{"as_of":"2026-08-10T04:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e57a2794581e05f0c1bea1479f0517611229036855aef3c5d1935833c9dc92e0","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T15:57:24.475857Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.01262/citation-record","integrity":"/paper/2502.01262/integrity","json":"/paper/2502.01262/citation-record.json","paper":"/paper/2502.01262"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.450308Z","title":"Cospgd: an efficient white-box adversarial attack for pixel-wise prediction tasks","venue":null,"work_id":"c65b94f4-4ae3-4a60-95e1-4fcc5690f86c","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.194573Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:0d628d52e2455108c4c067c12e6bbe15c3c29d7c1d3111f1582b5abbb2af3b31","observation_id":"7a21fb2b-6fe1-4bea-9728-9efd6f4a85e8","resolution":{"observed_at":"2026-08-09T15:57:25.455133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.435655Z","title":"Understanding and improving fast adversarial training","venue":null,"work_id":"5e9b83ab-7420-4d32-83d5-b7fb0cb7dd54","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.200458Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:5ae70f49d05db5587b16a8f3bf9b079e1f5aa57d6a60907859f15e51feea6e73","observation_id":"27543e4b-3d8b-48be-853d-766fc41f1f12","resolution":{"observed_at":"2026-08-09T15:57:25.440479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.420157Z","title":"On the robustness of semantic segmentation models to adversarial attacks","venue":null,"work_id":"a89f1384-3dc4-4db4-80cb-a154eb2e2665","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.205755Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:da1e46f72b1198d8fee2a0d23e91b70a0c61452b1d9141cfec6a4b58fe464f2c","observation_id":"ea8425da-aab9-4cbf-9be2-162e99cba728","resolution":{"observed_at":"2026-08-09T15:57:25.424946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.405011Z","title":"An adaptive model ensemble adversarial attack for boosting adversarial transferability","venue":null,"work_id":"fce4791d-d2e5-42ed-b3cd-f81aa28e1568","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.210994Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:5154eecbb05242cf847396feea8db40341726c1109a03810d0e3ec75874137cf","observation_id":"004063b8-66c1-4f32-b0c3-73d0834922b4","resolution":{"observed_at":"2026-08-09T15:57:25.409953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.09105","last_updated":"2024-03-04T11:30:06Z","snapshot_observed_at":"2026-08-07T09:14:57.287507Z","submitted_at":"2023-03-16T06:37:16Z","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.09105","snapshot_observed_at":"2026-08-09T15:57:24.216566Z","title":"Rethinking model ensemble in transfer-based adversarial attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.216566Z"},"links":{"cited_paper":"/paper/2303.09105","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:0c256bf7834b2897fa5209b39aac5f9b3907485270de1d9dc13fc84b1e3feafa","observation_id":"ae5528c5-2f1c-4115-9605-213bd1895ed4","resolution":{"observed_at":"2026-08-09T15:57:24.216566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.05587","last_updated":"2017-12-05T18:06:21Z","snapshot_observed_at":"2026-08-07T13:44:53.690521Z","submitted_at":"2017-06-17T22:48:57Z","title":"Rethinking Atrous Convolution for Semantic Image Segmentation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.05587","snapshot_observed_at":"2026-08-09T15:57:24.221864Z","title":"Rethinking atrous convolution for semantic image segmentation","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.221864Z"},"links":{"cited_paper":"/paper/1706.05587","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b0d6497392d9f1faccc21f52028206bcd2d193ed5f6af342a52bb4f8ac31b3f9","observation_id":"fdbae40d-ce04-44d4-ba28-8aa84f122fee","resolution":{"observed_at":"2026-08-09T15:57:24.221864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.389757Z","title":"Encoder-decoder with atrous separable convolution for semantic image segmentation","venue":null,"work_id":"332cd862-f76c-4248-90ea-45e25e26bd55","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.227614Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:bfe644a56936f26602705d221cf90e40b2cc09043cd9912d473479d6016a81b0","observation_id":"5acda7bb-21f0-40e5-ba04-49f39bf26225","resolution":{"observed_at":"2026-08-09T15:57:25.394903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.374799Z","title":"Masked-attention mask transformer for universal image