{"as_of":"2026-08-11T05:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:96f9b9df8757dd451a3f0c3e1574dde6c7887b7e6e67ca1b897d0545853e8810","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T15:55:07.989455Z","state":"measured"},{"denominator":87,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":87,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T14:05:25.727614Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T00:25:48.506578Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-16T19:29:43.382392Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:7a27e495fd57906fe68adbda0aa3b92a5b0a10d0759b88a00928fa8878efb86e","observation_id":"404870a7-3020-493e-b62d-8bec5c7dca18","resolution":{"observed_at":"2026-05-16T19:31:13.102619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-08-03T14:05:25.727614Z","title":"Black- box adversarial attack on vision language models for au- tonomous driving.CoRR, abs/2501.13563, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":4},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T14:05:25.727614Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:38872763d53ee549e2bed2ab65e8ee10f30177635786b164a75e04811a7d7f10","observation_id":"65d0b44c-40d5-43e9-82c7-b6c59e5bd3b0","resolution":{"observed_at":"2026-08-03T14:05:25.727614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2602.16144","last_updated":"2026-04-20T04:32:07Z","snapshot_observed_at":"2026-07-06T22:46:12.384926Z","submitted_at":"2026-02-18T02:29:33Z","title":"Missing-by-Design: Certifiable Modality Deletion for Revocable Multimodal Sentiment Analysis","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-15T21:51:59.442261Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2602.16144"},"observation_digest":"sha256:b965c90951ca436bab3ce1135421e7ab0369edd8003cce7a7f77a5eb834c6ca4","observation_id":"f5796956-728e-4a50-830e-265f9ab218e1","resolution":{"observed_at":"2026-05-15T21:56:41.027770Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:87e220573b00aa92adf1f358a9a8e43b12951339e0288812946d3c12b8211803","observation_id":"a5969ea7-1c79-4fa6-aa0f-bcc7e152a70f","resolution":{"observed_at":"2026-05-10T22:05:49.157166Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.00880","last_updated":"2026-04-26T09:12:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-26T09:12:32Z","title":"Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-09T20:29:23.561292Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.00880"},"observation_digest":"sha256:f7582b207e09dff037809fdb81b63abe1f536097b0d569cda9f8c1f60193b2fa","observation_id":"df811b8f-f5c3-4060-8513-b4593151b893","resolution":{"observed_at":"2026-05-11T15:11:08.009639Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.10386","last_updated":"2026-05-11T11:28:03Z","snapshot_observed_at":"2026-07-30T05:21:48.152751Z","submitted_at":"2026-05-11T11:28:03Z","title":"GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-12T05:17:42.003708Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.10386"},"observation_digest":"sha256:d2d43e1a1eeccfcc86c9a49aa186f18da30b679cb3844360bcbd366042bb634d","observation_id":"13534008-7363-4846-bbca-3af763f995bf","resolution":{"observed_at":"2026-05-12T05:21:27.099436Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.23220","last_updated":"2026-05-22T04:31:09Z","snapshot_observed_at":"2026-07-06T23:33:29.550551Z","submitted_at":"2026-05-22T04:31:09Z","title":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-25T05:14:59.444339Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.23220"},"observation_digest":"sha256:83217e3f57e1c00ba27068ee998f50e2e9d53ea526e0aa1b7a3bb2cdbb31138d","observation_id":"78440874-6672-480f-b107-ecef121e912b","resolution":{"observed_at":"2026-05-25T05:15:22.174307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.29114","last_updated":"2026-05-27T21:21:37Z","snapshot_observed_at":"2026-07-06T23:38:37.178378Z","submitted_at":"2026-05-27T21:21:37Z","title":"ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-29T11:10:46.269185Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.29114"},"observation_digest":"sha256:eea72fbf7fb4f5c352b51838e9bc1d11ed03ce2f283c26e03ee6b77140b13e87","observation_id":"c7dbbf13-0617-49cd-b9c5-5f109929c191","resolution":{"observed_at":"2026-06-29T11:13:20.760382Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2607.05783","last_updated":"2026-07-07T03:15:00Z","snapshot_observed_at":"2026-08-02T20:47:51.837914Z","submitted_at":"2026-07-07T03:15:00Z","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","version":1},"reference_index":131,"source":"pdf_text","source_observed_at":"2026-07-09T00:16:03.334057Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2607.05783"},"observation_digest":"sha256:34f1d8bd9420e2b511945bda3dc58e9c106222b2382f9e87ec7ed9d07c14e634","observation_id":"71b217a9-fbd1-430d-b301-c0485eecb121","resolution":{"observed_at":"2026-07-09T00:25:48.507890Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2501.13563/citation-record","integrity":"/paper/2501.13563/integrity","json":"/paper/2501.13563/citation-record.json","paper":"/paper/2501.13563"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-10T15:55:07.698921Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.698921Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:19936aee3008124e64f1a91f22c0d24261c94a460dd666dd5a09e08e2eef48d3","observation_id":"f231ce3f-24b2-41c6-9b7f-5cb45e52dff7","resolution":{"observed_at":"2026-08-10T15:55:07.698921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.704777Z","title":"Flamingo: a visual language model for few-shot learn- ing","venue":null,"work_id":"34cff30d-8237-4bcc-8fef-4873e864dd9b","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.703746Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:d7626add5ab69a9c22caec263eddc1abf6ad86556f97e3e60abc8b8a4e4d5dc1","observation_id":"672c8f38-f131-402c-9210-fa2c8cf2fb36","resolution":{"observed_at":"2026-08-10T15:55:08.708222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.695626Z","title":"Vlmo: