{"as_of":"2026-08-13T19:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c50064ec4d825c232ba817db9f4dfcb01bacdcbf55b627732ec5f7a9cb332c44","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:09:00.875854Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16166/citation-record","integrity":"/paper/2505.16166/integrity","json":"/paper/2505.16166/citation-record.json","paper":"/paper/2505.16166"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:09.084520Z","title":"Feature purification: How adversarial training performs robust deep learning","venue":null,"work_id":"ce022679-e996-48d8-a167-ec535f26eb60","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.325451Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ff2dfe64a537243dcda1a054713758bbd35acae69e13a702d9eb7366ffe92109","observation_id":"73a9b8c0-2172-412f-8c96-5e19b954303d","resolution":{"observed_at":"2026-08-07T15:09:09.123544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06347","last_updated":"2020-03-20T17:59:15Z","snapshot_observed_at":"2026-07-06T07:45:46.835717Z","submitted_at":"2019-04-12T17:59:30Z","title":"Unrestricted Adversarial Examples via Semantic Manipulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.06347","snapshot_observed_at":"2026-08-07T15:08:54.449669Z","title":"Unrestricted adversarial examples via semantic manipulation.arXiv preprint arXiv:1904.06347,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.449669Z"},"links":{"cited_paper":"/paper/1904.06347","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:85e498a9e7fd90fd84db57cdf841e3837a2c691dc39057116a256094f1d22e38","observation_id":"d8aba8de-546e-4df0-8a72-d1642a2991f4","resolution":{"observed_at":"2026-08-07T15:08:54.449669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.923141Z","title":"Diffusion models are certifiably robust classifiers.Advances in Neural Information Processing Systems, 37:50062–50097, 2025","venue":null,"work_id":"5e1e3248-9698-4491-a998-d8868abf25c8","year":2025},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.641068Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:834a8c4471e9f95c9630baef81a7d687b94a71d571376609e47bd054efad825f","observation_id":"ff44c922-c86f-4f6c-98f0-a14008470e79","resolution":{"observed_at":"2026-08-07T15:09:09.011508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.646662Z","title":"Diffusion models for imperceptible and transferable adversarial attack.IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024","venue":null,"work_id":"c4cb6031-4466-4bfa-b60e-641a23b29867","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.745062Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0c8f7df3c59506e0fae84f6a1413528b8713365c89287f4d0feeda401f8ccd6f","observation_id":"749291db-1532-4882-a4aa-2bad68bbe93e","resolution":{"observed_at":"2026-08-07T15:09:08.780813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.425090Z","title":"Content-based unrestricted ad- versarial attack.Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"583df5e5-b2b3-41d0-a9fd-3527699753f2","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.878089Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:a5f9b3b22d58e3a1c2f9f97f1cf2b6e6d80745ce50377f64dd141ec511de17cc","observation_id":"450bb7d9-b53d-4f49-8a88-4342e6fdbb4f","resolution":{"observed_at":"2026-08-07T15:09:08.535249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.227214Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"fe9f4430-33b9-4630-984c-717bfa819699","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.049818Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:58943653a670c9b8ea31ad9731c5c064f3b285d7851ee39c58ea547f65db3228","observation_id":"ee229a87-e568-4418-bbdf-c42dbf4f1a9e","resolution":{"observed_at":"2026-08-07T15:09:08.297307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-13T14:19:26.598265Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T15:08:55.172128Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale.arXiv preprint arXiv:2010.11929, 2020","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.172128Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:9eee218789e2cff1d116cf06766bd460f77127cc12bd7d41638b9dfcd0b2b334","observation_id":"ccf5737e-8e34-4de8-ba3f-1907520a7ea9","resolution":{"observed_at":"2026-08-07T15:08:55.172128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.988313Z","title":"Patch-wise attack for fooling deep neu- ral network","venue":null,"work_id":"346f6393-3f56-4330-8401-cc00eae586ff","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.331446Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:365fbd5785056efc36181d18e0ffb5a81811d7c10783f908767f33861f795151","observation_id":"9992e66f-cf70-46b7-b773-cb8a1eb469d2","resolution":{"observed_at":"2026-08-07T15:09:08.104560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.744442Z","title":"Boosting adversarial transferability by achieving