segmentation","venue":null,"work_id":"ee3fd970-6810-411f-8bf2-c541f32221e5","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.232258Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:44a3c924a3a782af404da5f14e31243338e47517e5676053d1973ba93a6fc3e2","observation_id":"09444564-b4e3-44c6-9b8d-4acd05c22639","resolution":{"observed_at":"2026-08-09T15:57:25.379450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.359986Z","title":"The cityscapes dataset for semantic urban scene understanding","venue":null,"work_id":"920a0642-0506-49b7-9619-dfde52953771","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.236941Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:0560b7502f8684d5c40e3bae59257d01eb21a2aa4c826443cc28a052fc53c5d1","observation_id":"c5e5e93b-b13c-4b43-b0d8-892a01ae5caf","resolution":{"observed_at":"2026-08-09T15:57:25.364728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.344560Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"3b499c49-8c1e-42c4-9a27-8c4e06068937","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.241724Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f4464aec00ac089449563b65d636683975c18d114fc486837a20ddec14be5644","observation_id":"138c10e2-e74c-48b9-8c0f-b16ad28b5c76","resolution":{"observed_at":"2026-08-09T15:57:25.349448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.329286Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"fb8465a1-3bf9-4b28-a885-fd01277ef5d1","year":2019},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.246547Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7627e2d18f67a65ae1b75496546aad84194e3ea040f35e72e77912ba80a95293","observation_id":"7aff01b0-150e-4780-9184-851528d6673b","resolution":{"observed_at":"2026-08-09T15:57:25.334307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.315032Z","title":"Everingham, L","venue":null,"work_id":"d34881bf-77a4-4b9e-bbb2-6b21846acb7d","year":2012},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.251724Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:72d4df18399170a8eb65383f781e87f30593b698489474f09768cd3bfeccdf41","observation_id":"bf095d7c-348c-4d80-8ce2-623443ea0768","resolution":{"observed_at":"2026-08-09T15:57:25.319455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.300180Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"179711ac-6262-4c46-9ecb-09226e848903","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.256472Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:fe7ddfa8364ca56da06850c0a191a0e683aabf0a1ad57d20ea09466a29fd8cf5","observation_id":"3a2843c6-2fc1-4966-a69f-613319a58881","resolution":{"observed_at":"2026-08-09T15:57:25.304855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.286166Z","title":"Generative adversarial networks","venue":null,"work_id":"8decd2a8-6e63-4f46-8507-3ee759a13620","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.261076Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:52ede96cab0bcf7cfa3c04d0cd441542e6f5d1e9daeaa0b266485938bfedef8f","observation_id":"a087d409-994a-4a39-95a7-98f28e0388b1","resolution":{"observed_at":"2026-08-09T15:57:25.290584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-09T15:57:24.265693Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.265693Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:3dc5cb977bbc6e438063a04402d6e0e95dd9df4172a2dfd41b2ab1d1b2f169b8","observation_id":"0eb70d03-6293-4272-950a-1cd065124f1d","resolution":{"observed_at":"2026-08-09T15:57:24.265693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10055","last_updated":"2021-02-19T17:35:07Z","snapshot_observed_at":"2026-07-06T10:42:55.841749Z","submitted_at":"2021-02-19T17:35:07Z","title":"Effective and Efficient Vote Attack on Capsule Networks","version":1},"cited_work":{"arxiv_id":"2102.10055","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10055","snapshot_observed_at":"2026-08-09T15:57:24.693764Z","title":"Effective and Efficient Vote Attack on Capsule Networks","venue":"cs.CV","work_id":"045c2675-0173-4779-9390-58c15b09caae","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.270638Z"},"links":{"cited_paper":"/paper/2102.10055","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:51394b4f476ff7c6c681ef17af8a864ecdfdbe0c88d0e8015e318d70c3160391","observation_id":"b8451284-809e-4e4b-879f-a367d630ed32","resolution":{"observed_at":"2026-08-09T15:57:24.698533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.271615Z","title":"Segpgd: An effective and efficient adversarial attack for evaluating and boosting segmentation robustness","venue":null,"work_id":"5b7df8b4-5afb-44b7-9e12-9714ed0a830f","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.275577Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:29230b86eef1310540ed3fac9c133efb946d15f27f5d520edfa3fe24ac87aa74","observation_id":"1eba4e5d-1ddc-42ef-ad72-6e4e4cde825f","resolution":{"observed_at":"2026-08-09T15:57:25.276625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.256569Z","title":"Lgv: Boosting adversarial example transferability from large geometric vicinity","venue":null,"work_id":"ef4a91e0-0eaa-45da-a824-eb5f93fe8dd1","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.280133Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7de9a164d51eea3659bd307c0f8e3c23d4ce769cd0e5d439931231bc51cab96d","observation_id":"da617a6d-3276-46f6-9631-a6366c3b89f6","resolution":{"observed_at":"2026-08-09T15:57:25.261328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.241543Z","title":"Backpropagating linearly improves transferability of adversarial examples","venue":null,"work_id":"23f1b6e4-d7d3-4961-bc6f-8bf819d2b014","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.284750Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:54432eaf73e3c3e8b7217feb8aeecd84be1b3cfb7598acd3f066fa8f52d9c35d","observation_id":"9a18f822-151c-4105-89c4-811e562e3fea","resolution":{"observed_at":"2026-08-09T15:57:25.246362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.226498Z","title":"Hypercolumns for object segmentation and fine-grained localization","venue":null,"work_id":"76f332a8-d16d-4e2e-91e4-1476f5b1341e","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.289471Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2353ed152300fec6d670569ef9ac91b74b01d79944c557377e9a506dcf4a88e0","observation_id":"ae62850d-1e94-4b55-b1bc-22dd98c39d5a","resolution":{"observed_at":"2026-08-09T15:57:25.231365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.210526Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"015361a7-d9b4-411e-9e37-ec485c865534","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.294071Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2ee53feb39537d79c727b4309045e600827afb40d0e7f59eb43a2eb7b3f52f36","observation_id":"0e5e983e-3ef6-4030-bcdd-2670ba112ce2","resolution":{"observed_at":"2026-08-09T15:57:25.215554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.16572","last_updated":"2023-08-21T11:05:22Z","snapshot_observed_at":"2026-08-07T06:23:43.735184Z","submitted_at":"2023-07-31T11:05:55Z","title":"Transferable Attack for Semantic Segmentation","version":2},"cited_work":{"arxiv_id":"2307.16572","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.16572","snapshot_observed_at":"2026-08-09T15:57:24.672231Z","title":"Transferable Attack for Semantic Segmentation","venue":"cs.CV","work_id":"775d2bb3-25ba-4e65-a282-e2b965883fe0","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.298590Z"},"links":{"cited_paper":"/paper/2307.16572","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:56c82eeee4f5e396b52e2a33ecf724b83d8787c7315fbe5b98a6fa33026bc16b","observation_id":"59b1ced0-7572-41f5-a59d-1b57a9503d49","resolution":{"observed_at":"2026-08-09T15:57:24.677433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.195487Z","title":"Densely connected convolutional networks","venue":null,"work_id":"2fd0784c-0fb2-4da9-8cda-55e46b1551b5","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.303636Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:a6cc6715fc60c5a8faca5d66150cb9d32d4be783d141b71366c2e0513f45cc6e","observation_id":"7e05b20f-87b3-49b2-94ea-f3ae95678942","resolution":{"observed_at":"2026-08-09T15:57:25.200152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.180342Z","title":"T-sea: Transfer-based self-ensemble attack on object detection","venue":null,"work_id":"4a1fbdfa-1eaf-47da-b185-eadf23eec6d3","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.308373Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:c1c94e95b62f9a85c6f206c15f38adc3ff44f1545db6baf43fabecf2bf103407","observation_id":"807dbbbd-cef2-4dc8-a9d8-15a864d8e031","resolution":{"observed_at":"2026-08-09T15:57:25.185203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.165573Z","title":"Enhancing adversarial example transferability with an intermediate level attack","venue":null,"work_id":"c8b39ce4-cc20-42a5-b0bd-81997e372fc6","year":null},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.312894Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2ee6e958b12992c59d8aeb341c79e415de04c2b1f96550e27d3632abe89237fe","observation_id":"e5b6e078-24bb-4f4f-a9b9-2772f824cf22","resolution":{"observed_at":"2026-08-09T15:57:25.170358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02207","last_updated":"2023-12-03T00:48:33Z","snapshot_observed_at":"2026-07-06T16:56:49.877351Z","submitted_at":"2023-12-03T00:48:33Z","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","version":1},"cited_work":{"arxiv_id":"2312.02207","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.02207","snapshot_observed_at":"2026-08-09T15:57:24.649960Z","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","venue":"cs.CV","work_id":"ddccdd21-3410-4539-955e-fa7ec5c09f08","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.317785Z"},"links":{"cited_paper":"/paper/2312.02207","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:75b3fa546835f66af74808b5180156a435872d4abf08d24bede3e7d5aa72d2f4","observation_id":"aa92fb1d-0047-4902-a9c5-335d9354b9dc","resolution":{"observed_at":"2026-08-09T15:57:24.655125Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.150025Z","title":"Pearl: Preprocessing enhanced adversarial robust learning of image deraining for semantic segmentation","venue":null,"work_id":"c0fe32ad-84dc-4c31-be23-0880dde53c80","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.322585Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:90031e1dc7cfbb0ebe09cf9bc2c564094d6b45c8f80a5573ed99d1aed8928fad","observation_id":"47131abe-0990-45aa-b6bc-cd298c9af962","resolution":{"observed_at":"2026-08-09T15:57:25.155217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.135283Z","title":"Yet another intermediate-level attack","venue":null,"work_id":"043b185a-3dfd-4327-9166-61a9a2ed57d6","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.327440Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f8690d779b428a60abfac4c79b4f93067bb996a7b631440de7a8dd14d956951c","observation_id":"2bc4675d-562b-40bb-aa04-d0e5f792246d","resolution":{"observed_at":"2026-08-09T15:57:25.139975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.119575Z","title":"Making substitute models more bayesian can enhance transferability of adversarial examples","venue":null,"work_id":"3459bdd8-5a19-493d-8d96-1fccf4fe79a4","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.332431Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7a80fb39c0b162c88c88563183613b8f07beba2c085cf5f5afebeea8f19874a6","observation_id":"5236ef05-d920-403d-84ed-e061f9c2d451","resolution":{"observed_at":"2026-08-09T15:57:25.124725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.103733Z","title":"Improving adversarial transferability via intermediate-level perturbation decay","venue":null,"work_id":"bfa12f42-23fb-4a5b-a38b-3b7fe709770f","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.337005Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:53cacd7d6eabf14d9f01112fb9903c43c1df44472fc4759f57cb801b966c22a9","observation_id":"d5b99d26-9293-4c03-8cb8-7b0b1e28207c","resolution":{"observed_at":"2026-08-09T15:57:25.108599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.088408Z","title":"Styless: boosting the transferability of adversarial examples","venue":null,"work_id":"4fb4be6e-1fcf-492c-bb34-5c245e8b32dd","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.341470Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:88759fb5a77c695425960c9318891c06e485ba797b161cf41c8cf44acaae23b6","observation_id":"9587e7f4-86f1-4b80-a2a6-3d48826f4e88","resolution":{"observed_at":"2026-08-09T15:57:25.093212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-07-06T08:14:59.387021Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-09T15:57:24.346108Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.346108Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7411b2edb866dbbad46c10cd6ef1a7ef882370c4bb137aacc43821cd18d4d250","observation_id":"bc606a3d-3acb-4a2e-96ac-28948d9e4aee","resolution":{"observed_at":"2026-08-09T15:57:24.346108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.072550Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"2a9c3246-c2e0-46d5-8fbd-860ab8a5d3ed","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.350971Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:6974923ca3a0f78baa095f045bb16a8ac2a4676b5eea6e52a9e56bb86d84c1ca","observation_id":"4c4977b3-8e23-4d96-870f-5ccdf14b4eab","resolution":{"observed_at":"2026-08-09T15:57:25.077774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.056264Z","title":"Fully convolutional networks for semantic segmentation","venue":null,"work_id":"4f36e925-f718-4bb7-bbaf-206a701be1e9","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.355431Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:8b4a752f5dc4d3627269cf08d57888d2ed2eadca69302de2cfad190480b10d80","observation_id":"1e67d0c3-9c90-4fe2-9b0a-38b4666ec747","resolution":{"observed_at":"2026-08-09T15:57:25.061064Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.041075Z","title":"On the convergence of an adaptive momentum method for adversarial