Unified vision- language pre-training with mixture-of-modality-experts","venue":null,"work_id":"a94b7697-d8b9-4d10-a751-0943d2e0a58c","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.708305Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:4a176507425c0d5eb2ceb526cd2decafca17ae71ada863cf883ffa53315f4262","observation_id":"d9cdc214-c1ea-457a-9030-58c44c1397f9","resolution":{"observed_at":"2026-08-10T15:55:08.698989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.687101Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"85d351d0-b5ef-4fa3-8711-ee4c326d8d8c","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.712007Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:e8e44d3aa4182db5013ad022ef55b95416cb17a6ff87275c88ff8db68d97d54c","observation_id":"fc9d67ba-0f24-4aad-8ef9-e69f2eb7f43a","resolution":{"observed_at":"2026-08-10T15:55:08.690100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.677776Z","title":"Mp3: A unified model to map, perceive, predict and plan","venue":null,"work_id":"1577c08e-6bd5-4d1b-8e43-4aa703655ad3","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.715637Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:0cd57349db294147ffca936c7e2144ae48a6cfbae702fa8b938e1380d1927968","observation_id":"72b56224-1863-4190-b77d-01e59ef57a54","resolution":{"observed_at":"2026-08-10T15:55:08.681147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.667994Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models","venue":null,"work_id":"74f811d0-9562-4f84-88e2-748bedb36b29","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.719816Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:569378e682317133ca04382b3a7afaf40e60eb93fcc34ae35ead12ea780a6c75","observation_id":"e195ba8a-ff4e-4b00-afcc-7d2a978ddea5","resolution":{"observed_at":"2026-08-10T15:55:08.671538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.658594Z","title":"Adversarial attack on attackers: Post-process to mitigate black-box score- based query attacks","venue":null,"work_id":"0801b41d-ccc1-4a3a-b0dd-96c68e44f2b3","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.723737Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:5c7976d13c3e2ab1955a0e81b77578283e4247bbf974c45980becd29c9d06934","observation_id":"e43b68db-c105-4b64-b89c-9c00899137ec","resolution":{"observed_at":"2026-08-10T15:55:08.662140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.649282Z","title":"Detection as regression: Certified object detection with median smoothing","venue":null,"work_id":"61b31087-a54e-40ea-9581-86f10eb97502","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.727162Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1bc5b41b45436e7b9b1ae49bfcf7545d647a2ade21a80d643c95e52a1ddbd75b","observation_id":"5dbdfcee-536d-4685-ab37-720198574b98","resolution":{"observed_at":"2026-08-10T15:55:08.652671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06500","last_updated":"2023-06-15T08:00:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-11T00:38:10Z","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06500","snapshot_observed_at":"2026-08-10T15:55:07.730406Z","title":"Instructblip: Towards general-purpose vision-language models with instruc- tion tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.730406Z"},"links":{"cited_paper":"/paper/2305.06500","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:6fcf8efc4e6f52d409bc6fad5516dd3cd97926a47bacd0ae598540e76ed77a66","observation_id":"bfa5066f-5d8f-4b5a-909b-0a7c1f689c68","resolution":{"observed_at":"2026-08-10T15:55:07.730406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.639519Z","title":"Deep learning-based autonomous driving systems: A survey of attacks and defenses","venue":null,"work_id":"fb86725f-b56c-4396-89a4-ef0af25a8d7a","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.734163Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:987d18d1d96cece58602a376e81db65633d44bf419da036c7984e5015baecccf","observation_id":"228be00e-ee43-4fd6-a235-ece150060882","resolution":{"observed_at":"2026-08-10T15:55:08.643518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.629590Z","title":"Driverless vehicle security: Challenges and future research opportunities","venue":null,"work_id":"1253d61b-62da-43a3-804e-5784dfa5e5b1","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.737972Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a50dfb95e55bcef2f662b98f9088b4e4aa367ec9b9cc3c11891bae785a6aa224","observation_id":"48d7bc60-7885-45e9-8cf0-fa3b751178f1","resolution":{"observed_at":"2026-08-10T15:55:08.633185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.619712Z","title":"Boosting adversar- ial attacks with momentum","venue":null,"work_id":"c4ac0788-ec7c-4171-8da5-55bff2e7114f","year":2018},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.741597Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ab468d7cfb5d6059189ff7f83d4f0e63ced84f778609d452eb265ff8fc2d6e18","observation_id":"2ae6c8c5-542d-4ba4-b58a-4766749b4bb9","resolution":{"observed_at":"2026-08-10T15:55:08.623264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.609405Z","title":"Carla: An open urban driving simulator","venue":null,"work_id":"88646bf9-8d16-48ee-ac51-df5b34fff135","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.745101Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:80c82a7d999461d11b684057f81fe14a49eccb095c791aca99275820e4751eb3","observation_id":"6acdcefb-3d01-4adf-85ad-153fe00407b2","resolution":{"observed_at":"2026-08-10T15:55:08.613109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.599162Z","title":"Boosting transferability in vision-language attacks via diversification along the intersection region of adversarial