flat local maxima.Advances in Neural Informa- tion Processing Systems, 36:70141–70161, 2023","venue":null,"work_id":"fa9cd7f9-fa50-4bf8-9e05-055cfb5152ef","year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.528186Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0c8a8c93043c88b6aa9f38f49a3091d427c7079fab104496a25b7b07532388f3","observation_id":"ac5756e1-c580-490f-a15b-1854220a65e8","resolution":{"observed_at":"2026-08-07T15:09:07.809041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T15:08:55.719449Z","title":"Explaining and harnessing adversarial examples.arXiv preprint arXiv:1412.6572, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.719449Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:1cd745698d4499e7f18b7da900f06c8dafc14d6ee3457d574770fb3c1d08d91d","observation_id":"b12cb4f3-5778-4c40-bc63-9e3363747d0a","resolution":{"observed_at":"2026-08-07T15:08:55.719449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-07T15:08:55.888342Z","title":"Countering adversarial images using input transformations.arXiv preprint arXiv:1711.00117, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.888342Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0d385f606497a6429f7cd500a42b37381bb74a5f69452f7dad477caef553ddfb","observation_id":"f8695555-5593-4840-a956-026d1bfd28e1","resolution":{"observed_at":"2026-08-07T15:08:55.888342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:56.042852Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.042852Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:09c35256dc1261f080025ba40130eb05fb5ade2852716e525004536caf23ed35","observation_id":"0dd0631e-a8df-4a09-b40c-473a04e0ad2a","resolution":{"observed_at":"2026-08-07T15:08:56.042852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:56.106276Z","title":"Denoising dif- fusion probabilistic models.Advances in neural information processing systems, 33:6840–6851, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.106276Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:be083c9980cf80df4463a485db42433f4b9121c7677ee7d5366281d906b6991f","observation_id":"685570b4-852a-44c0-b182-dffbfbca4888","resolution":{"observed_at":"2026-08-07T15:08:56.106276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.426328Z","title":"Semantic adver- sarial examples","venue":null,"work_id":"349c80dd-0177-4e5e-a70e-4cad0a9b1c87","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.322128Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:be6ea40bc64522afacb97d66ab8967262348754dd393f5b9a02d7d88e2005a6a","observation_id":"110fc522-221c-4982-88c9-0a32eb19d62d","resolution":{"observed_at":"2026-08-07T15:09:07.549842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.220353Z","title":"A new defense against adversarial images: Turning a weakness into a strength.Advances in neural in- formation processing systems, 32, 2019","venue":null,"work_id":"e74507b4-1a63-4660-91cc-67839509bbb3","year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.467185Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7722e907549cbb6406c183c82f91503c8dc7253f093c1e5f3e5a4b1573ce3289","observation_id":"5f03f795-3ca1-467c-ad2a-609a48fb20a7","resolution":{"observed_at":"2026-08-07T15:09:07.293108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.002603Z","title":"Densely connected convolutional net- works","venue":null,"work_id":"c33389b9-c71c-4ec2-a4a3-e70639a33f64","year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.584316Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:1f21e9aef0eae8bef94c7b96839a5608888e846557aa774c55c779a9ae7e80b4","observation_id":"bc5ecfa7-1414-43d1-8460-66a904872f50","resolution":{"observed_at":"2026-08-07T15:09:07.123288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.724116Z","title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition.Advances in Neural Information Processing Systems, 35:34136–34147, 2022","venue":null,"work_id":"99cce8c3-8eaf-4b35-86c0-370b1aa80c9a","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.732448Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:5b9952f18bd39ad649b480927383a400da44dba4807eb1c79f85858170940473","observation_id":"00478bd9-2cfe-4e97-adf9-49591bdf1fd4","resolution":{"observed_at":"2026-08-07T15:09:06.861938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.435283Z","title":"Functional adversarial attacks, 2019","venue":null,"work_id":"1f11c1d8-6c86-491b-923c-973257936c39","year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.822953Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:c5d2bf8b2b03dc8ddd44b61005a035e4d37da13e9967737c8c9fa74cd0f8be6b","observation_id":"18743755-94fa-4ce2-8809-1f2026517ce3","resolution":{"observed_at":"2026-08-07T15:09:06.547291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.187152Z","title":"Adaptive estimation of a quadratic functional by model selection.Annals of statis- tics, pages 1302–1338, 