c9-b77e-4a16-8e47-8d78b63453a1","resolution":{"observed_at":"2026-08-10T23:14:55.498371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.478084Z","title":"Introducing competition to boost the transferability of targeted adversarial examples through clean feature mixup,","venue":null,"work_id":"86b8ac17-f853-4a62-b5a0-4a3227e8d6df","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.053087Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:14144cc2a36b33d71c208b7742bc9210bd0d085f0d54b280a600d5296525c9fa","observation_id":"bbe4c35b-a2d6-40e0-809c-36c136d229a8","resolution":{"observed_at":"2026-08-10T23:14:55.482875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1411.1784","last_updated":"2014-11-06T22:33:22Z","snapshot_observed_at":"2026-08-16T19:10:09.657437Z","submitted_at":"2014-11-06T22:33:22Z","title":"Conditional Generative Adversarial Nets","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.1784","snapshot_observed_at":"2026-08-10T23:14:55.058407Z","title":"Conditional generative adversarial nets","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.058407Z"},"links":{"cited_paper":"/paper/1411.1784","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:dacd518bb9721c08c29a12ab76244f7ed1f83ab715e37d2fd2c20b66991eda22","observation_id":"0f80b63b-7d31-42ad-b672-16c11b97e194","resolution":{"observed_at":"2026-08-10T23:14:55.058407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.460645Z","title":"Delving into transferable adversarial examples and black -box attacks,","venue":null,"work_id":"ef2b162e-5034-494d-be6a-0d966f925206","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.062912Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:f9c47fca21f171032c562889a61dfdd906d83c10db19d7c6183d991a15133945","observation_id":"e55f9a48-c063-4545-8fff-c4096887eab8","resolution":{"observed_at":"2026-08-10T23:14:55.465848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.442946Z","title":"Enhancing the transferability of adversarial examples with random patch,","venue":null,"work_id":"48002d23-7830-4451-97e8-03c39d0492ea","year":2022},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.068615Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:738f065303b1cb7e9a388184beb0790cf148d9f902ef846b1964c56e2d57af9a","observation_id":"e971d3a6-fd65-4ec2-b917-f22240ae0f6b","resolution":{"observed_at":"2026-08-10T23:14:55.450338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.426663Z","title":"Patch -wise attack for fooling deep neural network,","venue":null,"work_id":"737578c5-d67b-4afa-95dc-2a0548e1d258","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.073437Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:32b9ca273c9d19022d135b5f0a0d7e506230e5c33c5d71027c082e7b0f5da2bf","observation_id":"ffd75bfc-bb84-4f86-af74-59a6bf27ae47","resolution":{"observed_at":"2026-08-10T23:14:55.433665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.411004Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"62d6df73-c13e-4f34-83ad-b929a0f41ae7","year":2016},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.079519Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:67aa0b581c5578ef3bd42caaf5649e3d3c568f3bec369f48d631991a300b6c35","observation_id":"b7e38eca-fd79-43cb-8dd1-bd7310de34eb","resolution":{"observed_at":"2026-08-10T23:14:55.416750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.394643Z","title":"Rethinking the inception architecture for computer vision,","venue":null,"work_id":"739a0439-1d1a-4564-b4ae-fbf0e67e9dbe","year":2016},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.085051Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:a6e0271954c587516fa8a2baab0ff4fc0f7dc595ddd461cb13d486c36365b4a9","observation_id":"c056fcd4-46ab-4d31-869e-7a4e4855d0a4","resolution":{"observed_at":"2026-08-10T23:14:55.400120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.379723Z","title":"Densely connected convolutional networks,","venue":null,"work_id":"296bad59-c795-41f7-a47f-3dbd09ac2511","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.090244Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:3eb7e8c089f842b8f712232c4ab57fbba04de865155f488a313d3e004f37c022","observation_id":"8f374d09-8be5-4408-9e35-083480899cc8","resolution":{"observed_at":"2026-08-10T23:14:55.385004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.362041Z","title":"Very