{"as_of":"2026-08-11T08:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:812d3c0c49f06e0834a3b9cc2d7141509b566c2b37f2159e18cb3f3fbb56d8d2","coverage":[{"denominator":58,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":58,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T13:39:29.566779Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.18629/citation-record","integrity":"/paper/2501.18629/integrity","json":"/paper/2501.18629/citation-record.json","paper":"/paper/2501.18629"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.613689Z","title":null,"venue":null,"work_id":"456e02a5-c829-4fc8-9888-f424810c685b","year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.221282Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:1239c3a303089f3aa42ebf79691e5db199904a06090e895174380840c62a2e0b","observation_id":"93d2feaa-10ff-4214-aa5a-6483f4e0a850","resolution":{"observed_at":"2026-08-10T13:39:30.617334Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2108.00401","last_updated":"2021-09-02T09:14:33Z","snapshot_observed_at":"2026-07-06T11:34:28.528457Z","submitted_at":"2021-08-01T08:54:47Z","title":"Advances in adversarial attacks and defenses in computer vision: A survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2108.00401","snapshot_observed_at":"2026-08-10T13:39:29.225831Z","title":null,"venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.225831Z"},"links":{"cited_paper":"/paper/2108.00401","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:a3e81f4081192e485cafde70d657819b99761ebe9539e4098817b15b1ba6fe36","observation_id":"76e7b270-4326-42b7-9f31-0826dc9ed579","resolution":{"observed_at":"2026-08-10T13:39:29.225831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.33193","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.257142Z","title":null,"venue":null,"work_id":"0d230785-991e-455c-9671-524e6ee0a1e7","year":2023},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.230093Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:c235f345f4517616616fdab8a199f030bc9de782ea2f6de7611935d9cd11d05a","observation_id":"80188af4-1996-42d0-8d90-ff32e457de78","resolution":{"observed_at":"2026-08-10T13:39:30.261670Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.00049","last_updated":"2020-07-29T07:53:10Z","snapshot_observed_at":"2026-07-06T08:40:59.491813Z","submitted_at":"2019-11-29T19:29:32Z","title":"Square Attack: a query-efficient black-box adversarial attack via random search","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.00049","snapshot_observed_at":"2026-08-10T13:39:29.233708Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.233708Z"},"links":{"cited_paper":"/paper/1912.00049","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:1b52255d01e1d79a99085cc8d08c054cc2f39e3663455240a4d9411a2fd6effc","observation_id":"a04a4b73-d1e0-4514-94e0-73428ba01b44","resolution":{"observed_at":"2026-08-10T13:39:29.233708Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.09856","last_updated":"2018-07-08T12:37:09Z","snapshot_observed_at":"2026-08-10T18:26:58.976754Z","submitted_at":"2017-11-27T17:59:50Z","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","version":3},"cited_work":{"arxiv_id":"1711.09856","doi":null,"metadata_source":"pith","pith_arxiv_id":"1711.09856","snapshot_observed_at":"2026-08-10T13:39:30.172260Z","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","venue":"cs.CV","work_id":"62f94394-c9ec-421e-b73d-7b230247ece9","year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.238428Z"},"links":{"cited_paper":"/paper/1711.09856","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:cf1bec1e780f2533d2a98762e2fe726a48ad7436d70026bcd51e967d42480c83","observation_id":"a63612da-324b-4547-a354-fe8f905b9572","resolution":{"observed_at":"2026-08-10T13:39:30.175737Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.604109Z","title":null,"venue":null,"work_id":"146fa3af-b94a-4c76-aa54-67553e02a3b8","year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.242819Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:ace1c8e5ee9dc2717d63aa32078c4adae4f021cb3b54174a5f5fd57407004c6d","observation_id":"608ec2ef-d807-47cf-bd0d-ce34a1f9e41c","resolution":{"observed_at":"2026-08-10T13:39:30.607411Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.594702Z","title":null,"venue":null,"work_id":"2a490bec-d1b8-4376-99d4-ae0af0bbc02f","year":2016},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.250441Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:145f87d9ff9d5ff9a30ae70c7eb509a36ce6a44bd6c40e97207a59f177e11086","observation_id":"e2354f09-b3c4-4ded-aedf-65be06d3287a","resolution":{"observed_at":"2