2000","venue":null,"work_id":"0103da36-f03c-4ed7-9a8f-ec0f45e62cea","year":2000},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.958142Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:02e3fe404ae39d82273a41d0947208ed30d6f26d138da8771007b509ff83ff29","observation_id":"971d646f-48af-4882-9a92-f3241c5d5fdd","resolution":{"observed_at":"2026-08-07T15:09:06.298186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.934972Z","title":"Adaptive training meets progressive scaling: El- evating efficiency in diffusion models.arXiv e-prints, pages arXiv–2312, 2023","venue":null,"work_id":"88e05d8e-47be-4446-a03f-003e82c6a640","year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.072192Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:c58d00645055c59657f517209243e8a5ae966f9ccd4a1f7e3e6e645466c809fd","observation_id":"72baf321-de31-4037-8731-ff8fe2032cca","resolution":{"observed_at":"2026-08-07T15:09:06.042553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.11735","last_updated":"2025-02-02T06:47:16Z","snapshot_observed_at":"2026-08-12T07:32:02.478217Z","submitted_at":"2024-12-16T12:56:57Z","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","version":2},"cited_work":{"arxiv_id":"2412.11735","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.11735","snapshot_observed_at":"2026-08-07T15:09:01.477512Z","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","venue":"cs.CV","work_id":"d5482cf6-dba6-4061-b974-6259cb2ee630","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.261991Z"},"links":{"cited_paper":"/paper/2412.11735","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2dba4e3f85cc75e752cbf43a4852779ed06051f5105ab027dd640e2d208b7bf6","observation_id":"9d280168-d3f6-4543-8680-06e1bcb4ff9c","resolution":{"observed_at":"2026-08-07T15:09:01.622410Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.693083Z","title":"A comprehensive sur- vey on test-time adaptation under distribution shifts.Inter- national Journal of Computer Vision, 133(1):31–64, 2025","venue":null,"work_id":"19f3645b-d485-4e6d-b638-365a0d9f30e8","year":2025},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.390051Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:84be0abc717b1a21ff00330571facbc3127be46784f6680ce2b21c37d2eef818","observation_id":"2fe2749a-03a8-4a81-9876-f48597ae9913","resolution":{"observed_at":"2026-08-07T15:09:05.798672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.535217Z","title":"Visual instruction tuning, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.535217Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:33280aed607bf8aef1ebb8e8adf94a2d9f59c66dd5618e20a2b4e22bc1da8056","observation_id":"b783a126-7142-4571-ae94-0887b1c8df57","resolution":{"observed_at":"2026-08-07T15:08:57.535217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.665883Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.665883Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2252715d356b50587b50d7cf232ae19a655027444b847140a6dceea1e5b98fa2","observation_id":"db4d0422-405d-4a7a-8cda-271f8c87c29d","resolution":{"observed_at":"2026-08-07T15:08:57.665883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.803356Z","title":"Fre- quency domain model augmentation for adversarial attack","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.803356Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2db2c7f279a83ecf7bb755b051b2efc640bf5ef2cdc39cb2cd42bcb24c46abd3","observation_id":"053e95a7-d5f2-426f-ad45-c47f10b3fbfd","resolution":{"observed_at":"2026-08-07T15:08:57.803356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T15:08:57.930077Z","title":"Towards deep learning models resis- tant to adversarial attacks.arXiv preprint arXiv:1706.06083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.930077Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ac86ed973e808b09e7b34326cffeb6ed8dbe16714135239ac685da88b90afdf0","observation_id":"c2dd03d8-194f-425b-a674-468a6afeb0fd","resolution":{"observed_at":"2026-08-07T15:08:57.930077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.356402Z","title":"A self-supervised approach for adversarial robustness","venue":null,"work_id":"82646a3e-4f0b-438a-ac6c-0ca1eac32f5e","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.104611Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:4822da40eeaad35a50bd2c85e02089c1ea8cf7beaef20b003642152b7d0d6eb9","observation_id":"bfcce371-3267-4e3a-a5bd-069b57aca3f5","resolution":{"observed_at":"2026-08-07T15:09:05.462210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10741","last_updated":"2022-03-08T18:18:49Z","snapshot_observed_at":"2026-08-07T12:21:17.790675Z","submitted_at":"2021-12-20T18:42:55Z","title":"GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10741","snapshot_observed_at":"2026-08-07T15:08:58.219446Z","title":"Glide: Towards photorealistic image generation and editing with text-guided diffusion models.arXiv preprint