deep convolutional networks for large -scale image recognition,","venue":null,"work_id":"59fba944-7813-4b08-8b3a-cc9d69de0d9a","year":2015},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.095463Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:f557d5b23fb1d5edfa1a91ade400cd837a406bffde1f050f51218aa772234f91","observation_id":"0f60ff8c-0764-4cc5-a56c-46280839a866","resolution":{"observed_at":"2026-08-10T23:14:55.366770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.346567Z","title":"Adversarial exam ples in the physical world,","venue":null,"work_id":"37795d72-a5fa-4e33-988c-71a08ea37e96","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.099647Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:9c29ae93175635c519428f95e3474cbb4e01a766f4fe23b306dd0782d2baaf10","observation_id":"358cf2b2-6495-42ef-a5ea-6ddab08f6a54","resolution":{"observed_at":"2026-08-10T23:14:55.351719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.333085Z","title":null,"venue":null,"work_id":"fb0a9085-860c-4b17-a5e1-b77ca5c8f387","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.104366Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:0daa42ad287b474752d5f2d5f8bdf93370cf468656c8ec2c1b7ecfe0eab94752","observation_id":"f8651010-9d06-484a-8688-17af8ecfb59f","resolution":{"observed_at":"2026-08-10T23:14:55.337372Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.313294Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows,","venue":null,"work_id":"f65f4598-32a2-4725-8ae7-b27af31c62bf","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.109337Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:237e564e35cf4cbdc2af74d989ea25fea2be0e42fd9e3a9fcb5bb46e7a2dd1e7","observation_id":"7b5ec764-84cd-4c66-bbf2-8b987cd7a3c7","resolution":{"observed_at":"2026-08-10T23:14:55.319490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.291817Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"89205b14-09da-40f5-a68f-104bb47bde43","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.113300Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:2fdff071459958d46ca1580ae953471d4020aab33dd4917e60c6500964ebd09f","observation_id":"af285541-b85f-455e-8fb8-0008eb7b11d7","resolution":{"observed_at":"2026-08-10T23:14:55.298266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.272236Z","title":"Rethinking spatial dimensions of vision transformers,","venue":null,"work_id":"1390539a-b92e-49ff-93f5-7ebbcfac41ae","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.120630Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:f4e109caef890515c743bf4128c0dd1ae7d77df6a3cc9df5f56311ef145279a6","observation_id":"33b37b01-47a7-42c2-82a6-3ecebe7b6758","resolution":{"observed_at":"2026-08-10T23:14:55.277554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.255188Z","title":"Visformer: The vision-friendly transformer,","venue":null,"work_id":"45091fee-6667-46c9-b756-4049e9cd0df7","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.126417Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:41b8550248f28c44b79d5df935f33e9ab08c3f534b5b4ad324571f0c25992ab5","observation_id":"3d726273-a962-4b15-8f2f-68679441bda8","resolution":{"observed_at":"2026-08-10T23:14:55.260121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.238095Z","title":"A little robustness goes a long way: Leveraging robust features for targeted transfer attacks,","venue":null,"work_id":"0a1483db-2b4c-46c4-a02f-fd824d0c6aea","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.131654Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:536e04f3f1ca0ace8f1297b79d73893ec8218d038d2c28bd27979c9ec1a10d9f","observation_id":"5cedae7b-31a8-4fdc-88d6-a94263a4abf8","resolution":{"observed_at":"2026-08-10T23:14:55.244318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.222415Z","title":null,"venue":null,"work_id":"9fd11d9c-852c-4877-920c-bca8ac2cb41f","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.137005Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8932a2a2a5b8e7e46e6f83df462a071704e8a035389b93549a1dd2d843b3bfe3","observation_id":"3fe7c040-3dde-44ba-8f0b-198adadc544b","resolution":{"observed_at":"2026-08-10T23:14:55.228754Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":4,"verified_exact":0,"verified_fuzzy":36},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2412.20807."}