trajectory","venue":null,"work_id":"47861e3b-65b2-4f83-8d54-cd64d82e7dbf","year":2025},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.748320Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fbbc56233bb07f306d33039ded1677396c9ed01b638d6579b58dd980ac2a1de8","observation_id":"1959681b-4931-4050-ab41-8a28b82fd39b","resolution":{"observed_at":"2026-08-10T15:55:08.602727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T15:55:07.752017Z","title":"Explaining and harnessing adversarial exam- ples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.752017Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:18d22b29cb96288bd3bc5074a53bb4c708a14274a4bfccccb38f65cde613c8bc","observation_id":"9520b2c6-199c-4116-8691-677df51ca9bf","resolution":{"observed_at":"2026-08-10T15:55:07.752017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-10T15:55:07.755932Z","title":"Countering adversarial im- ages using input transformations","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.755932Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ed6485aa02b1ba21ad9e7ebc27084f31ddb528ab20d30c2eaea1995c6557aa8f","observation_id":"6c4f6275-a817-43af-a58e-4cd2b5ae05dc","resolution":{"observed_at":"2026-08-10T15:55:07.755932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.589200Z","title":"A comprehensive evaluation frame- work for deep model robustness","venue":null,"work_id":"2102b798-7438-488f-8da4-d71ff6157682","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.759811Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:9d36a4d02a3782f65ed7e9ba2de19a51c236bc6606abd61ee13ebd3c7ff99ac1","observation_id":"88ec32e5-ff0c-4e78-b507-8aa1112e1e15","resolution":{"observed_at":"2026-08-10T15:55:08.592772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.579116Z","title":"A comprehensive evaluation frame- work for deep model robustness","venue":null,"work_id":"42770b4d-6e1a-48b2-be65-db22934ecd02","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.763317Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:8f0787f64a282dfecbc916ecc9843dd74e3f351bf4336d025d8cd2930fbc611d","observation_id":"ab8150bb-9da2-4bf5-bf67-4a69489e9db3","resolution":{"observed_at":"2026-08-10T15:55:08.582887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.568426Z","title":"St-p3: End-to-end vision- based autonomous driving via spatial-temporal feature learning","venue":null,"work_id":"6281c259-0bfa-4d3c-860d-5df9ebd1655d","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.767048Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:bfcebf09ecbdec3cf55f980f33fad28172d1a1b7fe32828358fe4904070376b2","observation_id":"08e257ee-875c-4989-8146-5b5c06960123","resolution":{"observed_at":"2026-08-10T15:55:08.571806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.770734Z","title":"Planning-oriented autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.770734Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:bc530a3a5b7ae68f83de2290321df5698c6807e315848b49bad6c2da47992302","observation_id":"446b0a52-c9b9-4247-bca5-88b4b378a517","resolution":{"observed_at":"2026-08-10T15:55:07.770734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22313","last_updated":"2024-10-29T17:53:56Z","snapshot_observed_at":"2026-07-31T01:16:26.372370Z","submitted_at":"2024-10-29T17:53:56Z","title":"Senna: Bridging Large Vision-Language Models and End-to-End Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22313","snapshot_observed_at":"2026-08-10T15:55:07.774232Z","title":"Senna: Bridging large vision-language models and end-to-end autonomous driving","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.774232Z"},"links":{"cited_paper":"/paper/2410.22313","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:90522af5e0debe6ee9c4e5c244994ad5fd5c990941e2eeeae4d965a70b367edd","observation_id":"af98711f-fbc7-4823-9314-80c5ce1df427","resolution":{"observed_at":"2026-08-10T15:55:07.774232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.778242Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.778242Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:aa80ed4dd05e6283e3f68ebeacab46aaec22596f39aacbb8f3a42cc69bdaa083","observation_id":"23db10a4-575c-4373-86f1-b00cc29a9c5f","resolution":{"observed_at":"2026-08-10T15:55:07.778242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.781576Z","title":"Blip: Bootstrapping language-image pre-training for unified vision-language understanding and generation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.781576Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:9991e38122cfaca45f20c87a66e6a31300308ff7e9890cd00c630055338809ba","observation_id":"388987b8-e2a5-4269-8c9c-d68560866d9c","resolution":{"observed_at":"2026-08-10T15:55:07.781576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.540117Z","title":"Align before fuse: Vision and language representation learning with momentum distillation.NeurIPS, 34:9694– 9705, 2021","venue":null,"work_id":"d75557f6-df5a-4b9a-9eed-b6ce67c9c8af","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.785011Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ea516e246cebbac2d9e7775f8b3b73053a8caf6c4128ab79aeed6cb6ad92a84e","observation_id":"8cad2352-2dc0-4105-b7aa-a84f1b54f245","resolution":{"observed_at":"2026-08-10T15:55:08.543638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-06T02:43:24.834998Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-10T15:55:07.788512Z","title":"Poisoned forgery face: Towards backdoor attacks on face forgery detec- tion","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.788512Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a9c7842eb599f73bf3909769bd4dc768683a49aea6e603f706b6d1d15af3f4b9","observation_id":"e1da9c02-fd0a-472f-b290-40fe2ac0205a","resolution":{"observed_at":"2026-08-10T15:55:07.788512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.530492Z","title":"A large- scale multiple-objective method for black-box attack against object