attacks","venue":null,"work_id":"bfa7a73c-1d37-4dd9-a1b8-6bf4d7b646ad","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.359893Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:ea32bcb6bba438956c1bba0b27899c2aff70c94a4386adbd3b266b88fa1a1ba6","observation_id":"27faa0a1-59bb-41bc-9ae9-86e04a4b65e2","resolution":{"observed_at":"2026-08-09T15:57:25.046047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.025790Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"b5d9ad88-27b5-4b04-8a9a-0a52a0e83e6a","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.364461Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:35174145225c2212a7ccf710b5d9885bb43ba09309bc0e9abd572df5cefe3ae5","observation_id":"2d744001-abb5-4dbe-9b40-b6cbf5f86702","resolution":{"observed_at":"2026-08-09T15:57:25.030864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.010411Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"53d63d27-91a0-452c-aef3-0b2b0ec3f960","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.368959Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:ce64c45965b1cf8f3e3bad2b459965a3f32d979c8af520d0b10c1d3ecd442d50","observation_id":"3b3814fa-fee4-460d-9d13-ce8a513f3461","resolution":{"observed_at":"2026-08-09T15:57:25.015415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03946","last_updated":"2024-11-26T15:17:46Z","snapshot_observed_at":"2026-07-06T18:41:35.995594Z","submitted_at":"2024-07-04T14:02:12Z","title":"TrackPGD: Efficient Adversarial Attack using Object Binary Masks against Robust Transformer Trackers","version":2},"cited_work":{"arxiv_id":"2407.03946","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.03946","snapshot_observed_at":"2026-08-09T15:57:24.612637Z","title":"TrackPGD: Efficient Adversarial Attack using Object Binary Masks against Robust Transformer Trackers","venue":"cs.CV","work_id":"1e439206-1f13-4346-974e-0de4b11724e8","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.373541Z"},"links":{"cited_paper":"/paper/2407.03946","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:96a8721054cdd0eca8b77b371689beac3acea207827a5f562405ed85e486fa3a","observation_id":"05e96a04-603f-4f02-ab4b-17b5748f7678","resolution":{"observed_at":"2026-08-09T15:57:24.617686Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.995032Z","title":"A novel generator with auxiliary branch for improving gan performance","venue":null,"work_id":"a72bb993-9b7a-41bc-b10c-b91815f933ef","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.378470Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d5ee4bc44ddb4cab5ab1dd512164dad9a7fd471b16be13265eb9597f12974255","observation_id":"84615665-ed08-4c79-a796-84470ec5695c","resolution":{"observed_at":"2026-08-09T15:57:24.999917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.05527","last_updated":"2024-07-08T00:21:17Z","snapshot_observed_at":"2026-07-06T18:42:43.011995Z","submitted_at":"2024-07-08T00:21:17Z","title":"Rethinking Image Skip Connections in StyleGAN2","version":1},"cited_work":{"arxiv_id":"2407.05527","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.05527","snapshot_observed_at":"2026-08-09T15:57:24.590982Z","title":"Rethinking Image Skip Connections in StyleGAN2","venue":"cs.CV","work_id":"95d074b8-b0fe-4057-bc8f-32acb6ee8b2e","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.382999Z"},"links":{"cited_paper":"/paper/2407.05527","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:66a2636a37a35349b327e45c78370142367f6868a9112bcb206aa1c451e55ab7","observation_id":"498c8f08-6dc7-411a-9340-8513cdfbde2e","resolution":{"observed_at":"2026-08-09T15:57:24.596083Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.387743Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.387743Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d02ba7c4806ab3f910135882d1d57ffecc20aba8c4ae9260083d3af4efa418a7","observation_id":"b9a2d23c-e649-4b9a-b49c-90b17616b859","resolution":{"observed_at":"2026-08-09T15:57:24.387743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.970188Z","title":"Conditional convolution projecting latent vectors on condition- specific space","venue":null,"work_id":"5da68c6f-dd2e-43b6-bd0b-10e1689bcbbd","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.392223Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:edd1e19d20f80dd031b485444de926c48575b06242f882dfd312a4f3af5db6e4","observation_id":"adaecaf9-146a-4fc5-a010-d69c1e020411","resolution":{"observed_at":"2026-08-09T15:57:24.974919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.12607","last_updated":"2024-10-16T14:24:51Z","snapshot_observed_at":"2026-07-06T19:34:37.027078Z","submitted_at":"2024-10-16T14:24:51Z","title":"Low-Rank Adversarial PGD Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.12607","snapshot_observed_at":"2026-08-09T15:57:24.396812Z","title":"Low-rank adversarial pgd attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.396812Z"},"links":{"cited_paper":"/paper/2410.12607","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:e12cc06d5d42cbbbf26b4e8bd34a4278ba0e2054ee7b29270925d2541badd691","observation_id":"ef6926d1-6882-48c1-acdd-dca08248813e","resolution":{"observed_at":"2026-08-09T15:57:24.396812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.955292Z","title":"Accessorize to a crime: Real and stealthy attacks on state- of-the-art face recognition","venue":null,"work_id":"5e6ff9da-1f6e-43bf-b8c5-2e80bf4a2b89","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.401838Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:969501b0cff781bb3b539f0fe8a451ff3b5d8b31a9320d89d961eecc527bd9b7","observation_id":"4c9316d1-10e2-43bb-b812-58ce2737be8c","resolution":{"observed_at":"2026-08-09T15:57:24.960368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-09T15:57:24.406588Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.406588Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d5043b16bb678888ec50feb8f9eb60d8fd14f3cb3302afd48e13c698467953d0","observation_id":"5c4f5b1f-b09a-4ca0-8af1-f441f558b9e9","resolution":{"observed_at":"2026-08-09T15:57:24.406588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.940316Z","title":"Going deeper with convolutions","venue":null,"work_id":"8eff2940-c159-41db-83ad-74e3702d7943","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.411570Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7ee4524a57c0815d01ed802038ac3d155f1e34557888132801cff285eb15e313","observation_id":"182a7606-a2eb-4c4a-a72a-5ed6ec757868","resolution":{"observed_at":"2026-08-09T15:57:24.945062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21073","last_updated":"2024-07-29T09:07:29Z","snapshot_observed_at":"2026-08-05T09:55:43.398103Z","submitted_at":"2024-07-29T09:07:29Z","title":"Enhancing Adversarial Text Attacks on BERT Models with Projected Gradient Descent","version":1},"cited_work":{"arxiv_id":"2407.21073","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.21073","snapshot_observed_at":"2026-08-09T15:57:24.537448Z","title":"Enhancing Adversarial Text Attacks on BERT Models with Projected Gradient Descent","venue":"cs.LG","work_id":"08202c69-d5b7-43c0-bf3d-ed7da3ecd29e","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.416278Z"},"links":{"cited_paper":"/paper/2407.21073","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:e2c6fa7f5cd66fc17b13682946354577ac7f44ac5f609e9cc8e0f323b26f08d4","observation_id":"18665268-0209-4be4-a39d-bbe04d63d38c","resolution":{"observed_at":"2026-08-09T15:57:24.542624Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.925458Z","title":"Boosting adversarial transferability by block shuffle and rotation","venue":null,"work_id":"e99d8369-c355-4a5d-9aeb-277784d72ef6","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.421026Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d566fd4599bdfc0d4b3f5fde443919acd88b68fe38d809949bc9a0c1668e01d7","observation_id":"6651c1cc-dae0-4b2b-add1-a4b583b5ea36","resolution":{"observed_at":"2026-08-09T15:57:24.930446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.910352Z","title":"Admix: Enhancing the transferability of adversarial attacks","venue":null,"work_id":"ce451862-032e-437d-a8bb-5dd0b59a13ed","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.425548Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2204559d4e22ee564ef749487c96e147f3a5b027ff5d67f84dff85c22a70d57c","observation_id":"4d671bba-177f-4f02-b46c-5eb132fabe6b","resolution":{"observed_at":"2026-08-09T15:57:24.915407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.895416Z","title":"Feature importance-aware transferable adversarial attacks","venue":null,"work_id":"abaf6cde-6e8a-4048-b0a0-b5997d0493a4","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.429873Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:48a6c8145822f14604d180f5e94c611e9090fc563cbf8852c1a44925ea3a793f","observation_id":"862166a1-234d-4647-a48c-2a0d18be889d","resolution":{"observed_at":"2026-08-09T15:57:24.900190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.01361","last_updated":"2023-07-05T08:59:44Z","snapshot_observed_at":"2026-08-03T18:03:57.665535Z","submitted_at":"2023-05-02T12:27:44Z","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","version":3},"cited_work":{"arxiv_id":"2305.01361","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.01361","snapshot_observed_at":"2026-08-09T15:57:24.513079Z","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","venue":"cs.CV","work_id":"8b9bd787-e5db-41c0-bb2b-336c80e1cc2a","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.434457Z"},"links":{"cited_paper":"/paper/2305.01361","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:5a40b88ae903077afd1722cff5d041c71129e321dc64825d8b60397d03ba9f6c","observation_id":"4c87a177-a3d6-4c26-ac3e-c4efd23011ab","resolution":{"observed_at":"2026-08-09T15:57:24.520046Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.879172Z","title":"Rethinking