026-08-10T13:39:30.597881Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-10T13:39:29.254876Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.254876Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:be9999cd595608bc44b46eb96e7b13afa407672c96b8921791ab7cdaf2c1db5e","observation_id":"23e40b6a-47e3-402e-a27c-ead84c8a9fcd","resolution":{"observed_at":"2026-08-10T13:39:29.254876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.258831Z","title":null,"venue":null,"work_id":null,"year":1965},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.258831Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:00c5e6e64f9829fea1829731825ce8a8a55f2b9359e9be3bab40c5ba9377b702","observation_id":"7dacc97c-e174-422f-b3f9-4365b305c853","resolution":{"observed_at":"2026-08-10T13:39:29.258831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.585661Z","title":"Brown, Dandelion Mané, Aurko Roy, Martín Abadi, and Justin Gilmer","venue":null,"work_id":"74ea85b3-95ca-4658-9950-6ca10a274165","year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.262476Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:220a4ca3fbddb66b8c1c1abd82dd294ff8ebd46cb1f68d794f32e5ca0ff91228","observation_id":"f183d860-0b76-4cd6-be57-267803b32b9d","resolution":{"observed_at":"2026-08-10T13:39:30.588782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.576362Z","title":null,"venue":null,"work_id":"a46cb00e-0612-4de4-9345-63669acc2d60","year":2024},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.270448Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:8f9b59c92a5d219e2ba9d95c23879bc4d3ab7cf2eed33c579abcde7eb9fe5175","observation_id":"e286cc48-de8c-413d-8d57-08cbfe3aed80","resolution":{"observed_at":"2026-08-10T13:39:30.579476Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.565606Z","title":null,"venue":null,"work_id":"d009ad3f-de22-43f3-b207-8c4e703b1727","year":2023},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.274540Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:18b51f3bd9e0f77881030fc03adbbbd0528aae14335bb419aae71f001c06ea72","observation_id":"4327b9d2-efd4-4d5f-97d9-cd551d60a6e6","resolution":{"observed_at":"2026-08-10T13:39:30.569397Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.555803Z","title":null,"venue":null,"work_id":"b2db3ffc-9b36-4039-a302-de72b2849bb7","year":2024},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.278841Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:35a922537f018a4c0daf9ef382f3712d04800ec824744f5f9bc2c3291c8b6692","observation_id":"3fdb41b4-4454-46bf-8183-c4ebb8db21a9","resolution":{"observed_at":"2026-08-10T13:39:30.559541Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-11T03:41:16.906633Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-10T13:39:29.281974Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.281974Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:b832286521371b7ddac0a6109c8d2424421ff0c36961b2586fa66dcdb759cf0d","observation_id":"78baaa0b-f1c3-41d6-b9e5-daff0bc48d52","resolution":{"observed_at":"2026-08-10T13:39:29.281974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14633","last_updated":"2021-10-27T17:59:46Z","snapshot_observed_at":"2026-08-08T11:26:05.124575Z","submitted_at":"2021-10-27T17:59:46Z","title":"Similarity and Matching of Neural Network Representations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14633","snapshot_observed_at":"2026-08-10T13:39:29.286041Z","title":"Matszangosz, Gergely Papp, and Dániel Varga","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.286041Z"},"links":{"cited_paper":"/paper/2110.14633","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:6f35b281f8bb186087c8ff1a40c2625a0e73c2de9ecd7bb69eb025c5efe9212e","observation_id":"d3a44a80-f09d-4d3b-bec9-2fe62fd3b635","resolution":{"observed_at":"2026-08-10T13:39:29.286041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.02900","last_updated":"2017-05-08T14:55:32Z","snapshot_observed_at":"2026-07-06T05:41:43.164281Z","submitted_at":"2017-05-08T14:55:32Z","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.02900","snapshot_observed_at":"2026-08-10T13:39:29.289969Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.289969Z"},"links":{"cited_paper":"/paper/1705.02900","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:f63e8b61aa6f7a868043a5de0e80840adf0558231183d249c852eb08111508da","observation_id":"5cc43be8-4644-4da5-9cbc-dd574ac45dfb","resolution":{"observed_at":"2026-08-10T13:39:29.289969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.546322Z","title":null,"venue":null,"work_id":"0ffc382a-61a8-4baf-9c7c-105a2be3d350","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