detection","venue":null,"work_id":"016f9848-e3bc-4d74-9160-4273e99bac14","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.792189Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:39cc06e20f3b5bbf561a6fdcc84db32d3f41c4350b8294007d5842f66e430da1","observation_id":"122dc8ed-6cf0-40e4-9eb9-75af5f757d57","resolution":{"observed_at":"2026-08-10T15:55:08.533760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.521593Z","title":"Gener- ate more imperceptible adversarial examples for object detection","venue":null,"work_id":"4033e1ab-39fd-4967-a452-b55206dc4127","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.795914Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:e2776bcdad8b2bb610b19bccc76c5d0a35e4e3f963361d960522e2c1b94112f6","observation_id":"63a04fd3-7cc6-4743-996f-66b25bb48083","resolution":{"observed_at":"2026-08-10T15:55:08.524903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.512047Z","title":"Efficient adversarial attacks for visual object track- ing","venue":null,"work_id":"9805df79-062a-483f-b30e-b163260581a0","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.799483Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:af80b828247d3644b49a53a6955e12de9b5828acd3657c0ddbcad19059138dee","observation_id":"0519a552-35f6-4f1b-b6f1-90bfddf6b432","resolution":{"observed_at":"2026-08-10T15:55:08.515659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.08970","last_updated":"2022-01-22T06:00:17Z","snapshot_observed_at":"2026-08-05T14:04:42.818320Z","submitted_at":"2022-01-22T06:00:17Z","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.08970","snapshot_observed_at":"2026-08-10T15:55:07.803181Z","title":"Parallel rectangle flip attack: A query-based black-box attack against object detection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.803181Z"},"links":{"cited_paper":"/paper/2201.08970","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:df942fe6718a90f00efb9986e2a7bfb167ba6b53475a18d297dd18f796baa65a","observation_id":"8f371331-e5bf-4d02-a72b-545efbb8cc52","resolution":{"observed_at":"2026-08-10T15:55:07.803181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12075","last_updated":"2024-03-04T13:59:22Z","snapshot_observed_at":"2026-08-06T11:06:04.270520Z","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12075","snapshot_observed_at":"2026-08-10T15:55:07.807056Z","title":"Badclip: Dual- embedding guided backdoor attack on multimodal con- trastive learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.807056Z"},"links":{"cited_paper":"/paper/2311.12075","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:e1d22692e1a0b2706d96767bee2cc819a15d310a88cdf139598974377a8b362b","observation_id":"4974dc28-a855-4be2-9a49-22a1b3a6d2ca","resolution":{"observed_at":"2026-08-10T15:55:07.807056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.502667Z","title":"{X-Adv}: Physical adversarial object attacks against x-ray prohibited item detection","venue":null,"work_id":"6daecd4d-89e9-4fd3-a7e1-15f92800fcb3","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.811279Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:2cb4a3b0fc6cf3783f5f4e24a95489f434d56e643d74a4137d9b454141a9811c","observation_id":"9e395fd1-084c-4c7b-9cfc-017a4819fa63","resolution":{"observed_at":"2026-08-10T15:55:08.505870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.814916Z","title":"Spatiotemporal attacks for embodied agents","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.814916Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:745237ad9ccf45aade75763def57b38db9e82e41e72537474e38830b7e541892","observation_id":"b2169595-f52b-4dc3-be6a-36b9f27c52d3","resolution":{"observed_at":"2026-08-10T15:55:07.814916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.487678Z","title":"Perceptual- sensitive gan for generating adversarial patches","venue":null,"work_id":"62825704-ca6a-4e9f-bdcf-f7f0489b464f","year":2019},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.818450Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:db81dee9f188e65782975b6d90625dfd28e358ee23714d80120c3c6f3e745811","observation_id":"d2d2b3ae-15eb-4e79-9485-18c9dd733d9c","resolution":{"observed_at":"2026-08-10T15:55:08.491582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.478011Z","title":"Training robust deep neural networks via adversarial noise propagation.IEEE TIP, 2021","venue":null,"work_id":"38fc27d1-0fa9-4749-ab9d-a6ceba377777","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.822017Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:55c7efba5f0cd638b10a3ddbc85f720bdb4a82760bf7e7030a355aae79a9f270","observation_id":"bc815605-bbf8-408e-87b5-a865c30bd4fa","resolution":{"observed_at":"2026-08-10T15:55:08.481455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.468167Z","title":"Towards defending multiple lp-norm bounded adversarial pertur- bations via gated batch normalization","venue":null,"work_id":"b4fc3227-cc87-4d14-aba9-41e5aa33d561","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.825833Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:81ffe0306711fa0bc72fefff81c9eb8234a76bd7b7b060c2c2c75bcfe7422614","observation_id":"eb3acdcf-37a3-4e1b-a02e-8cc22ca99c8e","resolution":{"observed_at":"2026-08-10T15:55:08.471778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.829646Z","title":"Exploring the relationship between architecture and adversarially robust generalization","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.829646Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:68bc8bfbd172bd9fe55167c23985b2c254415bcce1b7d64f3e153b5109f28a75","observation_id":"9190cd26-72fe-42f0-8158-99d3f573f256","resolution":{"observed_at":"2026-08-10T15:55:07.829646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.452302Z","title":"Bias-based universal adversarial patch attack for automatic