arXiv:2112.10741, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.219446Z"},"links":{"cited_paper":"/paper/2112.10741","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ce74f0ff037f16973132b7b04ad886409fbfffe1145c3d0e4451b0a991e1c94e","observation_id":"860b2124-c329-40c2-af50-e488aff1968d","resolution":{"observed_at":"2026-08-07T15:08:58.219446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-13T15:43:37.769321Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-07T15:08:58.305777Z","title":"Diffusion models for adversarial purification.arXiv preprint arXiv:2205.07460,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.305777Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ea658d74bfe905379d079146396c77ba034105be8b11c088f95c151a59f8b74b","observation_id":"f816d41b-8613-423a-a657-24322fa6a08f","resolution":{"observed_at":"2026-08-07T15:08:58.305777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.393446Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.393446Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7b1d2977e3acc94755073cfdb2f57a990674232e884c8feef0c84e1976d0d77a","observation_id":"91447e25-08d8-4a3e-b1ca-053e77f77019","resolution":{"observed_at":"2026-08-07T15:08:58.393446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.488950Z","title":"Scalable diffusion models with transformers","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.488950Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:89859c4771531288f5ae1e79d2496c9cdaa7b8f027cb409e34ffd0c5d9cf3d8c","observation_id":"90bd0b75-44c4-420a-a233-ee22dff99559","resolution":{"observed_at":"2026-08-07T15:08:58.488950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.049135Z","title":"Semanticadv: Generating adver- sarial examples via attribute-conditioned image editing","venue":null,"work_id":"a122840d-7f06-4287-976e-cc61b8aa2dcd","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.579096Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:8d0df947b1c8bda2f241c7d72732dfd3eb60283caa5394fcf56030a82ede9b56","observation_id":"ff03310e-5d45-4ff7-8c2e-73450e80cf3c","resolution":{"observed_at":"2026-08-07T15:09:05.147305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.786604Z","title":"Learning transferable visual models from natural language supervi- sion","venue":null,"work_id":"cd63686a-b3bf-4f44-8235-0da5e06b311a","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.696906Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7b4e44b235c84665e1dbb8856d9f174e0a395c2e5629f2cc9aaad606f50ae021","observation_id":"0a750cce-0b4d-4801-9768-cc84ce7145f3","resolution":{"observed_at":"2026-08-07T15:09:04.927842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.773160Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.773160Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:fa54b1eaead89f433df45daae2e27332be8652592a85449627b5f754309be187","observation_id":"0905c5a2-72d8-4453-b920-b0eeba9fd18c","resolution":{"observed_at":"2026-08-07T15:08:58.773160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.886922Z","title":"Photorealistic text-to-image diffusion models with deep language understanding.Advances in neural information processing systems, 35:36479–36494, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.886922Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:728e4996020df7cb8404d97e38d3e505712c5fde8af68323419f6a2fc65cfe53","observation_id":"78365cfa-3203-4b6e-a2ab-0fab7306dbc7","resolution":{"observed_at":"2026-08-07T15:08:58.886922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.427687Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":"729f0cfc-79fe-4709-a609-2e5b9513fbf4","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.000808Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:019a2f09c1908731441602947dbe587f8cda363aa877084d67a79e2e67fd2fff","observation_id":"34bfaddd-e22b-4e60-a808-9f74e7064767","resolution":{"observed_at":"2026-08-07T15:09:04.574838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.195002Z","title":"Colorfool: Semantic adversarial coloriza- tion","venue":null,"work_id":"c6725a5a-195e-4b86-bf01-f2cfe780e338","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.073903Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:4ed56ebac179c73c6a831ce85a299fa63f0660754f9e6e27cd37cc46e76f398b","observation_id":"b317852b-df28-4242-92a7-aa3f9015fab3","resolution":{"observed_at":"2026-08-07T15:09:04.294291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.158461Z","title":"Generative modeling by esti- mating gradients of the data distribution.Advances in neural information processing systems, 32, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.158461Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ff68b761a0032c7ec43eae14fcfa98286da717530fd73d26938e771e66170e49","observation_id":"3dc2f530-503a-48e1-9580-011da365b3b1","resolution":{"observed_at":"2026-08-07T15:08:59.158461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-07T15:08:59.331189Z","title":"Score-based