.295116Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:f56c6bc6444e6e8fdb58cc7d59176b7a60fee9e2ad5cebc27828781d29348b0a","observation_id":"2e9daab8-6220-4a7b-bbf1-4fcd0f10eca3","resolution":{"observed_at":"2026-08-10T13:39:30.549807Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.373254Z","title":null,"venue":null,"work_id":"5bcb5669-3a28-41c4-a9dd-34692f82a188","year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.298838Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:abff4282af6be731e6fa88c4eba725950cb344625cbc9b8513f20275dd78ae01","observation_id":"4114dccc-726f-4442-9115-108f16b46a2e","resolution":{"observed_at":"2026-08-10T13:39:30.529750Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T13:39:29.303013Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.303013Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:3407cd47c20205e10b9e98dd4eb34b0da840d9c235bc2c0d4a3fc9761d4580c6","observation_id":"b178382a-3a1f-4ee9-9af2-fc13274d4ce3","resolution":{"observed_at":"2026-08-10T13:39:29.303013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2019.00681","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.087663Z","title":null,"venue":null,"work_id":"0d899254-16b4-4290-bdd9-b6a0dd0d1031","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.307208Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:7b26012f835b071d254bb51537eb9eccc7096b0c55368a4d067806154dd37a35","observation_id":"9ab491d0-6366-47ad-8879-4bbb246fbfc4","resolution":{"observed_at":"2026-08-10T13:39:30.093832Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.08546","last_updated":"2022-02-17T09:44:57Z","snapshot_observed_at":"2026-08-11T07:42:33.439100Z","submitted_at":"2022-02-17T09:44:57Z","title":"An overview of deep learning in medical imaging","version":1},"cited_work":{"arxiv_id":"2202.08546","doi":null,"metadata_source":"pith","pith_arxiv_id":"2202.08546","snapshot_observed_at":"2026-08-10T13:39:30.009012Z","title":"An overview of deep learning in medical imaging","venue":"eess.IV","work_id":"38472a3f-96b0-4031-a63a-9fc26402bfc4","year":2022},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.439149Z"},"links":{"cited_paper":"/paper/2202.08546","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:f868bf75d21db59f6ea3351a8b49cbba34ab7613bd4d43b7c8c8f5e4014604a5","observation_id":"1ee70280-925f-4eee-8f5a-246bbedb4dc4","resolution":{"observed_at":"2026-08-10T13:39:30.012679Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.449766Z","title":"Hardoon, Sandor Szedmak, and John Shawe-Taylor","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.449766Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:0c15f389fd738918238ee6d0d577d523a66a24be868eb44517aee5632ad19d90","observation_id":"d0a223d6-5dd9-4e76-9c17-ad5f60f62788","resolution":{"observed_at":"2026-08-10T13:39:29.449766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.procs.2020.04.177","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.640660Z","title":null,"venue":null,"work_id":"b548618a-4e48-408d-ac01-fc1111346740","year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.453901Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:ce5fe3423eec5484af6bdd7274e92b5700efbe12d5a3871ae9752b6119044d85","observation_id":"5703fc73-dcef-42c2-a61e-63f723f6618f","resolution":{"observed_at":"2026-08-10T13:39:29.643613Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.00414","last_updated":"2019-07-19T14:59:45Z","snapshot_observed_at":"2026-07-06T07:49:47.294073Z","submitted_at":"2019-05-01T17:57:26Z","title":"Similarity of Neural Network Representations Revisited","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.00414","snapshot_observed_at":"2026-08-10T13:39:29.458025Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.458025Z"},"links":{"cited_paper":"/paper/1905.00414","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:eeac7aac7ae64fe1196b3d1c546f2eda9d8c999ade0652d807a74278f5c99adb","observation_id":"92df9cc7-4283-4111-9acb-86b73a6ca18b","resolution":{"observed_at":"2026-08-10T13:39:29.458025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s11042-021-11480-0","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.630672Z","title":null,"venue":null,"work_id":"e2e2d837-ede2-4f12-a045-e50ab420d039","year":2022},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.462049Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:c46f73363ceb7c2492dfb50fbdeddfe1d9e0650dab712eaf32dd2189cfa7cd2f","observation_id":"28a6bba4-f0bf-40db-8d75-052a72f5dc8d","resolution":{"observed_at":"2026-08-10T13:39:29.634680Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.364351Z","title":null