check-out","venue":null,"work_id":"cff6e52c-e9f2-48bc-9902-67a50fe8282f","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.833368Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:344f0f9dd78457de19e8174f47e736e41ccdaf0fa16f02c4d304117e433487e1","observation_id":"8b0ed1d0-5b86-4b67-bba7-0952d28ca974","resolution":{"observed_at":"2026-08-10T15:55:08.455813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.837107Z","title":"Visual instruction tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.837107Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:02e1fb734180d6b6e9823e51d968b8d7a651b920843e31191fedcaa8bcaf1cd0","observation_id":"76c6966b-3928-408a-bac8-3125e4bb7e5c","resolution":{"observed_at":"2026-08-10T15:55:07.837107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11017","last_updated":"2023-11-18T09:10:07Z","snapshot_observed_at":"2026-08-07T13:04:48.148655Z","submitted_at":"2023-11-18T09:10:07Z","title":"Improving Adversarial Transferability by Stable Diffusion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11017","snapshot_observed_at":"2026-08-10T15:55:07.840809Z","title":"Improving adversarial transferability by stable diffusion","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.840809Z"},"links":{"cited_paper":"/paper/2311.11017","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:7016641af8123287092a5dcf7467a9d53c7db09d3b0b2500063c930b8d2d6c6e","observation_id":"29a51c1b-fc86-4d7a-a8cf-0e7586455398","resolution":{"observed_at":"2026-08-10T15:55:07.840809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.844858Z","title":"Harnessing perceptual adversarial patches for crowd counting","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.844858Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fa8deddb69d35563c39378bdc65a384dd6140209d0e284383df6af636d4c93f7","observation_id":"a5971ab3-fad6-4956-b6f5-f87037d7f4f1","resolution":{"observed_at":"2026-08-10T15:55:07.844858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.433151Z","title":"Set-level guidance attack: Boosting adversarial transferability of vision- language pre-training models","venue":null,"work_id":"45b4c875-71a5-420d-8f14-acae4361d288","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.848606Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:7867efb02cfe2ff0d4b34bed1f400d565534597e869dc436133db4fea94cba22","observation_id":"48e80d84-073f-4d04-abf7-0e60319ee681","resolution":{"observed_at":"2026-08-10T15:55:08.436529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00438","last_updated":"2023-12-01T09:10:33Z","snapshot_observed_at":"2026-08-10T14:43:54.873284Z","submitted_at":"2023-12-01T09:10:33Z","title":"Dolphins: Multimodal Language Model for Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00438","snapshot_observed_at":"2026-08-10T15:55:07.852163Z","title":"Dolphins: Multimodal language model for driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.852163Z"},"links":{"cited_paper":"/paper/2312.00438","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:32fa2479666049d28a0e95c8d71fc6aba00e2841ef67d4260da5d5aa3e479684","observation_id":"9999d067-60d3-4ceb-ad95-aa859421de92","resolution":{"observed_at":"2026-08-10T15:55:07.852163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-10T15:55:07.856480Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.856480Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1593d98591e73f78c857a62f0272f46ecf12b72f9e75b8fa531c5cf1d010edb0","observation_id":"c0dc3f6d-704e-4819-9923-56938e6020e0","resolution":{"observed_at":"2026-08-10T15:55:07.856480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01415","last_updated":"2023-12-05T05:26:29Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:57Z","title":"GPT-Driver: Learning to Drive with GPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01415","snapshot_observed_at":"2026-08-10T15:55:07.860362Z","title":"Gpt-driver: Learning to drive with gpt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.860362Z"},"links":{"cited_paper":"/paper/2310.01415","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:76b5b850bdc252360564af63154fe2f3f34f8065bc90b5ab975624b51af949e2","observation_id":"5d275c25-fe59-46e7-b68b-7d8149d265b3","resolution":{"observed_at":"2026-08-10T15:55:07.860362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14115","last_updated":"2024-09-26T15:30:00Z","snapshot_observed_at":"2026-08-05T01:20:20.561142Z","submitted_at":"2023-12-21T18:40:34Z","title":"LingoQA: Visual Question Answering for Autonomous Driving","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14115","snapshot_observed_at":"2026-08-10T15:55:07.864225Z","title":"Lingoqa: Video question an- swering for autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.864225Z"},"links":{"cited_paper":"/paper/2312.14115","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1afbcf31eb9cb968a362d566967fdceee73e3bf4879d67ed528d66176ad686d8","observation_id":"9d8d3da1-e395-4cd3-819c-b7bcc2514ac8","resolution":{"observed_at":"2026-08-10T15:55:07.864225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.424088Z","title":"A self-supervised approach for adversarial robustness","venue":null,"work_id":"96b9ce20-badd-4ff1-899c-734ab38434b5","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.868361Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:313d5174a4149aea422ba9a668c19c8c4faa4d94af863af42578ee2d1a137b4f","observation_id":"91dff88f-ac45-423c-9e6c-e3333d464a47","resolution":{"observed_at":"2026-08-10T15:55:08.427693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03661","last_updated":"2024-07-20T15:59:53Z","snapshot_observed_at":"2026-08-09T00:34:05.232407Z","submitted_at":"2023-12-06T18:32:33Z","title":"Reason2Drive: Towards Interpretable and Chain-based Reasoning for Autonomous Driving","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03661","snapshot_observed_at":"2026-08-10T15:55:07.871862Z","title":"Reason2drive: Towards interpretable and chain-based reasoning for autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.871862Z"},"links":{"cited_paper":"/paper/2312.03661","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:72548c8666acc0b21961befd32a7377a7fcfd589dea742fe770d80dbca655553","observation_id":"3990462b-aea8-4613-b884-6c3eef060d55","resolution":{"observed_at":"2026-08-10T15:55:07.871862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.415629Z","title":"Jetbot, 2021","venue":null,"work_id":"ef758962-ca05-4ef1-8a0a-4c41bc7f9fac","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.875732Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:c9d6b7d5d45da795a74ccf0d0d8da095fcdc9be2fbc06299d6cfdc11d97f0e83","observation_id":"60a7bac4-2806-4e1d-9243-00d702e2c4ee","resolution":{"observed_at":"2026-08-10T15:55:08.418641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.407146Z","title":"Chatgpt, 2023","venue":null,"work_id":"5381309e-1e22-4acb-9e72-6f91b9cc3303","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.879480Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:645c2ee0deef994af617063e41b373f2efb90c2cf0efc5a54341353227383112","observation_id":"fef55696-9155-4d69-bf5e-7d93e28d9427","resolution":{"observed_at":"2026-08-10T15:55:08.410168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.397564Z","title":"Adaptive adversarial videos on 15 roadside billboards: Dynamically modifying trajectories of autonomous vehicles","venue":null,"work_id":"fcd03086-b5c0-49ee-aac3-fbc335adf2cc","year":2019},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.883254Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:f81faa63c815935fde7d45eea8221045c7e38b9a020a9933bd841d43d7cc74c5","observation_id":"952a5195-3e98-4a77-bdfa-16cee2c240cf","resolution":{"observed_at":"2026-08-10T15:55:08.400901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.388285Z","title":"Learning transferable visual models from natural lan- guage supervision","venue":null,"work_id":"f78f3b53-e53d-48d8-b1c0-f65bd170a5bd","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.887224Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:d423924e478b691aceb560d0efb0d322c99a05a543a95714c54fd782cf22895e","observation_id":"f0e3548f-c313-4ce4-9e91-5112c04c9492","resolution":{"observed_at":"2026-08-10T15:55:08.391882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.378872Z","title":"Limo, 2021","venue":null,"work_id":"1db2bb90-f04e-4812-9836-ac4d2afd6463","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.890812Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:3cb12c627542d200f085fa59af81809214ad11f38158d1715da04eaceef82e8d","observation_id":"2ec1842f-6203-4c39-8bcd-514633aa81fc","resolution":{"observed_at":"2026-08-10T15:55:08.382114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.369029Z","title":"Dirty road can attack: Security of deep learning based automated lane center- ing under {Physical-World} attack","venue":null,"work_id":"716d2287-999f-4ab7-8ac3-4a3dbb7d81af","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.894387Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:dc655c8fb667237e89aae4bf8e60a71e8f95c71bd7fed6b54866b6010200fc0d","observation_id":"0eb8e327-4774-4b47-b266-7b607c8c38b3","resolution":{"observed_at":"2026-08-10T15:55:08.372582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.359683Z","title":"Lm- drive: Closed-loop end-to-end driving with large lan- guage models","venue":null,"work_id":"47557be2-b94e-48d8-9288-b69585e30dfc","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.898266Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:c7ed2197bbf02dad07987c1b96ee6e10faa5d16b77e2aedad882a15295d6746b","observation_id":"78fa2458-9e59-424e-80f5-464abfebb9cc","resolution":{"observed_at":"2026-08-10T15:55:08.363183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14150","last_updated":"2025-01-16T10:57:44Z","snapshot_observed_at":"2026-08-10T19:14:31.295716Z","submitted_at":"2023-12-21T18:59:12Z","title":"DriveLM: Driving with Graph Visual Question Answering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14150","snapshot_observed_at":"2026-08-10T15:55:07.901795Z","title":"Drivelm: Driving with graph visual question answering","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.901795Z"},"links":{"cited_paper":"/paper/2312.14150","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:2b1846d7a5f077cb8c19560218e50ecbdb366f7cfc554d833b1c8a65e05a6b38","observation_id":"3e083219-b9c8-45a8-a73b-6e47469bc84a","resolution":{"observed_at":"2026-08-10T15:55:07.901795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-10T15:55:07.905766Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.905766Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:56e8e14abc9ab9a73ef259cecf6442c49a525225e67d593c439ea3acdbc3483f","observation_id":"74ba45f5-8ffa-4a58-9a17-fa47ce378122","resolution":{"observed_at":"2026-08-10T15:55:07.905766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.350259Z","title":"Robustart: Benchmarking ro- bustness on architecture design and training techniques","venue":null,"work_id":"ddd36b51-8a1c-4174-8dee-7197be6fee90","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.909758Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:592b5994cfc2b69e2555dab52ad2f376be1f0cbacf868bf1cc48a383cb52eba9","observation_id":"711ff9f1-3de0-4e76-a139-8d5acf63fe35","resolution":{"observed_at":"2026-08-10T15:55:08.354013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.341304Z","title":"Carla autonomous driving leaderboard.,","venue":null,"work_id":"d18744af-2a0c-4445-ae06-fd8afde9261e","year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.913574Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a03e4042e8702638b9f5e104c3fa462a3701fbfeb9f555d12ad17e732be88e9a","observation_id":"4e8ae261-6345-4618-a3ab-5e6a5e66eaba","resolution":{"observed_at":"2026-08-10T15:55:08.344552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12289","last_updated":"2024-06-25T17:55:35Z","snapshot_observed_at":"2026-08-10T03:38:23.239399Z","submitted_at":"2024-02-19T17:04:04Z","title":"DriveVLM: The Convergence of Autonomous Driving and Large Vision-Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12289","snapshot_observed_at":"2026-08-10T15:55:07.922093Z","title":"Drivevlm: The convergence of autonomous driving and large vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.922093Z"},"links":{"cited_paper":"/paper/2402.12289","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ad3683e44e4533fc59efe9cd163b8b8f202b47ebd2d28d875d4a953bde7b5a82","observation_id":"f7db3976-61a2-437e-8020-387d1513065a","resolution":{"observed_at":"2026-08-10T15:55:07.922093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-10T15:55:07.926296Z","title":"Llama: Open and efficient foundation language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.926296Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:57126be140f6df90b5d70fca4b8b2983320fa58e03c4e018f43236f567b97280","observation_id":"0623bbef-69ce-460d-8afa-7c9744cd505e","resolution":{"observed_at":"2026-08-10T15:55:07.926296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.322353Z","title":"Transferable multimodal attack on vision-language pre- training models","venue":null,"work_id":"2a670d77-832e-48d8-84d6-090f2455db81","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.930007Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:b448c7e59f04e15ba25c379c3ef78d4a66ea08445e68e1ae9e41ce04c62f5d58","observation_id":"17ed0d44-4289-4c60-b55c-ec3f03b83d6b","resolution":{"observed_at":"2026-08-10T15:55:08.325788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.312594Z","title":"Dual attention suppres- sion attack: Generate adversarial camouflage in physical world","venue":null,"work_id":"b8d82efc-d473-4d99-8f90-fd4352db9c72","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.933857Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:cdfc39b8b9d976fc9254d933951315dfb1f2517a6bf616356129ad6c042e99cb","observation_id":"33e4cad2-684f-4527-bdff-8a5722965940","resolution":{"observed_at":"2026-08-10T15:55:08.316054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10136","last_updated":"2023-09-15T02:14:34Z","snapshot_observed_at":"2026-07-06T15:17:48.587665Z","submitted_at":"2023-04-20T07:44:59Z","title":"Diversifying the High-level Features for better Adversarial Transferability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10136","snapshot_observed_at":"2026-08-10T15:55:07.937330Z","title":"Diversifying the high-level features for better adversarial transferability","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.937330Z"},"links":{"cited_paper":"/paper/2304.10136","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:72b10a2216fabdba6003f7787d0933d8c0bfa284864d169f28812f8020153668","observation_id":"8520eb34-ca97-42d2-ac8b-24281697b944","resolution":{"observed_at":"2026-08-10T15:55:07.937330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12641","last_updated":"2019-05-13T07:22:16Z","snapshot_observed_at":"2026-07-06T07:18:09.568026Z","submitted_at":"2018-11-30T06:55:22Z","title":"Transferable Adversarial Attacks for Image and Video Object Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.12641","snapshot_observed_at":"2026-08-10T15:55:07.941193Z","title":"Transferable adversarial attacks for image and video object detection","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.941193Z"},"links":{"cited_paper":"/paper/1811.12641","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:92f685d299c8bb85a888cf9e0fe2b4240a6505bd09db4653b6bfc3d25d74e20f","observation_id":"e16cd594-65a8-4991-a135-8c90081a970e","resolution":{"observed_at":"2026-08-10T15:55:07.941193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.01155","last_updated":"2017-12-05T23:45:08Z","snapshot_observed_at":"2026-07-06T05:36:32.792127Z","submitted_at":"2017-04-04T18:56:53Z","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.01155","snapshot_observed_at":"2026-08-10T15:55:07.944996Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.944996Z"},"links":{"cited_paper":"/paper/1704.01155","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:00ee86909c7b6bba469d111fff40dd3707e5856cb92aa323b804fae5fc919e0b","observation_id":"ca47a575-6139-4011-a86c-cc76772f1d48","resolution":{"observed_at":"2026-08-10T15:55:07.944996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.302869Z","title":"Drivegpt4: Interpretable end-to-end autonomous driving via large language model","venue":null,"work_id":"d5db6f22-7ac3-4c3d-be4d-a5335bd3fb85","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.949651Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:4e3e524bee3dbad6c5b450fdaf927048d7d5d3a9241e7ee30485dea66d88ba3c","observation_id":"5042f3a5-0cc7-4215-af9e-5cfe52509bc6","resolution":{"observed_at":"2026-08-10T15:55:08.306737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.292386Z","title":"Vlattack: Multimodal adversarial attacks on vision-language tasks via pre-trained models","venue":null,"work_id":"425e5273-5eb0-4a63-b093-1f0de148548b","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.953066Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:9b370dba4e6e550d9be02ebb38ab6bf16267f7abf20f367fe6866a1d795e7f70","observation_id":"896b5aa8-bf0e-47cd-963b-b1de79bd22c0","resolution":{"observed_at":"2026-08-10T15:55:08.296105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.01917","last_updated":"2022-06-14T00:48:04Z","snapshot_observed_at":"2026-08-10T15:05:25.558818Z","submitted_at":"2022-05-04T07:01:14Z","title":"CoCa: Contrastive Captioners are Image-Text Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.01917","snapshot_observed_at":"2026-08-10T15:55:07.956544Z","title":"Coca: Con- trastive captioners are image-text foundation