generative modeling through stochastic differential equa- tions.arXiv preprint arXiv:2011.13456, 2020","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.331189Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:a0effdf198895ace1d143dad533c6cd6991d24113992ae2eeeafcbb80e5ae883","observation_id":"db7035ef-3d9d-49c0-89ac-57986fb73e65","resolution":{"observed_at":"2026-08-07T15:08:59.331189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T15:08:59.452646Z","title":"Intriguing properties of neural networks.arXiv preprint arXiv:1312.6199, 2013","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.452646Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:35d3202606947b3a90945770de50484863b52e4e9b85d5235bd98f9613ab5c42","observation_id":"47079308-1cfd-4e55-9760-cdf61fa0a67d","resolution":{"observed_at":"2026-08-07T15:08:59.452646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.547653Z","title":"Rethinking the inception archi- tecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.547653Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:94a52fd6428af2282caecd1bc8424b50a28df3f9ff518ce99ac1d424f925991e","observation_id":"e7125f1f-113f-45a0-ac76-249dd433a2c9","resolution":{"observed_at":"2026-08-07T15:08:59.547653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.656565Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.656565Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0a1e15c246c543432dfd4dbf067efb7f89a3af9ef512928af052812ac663e04e","observation_id":"11b252ea-d3a5-4463-abdd-8937384ddbdf","resolution":{"observed_at":"2026-08-07T15:08:59.656565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.894892Z","title":"Detect- ing adversarial examples from sensitivity inconsistency of spatial-transform domain","venue":null,"work_id":"ca202d7b-4f60-4776-bbc2-1ea48311853f","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.715181Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0bf46f96f5ee59724c3f403b712381ec2366b0c5151c2a3fd16f4726a988618b","observation_id":"f61e751a-6aad-45bc-8b13-5f8a7c63ae56","resolution":{"observed_at":"2026-08-07T15:09:04.036938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.602325Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":"fcb7f515-f572-4fd2-985b-7eb4fe64eb9c","year":1924},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.774420Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:91f4238c819df1160fa1a8ef174d26e212bab3c2cf6416a3a679ef66dbdd2971","observation_id":"7cde248f-1c85-497d-8aa2-1657f5ec9d54","resolution":{"observed_at":"2026-08-07T15:09:03.726416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.322122Z","title":"Admix: Enhancing the transferability of adversarial attacks","venue":null,"work_id":"bbe0b6e2-1283-47cb-b8de-46362b1e5a81","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.847141Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ab9e3a061073eb7c6d47258fc3cd3ab4c76a8b58ae7caa643a6e9d085e57b6ce","observation_id":"41818089-5530-4e58-8bfd-ed6c1cfd7214","resolution":{"observed_at":"2026-08-07T15:09:03.444372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.911938Z","title":"Image quality assessment: from error visibility to structural similarity.IEEE transactions on image processing, 13(4):600–612, 2004","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.911938Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:e1517498de8113281e6ec3c8d27e51ef3fec2def24fd0b3c6af57b0bfc472130","observation_id":"bc37b932-7d28-4874-b2b6-c6c8dc5b98b2","resolution":{"observed_at":"2026-08-07T15:08:59.911938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-09T12:14:36.195423Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-07T15:08:59.975153Z","title":"Generating adversarial examples with adversarial networks.arXiv preprint arXiv:1801.02610,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.975153Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:071978ed70cc23f47e7728f026d1b0b66274a8a80fda88939c98f7ffed0dca98","observation_id":"cb549de0-e160-4ca9-8980-6d29c1cf4c6c","resolution":{"observed_at":"2026-08-07T15:08:59.975153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02612","last_updated":"2018-01-09T19:03:32Z","snapshot_observed_at":"2026-08-01T18:22:09.370200Z","submitted_at":"2018-01-08T18:51:59Z","title":"Spatially Transformed Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02612","snapshot_observed_at":"2026-08-07T15:09:00.067979Z","title":"Spatially transformed adversarial ex- amples.arXiv preprint arXiv:1801.02612, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.067979Z"},"links":{"cited_paper":"/paper/1801.02612","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:08f4ff272e126ccef5e9c93b4741fd862af2e77bd3234b2cf2cf9c978b55885a","observation_id":"67b8c7bf-698d-4c0d-bc2c-b99e8a8be63f","resolution":{"observed_at":"2026-08-07T15:09:00.067979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T15:09:00.155566Z","title":"Mitigating