,"venue":null,"work_id":"5dc5bb60-0976-452e-bf10-1f66ec535536","year":2021},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.466287Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:f71265bf333c0a1999f488e5de99cdef56f19d130d1cd4ddd16c7e8a5b491944","observation_id":"78698f09-733f-4182-8960-e9fef2538fa9","resolution":{"observed_at":"2026-08-10T13:39:30.367351Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-07-06T05:17:56.287788Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-10T13:39:29.469363Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.469363Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:272b550c595118cf8b7e6e8fe8aba25a4a0f237c5a5ee62cf5f0b955f7575b3b","observation_id":"0d49ca51-aea7-4cc0-9a5d-6b298594b107","resolution":{"observed_at":"2026-08-10T13:39:29.469363Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-10T13:39:29.472827Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.472827Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:781da8fd8cde63ce726847d9becec3c1354f28000dcf13481aa630dda8ec980f","observation_id":"0ce52694-daa0-4c7e-8121-9a5794ab21b3","resolution":{"observed_at":"2026-08-10T13:39:29.472827Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.355420Z","title":null,"venue":null,"work_id":"a00deff0-4b3b-4112-804a-e88aca3d635d","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.475861Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:675fcd39423b3eb072fdff9e5ae8bd7667ed797ee06d8bd039b443d26359ebcc","observation_id":"d2d17e8c-df20-410e-8614-f94d98036f2d","resolution":{"observed_at":"2026-08-10T13:39:30.358446Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.neucom.2022.10.046","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.620553Z","title":null,"venue":null,"work_id":"53b9ee0c-eebc-403a-86b4-d06d1a884259","year":2023},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.478818Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:35954575c82bbfc36af5b2b6be38c363b20d86f860937eaadc3eae4dccebde66","observation_id":"2a662ebc-6e97-4d66-b768-5a81707e4b07","resolution":{"observed_at":"2026-08-10T13:39:29.623775Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1610.08401","last_updated":"2017-03-09T17:01:25Z","snapshot_observed_at":"2026-07-06T05:16:07.194124Z","submitted_at":"2016-10-26T16:30:45Z","title":"Universal adversarial perturbations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.08401","snapshot_observed_at":"2026-08-10T13:39:29.482250Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.482250Z"},"links":{"cited_paper":"/paper/1610.08401","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:6c9236b6094abddefe5bf2384bbce6f58133789f9e7c5aadd816a52bfa14d3e0","observation_id":"d68c54ba-e6d0-4f26-bb30-f3efbc63d165","resolution":{"observed_at":"2026-08-10T13:39:29.482250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.347008Z","title":null,"venue":null,"work_id":"b6738508-e314-4010-a5d8-ec86336d0c04","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.486782Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:d7a4469fa6173881ec06cb5fb880c5fda989973370ad288254237412abd8ae91","observation_id":"22861d13-4fa0-4a31-816c-b6ea061861bb","resolution":{"observed_at":"2026-08-10T13:39:30.350012Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-10T08:37:57.468792Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-10T13:39:29.489898Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.489898Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:7ebd364d22918487cc7ee4a1c5ab18345df11d3e4fd49cbbbb32962e83f9bd5a","observation_id":"16e9d9a4-449a-4c37-ab0d-08086c6e53e9","resolution":{"observed_at":"2026-08-10T13:39:29.489898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1602.02697","last_updated":"2017-03-19T14:50:18Z","snapshot_observed_at":"2026-08-10T10:50:28.154315Z","submitted_at":"2016-02-08T19:12:25Z","title":"Practical Black-Box Attacks against Machine Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1602.02697","snapshot_observed_at":"2026-08-10T13:39:29.494318Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.494318Z"},"links":{"cited_paper":"/paper/1602.02697","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:f5de4d5d459858c5bfd698feeebcd514b0f8f1b44f1e3c1d5dd7c235b79f39a1","observation_id":"6d3a3ce9-f795-44c5-9a53-8adfad73243d","resolution":{"observed_at":"2026-08-10T13:39:29.494318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.07528","last_updated":"2015-11-24T01:07:08Z","snapshot_observed_at":"2026-08-04T23:22:01.681405Z","submitted_at":"2015-11-24T01:07:08Z","title":"The Limitations of Deep Learning in Adversarial