the backward propagation for adversarial transferability","venue":null,"work_id":"d8943ce3-a405-484d-8f2b-a89d4866bd8a","year":1905},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.439397Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:ca12f1944c950a8cb6ba986bd3218bd31e8786666a79d86778fdc3f363e3d385","observation_id":"24eb3270-bf21-4d3c-aa6e-536f7d2ab34a","resolution":{"observed_at":"2026-08-09T15:57:24.884104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.863662Z","title":"Adversarial examples for semantic segmentation and object detection","venue":null,"work_id":"93d1f2c1-a07f-4be5-8cf4-e54036217938","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.444333Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:1a6cc427593685668b3b827d783676be7d577671a162ccd3c7abd61eea645408","observation_id":"e52be68e-896d-48af-a06d-17702030b4df","resolution":{"observed_at":"2026-08-09T15:57:24.868509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.848426Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":"bddbedcc-56b8-4a69-a81f-2049fddcd5db","year":2019},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.448801Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:9cf6758e50ea0141e38e06db9f8d76a9f01d44d157f29bb2bd13132007474eff","observation_id":"2b95ade5-a924-4fb3-a833-b8b442b0c616","resolution":{"observed_at":"2026-08-09T15:57:24.853312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.832531Z","title":"Segformer: Simple and efficient design for semantic segmentation with transformers","venue":null,"work_id":"af9e644c-cad5-4817-a925-c762d0476a5d","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.453453Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:a9286f2965dfb8dcf79ae6f6a3ee5692db631fa869807ac8f38a276189e8f522","observation_id":"f4b6ba74-8939-4a30-9ce5-6def289a93d5","resolution":{"observed_at":"2026-08-09T15:57:24.837892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.815584Z","title":"Improving adversarial transferability via neuron attribution-based attacks","venue":null,"work_id":"c5edc787-6b88-46f9-b08a-a02d7552951b","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.457770Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:25f04649508978bd2efd15ed5af1830c02ee51a09df687c56e5ae7e23df19f10","observation_id":"02b3681d-8b61-43e6-a820-55308249720f","resolution":{"observed_at":"2026-08-09T15:57:24.820523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.801073Z","title":"Improving the transferability of adversarial samples by path-augmented method","venue":null,"work_id":"c16193b5-adbd-4bf4-ad9f-8020f41e6654","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.462198Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:ece46cc95a52cb951bd4370e9dd7b0edb6a40c8e3d7b80f9063c970afdf0073e","observation_id":"2469bd2e-f39c-43c0-9ed3-8ca5e745802f","resolution":{"observed_at":"2026-08-09T15:57:24.805731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.786368Z","title":"Pyramid scene parsing network","venue":null,"work_id":"396fa3ef-1a5f-49a9-8e87-e1eed5021861","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.466564Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:021d4ed8cd2704aa540df7ef7eea575636821823459c4f2fc299bc44c8ee3283","observation_id":"b501c132-ddff-4e74-8b68-8edae6c6125e","resolution":{"observed_at":"2026-08-09T15:57:24.791219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.771315Z","title":"Rethinking adversarial transferability from a data distribution perspective","venue":null,"work_id":"b0b05401-cce9-4218-94ae-07e6800d3908","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.471139Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:12a63659d0c737acc0543f39a0ae51dd5072639f7ecb40c4854681c68ae0b5bc","observation_id":"d6cf20e2-fe30-46ab-94f0-60e441f17b1f","resolution":{"observed_at":"2026-08-09T15:57:24.776190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.756434Z","title":"Toward understanding and boosting adversarial transferability from a distribution perspective","venue":null,"work_id":"9ef1db7b-e549-4683-9aa7-cc8517cab30d","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.475857Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:60074bba3b58c698b4558519b0adbf982e8a91363aac4262d54c1be88c9fb739","observation_id":"33633b29-6eee-4840-af73-940b2038199a","resolution":{"observed_at":"2026-08-09T15:57:24.761271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":7,"verified_fuzzy":46},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2502.01262."}