models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.956544Z"},"links":{"cited_paper":"/paper/2205.01917","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:3c142cc926cabf6581d8f1da45147c0892617669b2feb18aaf355f725496a70b","observation_id":"b0ef4525-5d20-4cfc-8388-7223b45b464b","resolution":{"observed_at":"2026-08-10T15:55:07.956544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.282216Z","title":"Interpreting and improving adversarial robustness of deep neural net- works with neuron sensitivity","venue":null,"work_id":"81fb9e51-813d-458e-b49e-87430ff37d2d","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.960236Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:5412dc4e60cf2d60d23caa99157b7562ff54e26f556ff546a34edb271f031c73","observation_id":"749c5739-a25c-4d9a-b2b7-a401af56ef5d","resolution":{"observed_at":"2026-08-10T15:55:08.285722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05346","last_updated":"2025-03-28T02:55:23Z","snapshot_observed_at":"2026-08-09T22:03:41.572623Z","submitted_at":"2024-10-07T09:45:18Z","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05346","snapshot_observed_at":"2026-08-10T15:55:07.963512Z","title":"Anyattack: Towards large-scale self-supervised generation of tar- geted adversarial examples for vision-language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.963512Z"},"links":{"cited_paper":"/paper/2410.05346","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:40e96ad2b2b2dc4a8ce41684a17823fb8d6e123748cbd5171586b8c7797ad475","observation_id":"551fc15f-bbc7-43ac-8633-fd17060ac177","resolution":{"observed_at":"2026-08-10T15:55:07.963512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.272121Z","title":"Towards adver- sarial attack on vision-language pre-training models","venue":null,"work_id":"4f118a57-d50c-4990-84ef-f6000e8e1c91","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.967562Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:56315b25df0514fa9bcbe818195f5bbfc40cf0d46ba3d59eb1ab80625b04102a","observation_id":"5de9e521-3937-498d-8f95-d9ee82e1766a","resolution":{"observed_at":"2026-08-10T15:55:08.275714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07321","last_updated":"2024-09-11T15:00:18Z","snapshot_observed_at":"2026-07-06T19:13:46.489307Z","submitted_at":"2024-09-11T15:00:18Z","title":"Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07321","snapshot_observed_at":"2026-08-10T15:55:07.971153Z","title":"Module-wise adaptive adversarial training for end-to-end autonomous driving","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.971153Z"},"links":{"cited_paper":"/paper/2409.07321","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:eec246ef11af061a54d02ba5d9561825ee9fbeb4ba80213294adb89219658da7","observation_id":"e50a104b-5689-4d74-bfd7-5c032227d206","resolution":{"observed_at":"2026-08-10T15:55:07.971153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.261678Z","title":"Lanevil: Benchmarking the robustness of lane detection to environmental illusions","venue":null,"work_id":"b0dadb85-5ced-4a27-90c1-ce729f76a2f6","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.974779Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:102af5bf3483181642c06a7b9de3e1479daa073d85ece928212335afcac3b0b5","observation_id":"dc8366ce-9095-4ad6-9dd6-a14f9854c545","resolution":{"observed_at":"2026-08-10T15:55:08.265691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18275","last_updated":"2026-04-21T10:31:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-27T12:09:43Z","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18275","snapshot_observed_at":"2026-08-10T15:55:07.978515Z","title":"Visual adversar- ial attack on vision-language models for autonomous driving","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.978515Z"},"links":{"cited_paper":"/paper/2411.18275","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:75f2c58b564f725765743456029a0aa946b287bb1c04fca85216276ca5814cff","observation_id":"bcf9bf43-b77a-48ee-8668-12d23549705e","resolution":{"observed_at":"2026-08-10T15:55:07.978515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.251591Z","title":"On evaluating adversarial robustness of large vision- language models","venue":null,"work_id":"6afaa4a1-8ac3-4a21-9e8f-4e8be2f05284","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.982246Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:5432b6d8a79efd1fb3d5d4a46dda102edb655c14a95062bd7ee56729462a5e66","observation_id":"3585a7d5-75b7-4620-b1e6-68630b0bf73b","resolution":{"observed_at":"2026-08-10T15:55:08.255104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.238817Z","title":"Advclip: Downstream- agnostic adversarial examples in multimodal contrastive learning","venue":null,"work_id":"695cf6b2-ee8b-41b7-b489-af6e34468e95","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.985803Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:051f84987fa8e8a8ffab9878b40198219b1e185f0dcbb763ee3e66e6f859c11a","observation_id":"3e351456-b2b2-4cab-9a6d-74c54edca875","resolution":{"observed_at":"2026-08-10T15:55:08.244091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-10T15:55:07.989455Z","title":"Minigpt-4: Enhancing vision- language understanding with advanced large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.989455Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:53817e2cf670dc8de50c317e00225325d01946fc36b9853da2074918653221db","observation_id":"bbc7a042-2ede-49d2-841a-397887c0eeb2","resolution":{"observed_at":"2026-08-10T15:55:07.989455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.332072Z","title":null,"venue":null,"work_id":"121483b0-03ce-4379-872d-dba2236e01c1","year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.917782Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:06c7efaf85b3cda54f7cf5d3c7d4f277d4b15b636baef3bfc0e6109cddddc2bd","observation_id":"fe308bde-4a34-44da-a885-d43d0db358b9","resolution":{"observed_at":"2026-08-10T15:55:08.335315Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":44},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 9 inbound Pith citation observations for arXiv:2501.13563."}