Settings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.07528","snapshot_observed_at":"2026-08-10T13:39:29.497753Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.497753Z"},"links":{"cited_paper":"/paper/1511.07528","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:73c314cc7e181c86d99a707dd6377721fdfafdd61ef314a33078e388b9cdf961","observation_id":"13d75018-3c44-42a1-9388-c5bd9effd492","resolution":{"observed_at":"2026-08-10T13:39:29.497753Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.501173Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.501173Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:7cffc1673ce8981511e0e259d3bfbc10d6f62533577a757f9b2d31bc9279461c","observation_id":"e7cc0623-3a53-4576-b0a8-93bc33842a3f","resolution":{"observed_at":"2026-08-10T13:39:29.501173Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.331031Z","title":null,"venue":null,"work_id":"ad61ab59-f409-4aef-b304-cb2e70ec9f26","year":2011},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.507959Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:6b3f8ed40a3e2ce643a051ae89116c519a86dea5e0cc948b5cd562589bec8a42","observation_id":"a8a59bd5-bc9a-4a81-b701-1a0517f5ceeb","resolution":{"observed_at":"2026-08-10T13:39:30.334787Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"cited_work":{"arxiv_id":"1907.06291","doi":null,"metadata_source":"pith","pith_arxiv_id":"1907.06291","snapshot_observed_at":"2026-08-10T13:39:29.927714Z","title":"Measuring the Transferability of Adversarial Examples","venue":"cs.LG","work_id":"7c91d708-e0ca-4798-937d-fca5a66eaa66","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.511016Z"},"links":{"cited_paper":"/paper/1907.06291","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:05217d0f828200f9a530ebf63ec2ef0a4ba950f56e08f7cac289c1a4ad1201d4","observation_id":"5b497488-5429-4674-87d4-09aa7a119f07","resolution":{"observed_at":"2026-08-10T13:39:29.930963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.3390/s20133699","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.611157Z","title":null,"venue":null,"work_id":"0ac587d0-d953-4f9a-a695-02b1bb888b1f","year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.514301Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:06a5570a5da2a7c24aa70e7eeb6354a99eefc44a01002704aef833798c0bd50d","observation_id":"8a72a1aa-fdca-4a8f-b5ce-a2931ae35c32","resolution":{"observed_at":"2026-08-10T13:39:29.614170Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.517674Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.517674Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:c6abb2a37d438fa69f81ba18897cea34b272ccbcc707d50ef3a66af88e4b96c2","observation_id":"643c0714-1b52-415e-b1a5-2d6cec638c46","resolution":{"observed_at":"2026-08-10T13:39:29.517674Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.05806","last_updated":"2017-11-08T08:36:27Z","snapshot_observed_at":"2026-08-07T13:14:16.116605Z","submitted_at":"2017-06-19T07:09:20Z","title":"SVCCA: Singular Vector Canonical Correlation Analysis for Deep Learning Dynamics and Interpretability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.05806","snapshot_observed_at":"2026-08-10T13:39:29.520836Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.520836Z"},"links":{"cited_paper":"/paper/1706.05806","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:e2b9f771794e8439fa79f27cb12391d00371d76360c7b8aa7b55edc130d3b831","observation_id":"53a90c95-c7cd-41cb-a9ea-1f0a94135d9f","resolution":{"observed_at":"2026-08-10T13:39:29.520836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2024.12494","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.905621Z","title":null,"venue":null,"work_id":"83f8b758-cbdb-4b31-861e-5c5dfd1fa63c","year":2024},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.523881Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:3fc580196d4e45fb16a0142870ba915c80bf886cdf6155cd8304f2237753ff29","observation_id":"20d58510-4f4b-45e3-87fe-25346c836972","resolution":{"observed_at":"2026-08-10T13:39:29.910194Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.318946Z","title":null,"venue":null,"work_id":"e905adaf-7e4d-4fa4-9600-4151a75f9cbe","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.527078Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:5cc3822dc3d07ce3d34cbde46d285b9d70c40c542c714ec8231461f6de41bdae","observation_id":"69201265-852e-4be8-995b-266fed7c9c56","resolution":{"observed_at":"2026-08-10T13:39:30.322640Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.309918Z","title":null,"venue":null,"work_id":"e8df0372-39cd-41fb-b950-5dde87deadb9","year":2018},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