adversarial effects through random- ization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.155566Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:281fc5a4ded8e0efc0d1b406f923dd7d5f7a7ee88733057b4a507926086ffaa8","observation_id":"f033d2e6-0868-4e15-bb0d-a9b5babf24c1","resolution":{"observed_at":"2026-08-07T15:09:00.155566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.047828Z","title":"Stochastic variance reduced ensemble adver- sarial attack for boosting the adversarial transferability","venue":null,"work_id":"6123a54b-0cd0-4617-9d76-2b834fffa51f","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.281807Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:99789faa4f1043bdec021c4b87145886fdf6db0363f102d65b0b89e06260f7fb","observation_id":"0c570694-6f2d-4b0a-8039-0edf1ceab3f2","resolution":{"observed_at":"2026-08-07T15:09:03.190756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:00.362408Z","title":"Imagere- ward: Learning and evaluating human preferences for text- to-image generation.Advances in Neural Information Pro- cessing Systems, 36:15903–15935, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.362408Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ed43ede245b62e8d1450a8544c1cc7a1a30f4ac3100634ff292022078db9bc97","observation_id":"8d04f5b9-c43b-4cf6-b367-736d42ee9d29","resolution":{"observed_at":"2026-08-07T15:09:00.362408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.731388Z","title":"Quantization aware attack: Enhancing transferable ad- versarial attacks by model quantization.IEEE Transactions on Information Forensics and Security, 19:3265–3278, 2024","venue":null,"work_id":"a934c21d-753c-4ccd-bf40-2143291f77e7","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.457765Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:66a4ae73a8ecdb0f3928e5a6609e1b20f3588b4c5889390bef57fb2a4bfe2b9b","observation_id":"aa5d6a97-ea68-44fb-b1c2-f898578c17b9","resolution":{"observed_at":"2026-08-07T15:09:02.868225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.446418Z","title":"Natural color fool: Towards boosting black-box unrestricted attacks.Advances in Neural Informa- tion Processing Systems, 35:7546–7560, 2022","venue":null,"work_id":"132c0279-6e68-4484-816c-d1cfda619a9a","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.557557Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:cf0a3ce7e84ec8d318e61049678cf796fb3687beebf352caad6caf5bdcc882ad","observation_id":"6921f7a7-c833-4133-b057-7d98dc405fe8","resolution":{"observed_at":"2026-08-07T15:09:02.590980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01008","last_updated":"2020-08-09T18:23:24Z","snapshot_observed_at":"2026-08-13T01:01:00.337798Z","submitted_at":"2020-02-03T20:44:29Z","title":"Adversarial Color Enhancement: Generating Unrestricted Adversarial Images by Optimizing a Color Filter","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01008","snapshot_observed_at":"2026-08-07T15:09:00.687141Z","title":"Adver- sarial color enhancement: Generating unrestricted adver- sarial images by optimizing a color filter.arXiv preprint arXiv:2002.01008, 2020","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.687141Z"},"links":{"cited_paper":"/paper/2002.01008","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:73052390dbeee8b341f11505a93e3129d5eef2f3f368fb82f789d389534935dd","observation_id":"0360e510-0234-4bbd-b1e8-dcf3b49e6250","resolution":{"observed_at":"2026-08-07T15:09:00.687141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.218380Z","title":"[39] estab- lished a connection between the DDPM [13] process and stochastic differential equations (SDEs [38]), showing that DDPM can be expressed as a specific form of SDE","venue":null,"work_id":"ce3d9539-3820-460c-b2a5-068b6fdf28ed","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.826204Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:82f2776c2959d6fb4e1a20b1d7ebdee31f03a258d56b8a19fa03e2405fb7efaa","observation_id":"39ef3971-0d9d-4937-832c-6f3907004406","resolution":{"observed_at":"2026-08-07T15:09:02.332628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:01.995416Z","title":"In the experiments of Section 4.2, we also used Swin-B as the surrogate model, as shown in Table 4","venue":null,"work_id":"1533ea45-6998-445a-9a56-1a68761efee5","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.875854Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:98a691fcf604ecf9730894316fbede41b8bd9d40e02e4428abfe3fc371d38856","observation_id":"274649c4-3eb6-4cf9-91e5-2e7265a909b5","resolution":{"observed_at":"2026-08-07T15:09:02.066658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T17:14:34.194330Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":1,"verified_fuzzy":28},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2505.16166."}