.530026Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:3916dd36816a755a04379883bb53803671fd9a55ce6885605e456bab69dc3838","observation_id":"7498500c-e65f-4f26-a04d-29fadce09d4a","resolution":{"observed_at":"2026-08-10T13:39:30.313149Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.301113Z","title":null,"venue":null,"work_id":"13685e52-6dfc-4df3-b8d1-016076923a2c","year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.533424Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:849f0fe6f5c15d4bc9baec0966b0333717001c9b2cffa8692a05bdc3cdad949b","observation_id":"e921bf00-86c8-464f-ba59-86d0e62d4bb0","resolution":{"observed_at":"2026-08-10T13:39:30.304218Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.neucom.2022.08.071","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.592877Z","title":null,"venue":null,"work_id":"b48ce61b-0b66-488c-95ec-ca51c84dc1e9","year":2022},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.540295Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:05f9b225418e4c94480c266ba3158cf0c508c4af7d16be9787f9dd06889ed0cc","observation_id":"49c0b5ff-dd5d-4bb9-bec8-5d7965cda86c","resolution":{"observed_at":"2026-08-10T13:39:29.597826Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-10T13:39:29.543387Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.543387Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:fdf4f00cb3fc3370751a736e20e5bc5879af2c95960c2d157126da1b48c844b0","observation_id":"ec814136-316c-4c88-afb0-8b9ef3e5d739","resolution":{"observed_at":"2026-08-10T13:39:29.543387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03453","last_updated":"2017-05-23T18:14:30Z","snapshot_observed_at":"2026-08-10T02:09:23.548888Z","submitted_at":"2017-04-11T17:59:12Z","title":"The Space of Transferable Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.03453","snapshot_observed_at":"2026-08-10T13:39:29.546846Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.546846Z"},"links":{"cited_paper":"/paper/1704.03453","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:6b6efca8329fa3974ddab13391fe92130d0a54842671055b5da13878c0ffac18","observation_id":"59ae9a05-dabf-4c0e-bf80-9b02f88f7741","resolution":{"observed_at":"2026-08-10T13:39:29.546846Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:29.549963Z","title":"Oliphant, Matt Haberland, Tyler Reddy, David Cournapeau, Evgeni Burovski, Pearu Peterson, Warren Weckesser, Jonathan Bright, Stéfan J","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.549963Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:6dc0ad87ea2a43a8642086f56898d525dee77ebdc46001c206ce0528a0a69f49","observation_id":"cf9547ed-2c50-4cb0-9434-25196d682e05","resolution":{"observed_at":"2026-08-10T13:39:29.549963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.286116Z","title":null,"venue":null,"work_id":"4d21f247-a09d-4421-b3d9-15ce28ae002b","year":2020},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.552605Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:cc09212a84d6e971dcad9d940c40ee61a2b563fcbc407983a6cfb31b4eeccc0a","observation_id":"10772fb0-b27c-49f0-8529-51dd3099d952","resolution":{"observed_at":"2026-08-10T13:39:30.288620Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T13:39:30.276285Z","title":null,"venue":null,"work_id":"dc378184-7ab7-4a28-a792-7664f61a5528","year":2018},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.555793Z"},"links":{"citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:0c5fb19eed13ec2e0b6011b3b3521fc4b8fa58b9ba3248e01fdbd280ef3bd629","observation_id":"94c83a13-3cb7-4e22-b2d1-591193a8d503","resolution":{"observed_at":"2026-08-10T13:39:30.280195Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.12321","last_updated":"2021-10-24T00:25:09Z","snapshot_observed_at":"2026-08-09T15:40:01.912219Z","submitted_at":"2021-10-24T00:25:09Z","title":"ADC: Adversarial attacks against object Detection that evade Context consistency checks","version":1},"cited_work":{"arxiv_id":"2110.12321","doi":null,"metadata_source":"pith","pith_arxiv_id":"2110.12321","snapshot_observed_at":"2026-08-10T13:39:29.790826Z","title":"ADC: Adversarial attacks against object Detection that evade Context consistency checks","venue":"cs.CV","work_id":"3cf63123-ee1e-48e1-9e97-bc6a02fbf839","year":2021},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.559427Z"},"links":{"cited_paper":"/paper/2110.12321","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:c4ecd16308a2478ae2fab3186cfb97fd7f93b733bbad9d95bea972e2f151dd7a","observation_id":"15cc9979-f4d9-4268-a551-609d4b9b1cd6","resolution":{"observed_at":"2026-08-10T13:39:29.794384Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.06796","last_updated":"2019-04-11T00:04:22Z","snapshot_observed_at":"2026-07-06T07:27:55.005906Z","submitted_at":"2019-01-21T05:55:42Z","title":"Adversarial Attacks on Deep Learning Models in Natural Language Processing: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.06796","snapshot_observed_at":"2026-08-10T13:39:29.563385Z","title":"Sheng, Ahoud Alhazmi, and Chenliang Li","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.563385Z"},"links":{"cited_paper":"/paper/1901.06796","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:66bdb19b26dbc68a60807871c0283d58ffe9303c6c3d013183300628c8143f60","observation_id":"c7a3085c-aac9-40c1-a77b-6f3a3d818f03","resolution":{"observed_at":"2026-08-10T13:39:29.563385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2103.17122","last_updated":"2021-03-31T14:44:58Z","snapshot_observed_at":"2026-07-06T10:55:19.170860Z","submitted_at":"2021-03-31T14:44:58Z","title":"Adversarial Attacks and Defenses for Speech Recognition Systems","version":1},"cited_work":{"arxiv_id":"2103.17122","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.17122","snapshot_observed_at":"2026-08-10T13:39:29.664627Z","title":"Adversarial Attacks and Defenses for Speech Recognition Systems","venue":"eess.AS","work_id":"b51b4e44-d5c3-492f-8317-40ac3a6e7266","year":2021},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.566779Z"},"links":{"cited_paper":"/paper/2103.17122","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:3ab9a5a57f94a421ab664c10b1102ac6e51f861ffd9c8f311e92129a0909db64","observation_id":"00d2836d-71db-4389-8440-b69acfac968c","resolution":{"observed_at":"2026-08-10T13:39:29.669435Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.04508","last_updated":"2016-03-14T13:08:09Z","snapshot_observed_at":"2026-08-04T04:27:20.640318Z","submitted_at":"2015-11-14T04:51:04Z","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.04508","snapshot_observed_at":"2026-08-10T13:39:29.504463Z","title":"arXiv:1511.04508 [cs.CR]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.504463Z"},"links":{"cited_paper":"/paper/1511.04508","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:a4e56c0c8aa33f212d82004277781e9981eb4e9926d801219bbc584d41382dfc","observation_id":"df51c267-43b6-4b92-85bc-1cecc0bedb32","resolution":{"observed_at":"2026-08-10T13:39:29.504463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-10T13:39:29.266830Z","title":"arXiv:1712.09665 [cs]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.266830Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:cde01c0f2b71e51498f4090e00f53bf1d62d0e92636cfb3dea633874a6fc6ef2","observation_id":"c2942652-6acd-4c54-8525-a1212f5e81e5","resolution":{"observed_at":"2026-08-10T13:39:29.266830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1808.01688","last_updated":"2019-03-04T00:35:26Z","snapshot_observed_at":"2026-07-06T06:54:07.751220Z","submitted_at":"2018-08-05T21:43:01Z","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1808.01688","snapshot_observed_at":"2026-08-10T13:39:29.536866Z","title":"arXiv:1808.01688 [cs]","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.536866Z"},"links":{"cited_paper":"/paper/1808.01688","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:16d137d5a186c091654568a0d0f2abdf1928c72a4edb1e90a9a6ce415365558c","observation_id":"6f70aa74-8809-4daf-aeca-2ab31a294da1","resolution":{"observed_at":"2026-08-10T13:39:29.536866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1912.01667","last_updated":"2020-02-07T09:17:38Z","snapshot_observed_at":"2026-08-01T19:15:11.105038Z","submitted_at":"2019-12-03T20:06:49Z","title":"A Survey of Black-Box Adversarial Attacks on Computer Vision Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.01667","snapshot_observed_at":"2026-08-10T13:39:29.246475Z","title":"arXiv:1912.01667 [cs.LG]","venue":null,"work_id":null,"year":1912},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.246475Z"},"links":{"cited_paper":"/paper/1912.01667","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:ed06c3c7b5f015ff6753bf93db35c42ad3ba784b8f6f302fd6e4dbca67d5c9b2","observation_id":"7d43d78b-2b66-4774-8f85-782f0a5d9d7a","resolution":{"observed_at":"2026-08-10T13:39:29.246475Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks"},"reference_resolution":{"displayed":58,"state_counts":{"malformed_identifier":1,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":43,"verified_exact":11,"verified_fuzzy":1},"total_outbound_references":58},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 58 of 58 outbound references and 0 inbound Pith citation observations for arXiv:2501.18629."}