{"as_of":"2026-08-10T08:36:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8e7fc30ab0eaec133ace63ff343e83b1ed4f09bb6e9df869ec978566155356aa","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:05:46.425293Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16402/citation-record","integrity":"/paper/2505.16402/integrity","json":"/paper/2505.16402/citation-record.json","paper":"/paper/2505.16402"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-07T15:05:40.195013Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.195013Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:2675b993d665a7fefc96e5f87e5cb11769a0695b0b14f8540c5362f06fb174c4","observation_id":"b294fc08-f071-46d5-b22c-c40bdbf064ee","resolution":{"observed_at":"2026-08-07T15:05:40.195013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.344658Z","title":"Camopatch: An evolutionary strategy for generating camoflauged adversarial patches,","venue":null,"work_id":"e14ee87b-2468-4ce3-aa75-39be419f87cb","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.270485Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fc9442c9b86960fba5cf9a6f160c12b9bf7fec84f9e6060620952b2c60ab203d","observation_id":"59fc76ae-ab2b-4479-84fa-d4269797129a","resolution":{"observed_at":"2026-08-07T15:05:53.378835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.260923Z","title":"Stealthy and effective physical adversarial attacks in autonomous driving,","venue":null,"work_id":"6d05287a-bd05-4a4b-80bc-0fbb5022c0cd","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.395655Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:163f39f914d0081663d7ddceae3265df43b2055b517865a63b8bf219c4462199","observation_id":"e1d4974f-730c-4c68-b844-d27ab7c8952e","resolution":{"observed_at":"2026-08-07T15:05:53.301502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.145941Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":"37492f9d-17d0-41b7-a02c-2ca20d1d6748","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.468281Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:e45d5fc0c2559be92912ae486b44120e38d503adc42cf9263ca463aefd4c3058","observation_id":"df57fa6f-5701-43d9-b45a-5eaf87b5b0f0","resolution":{"observed_at":"2026-08-07T15:05:53.205846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.052238Z","title":"Eap: An effective black-box impersonation adversarial patch attack method on face recognition in the physical world,","venue":null,"work_id":"ac38c35b-31c5-4d73-8188-596c9504b63d","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.582156Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:f9e81bd9b2d95f6e4b97963b1444fc87ceafec4a2d88ec41dce8966fb3169973","observation_id":"e3a7ba28-e017-4bac-8d63-7e9ff3b7dd26","resolution":{"observed_at":"2026-08-07T15:05:53.090481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.928756Z","title":"Fooling human detectors via robust and visually natural adversarial patches,","venue":null,"work_id":"b8e17e9d-9160-4ad1-9e9f-21415deb3774","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.684835Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:3233b7c2c23e81e2ed5fae73512f4ac02bb67b2a0751dc96500bdfca5976d87e","observation_id":"7495cf1f-b8f7-4f5c-a450-7c4d08f4e35f","resolution":{"observed_at":"2026-08-07T15:05:52.978248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.817845Z","title":"Deep learning-based few-shot person re-identification from top-view rgb and depth images,","venue":null,"work_id":"45d6a771-be42-463a-93e7-ebe0d9de5d9d","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.771046Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fdf32b41890bf34a55f7ce3e0806e2e0ca1c630fdb1b6ccfaecde4b6a6a01f33","observation_id":"1dc2eac2-08ea-4938-87fa-1234bf4cc29e","resolution":{"observed_at":"2026-08-07T15:05:52.870335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.743565Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection,","venue":null,"work_id":"f9fbd6a4-696d-4b3d-a5fe-eb13e8a3792d","year":2019},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.889022Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:487942c4f94a6b1cd53bdad9465a926af045220f29dccd5add9a37e0c9c75ce2","observation_id":"f9c36cb8-dc4c-44d3-9a7d-3f5e92906262","resolution":{"observed_at":"2026-08-07T15:05:52.769941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:40.978536Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.978536Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:f8bfa93877905e68b57350f5f3a9df307e02b43553dfa7429e9a09a096841afe","observation_id":"cc2f081d-c734-4c59-bc96-926897c9cbb3","resolution":{"observed_at":"2026-08-07T15:05:40.978536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:41.200066Z","title":"End-to-end object detection with transformers,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.200066Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:8b116486e9143cafd2acf8d367c81ab514bb2460ecc4fe8d80d59ca314130caf","observation_id":"114e0314-ebb5-4f3f-9630-bf7684f5d134","resolution":{"observed_at":"2026-08-07T15:05:41.200066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.618172Z","title":"Adversarial texture for fooling person detectors in the physical world,","venue":null,"work_id":"8761f8ed-098c-4183-b3e1-6d363c18b9c3","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.305635Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:5ce3db2076ffec69fdbaee8007824d8f485f718567791b7d82617a84221adaed","observation_id":"554e68b8-91c0-4e1b-8cc7-7faaf10f3255","resolution":{"observed_at":"2026-08-07T15:05:52.665153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.11101","last_updated":"2021-04-22T14:36:08Z","snapshot_observed_at":"2026-08-10T02:09:42.163649Z","submitted_at":"2021-04-22T14:36:08Z","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","version":1},"cited_work":{"arxiv_id":"2104.11101","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.11101","snapshot_observed_at":"2026-08-07T15:05:46.679973Z","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","venue":"cs.CV","work_id":"64d4afe4-67e5-4653-b2ab-a5bcaeb83325","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.387001Z"},"links":{"cited_paper":"/paper/2104.11101","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1852bbcc02ec2e7475d7a1be5e178c723ccf20720a71b07807c3cac72b244797","observation_id":"cd94f752-f6a4-44f9-8e9b-3410c9064c62","resolution":{"observed_at":"2026-08-07T15:05:46.808764Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.511852Z","title":"Adversarial t-shirt! evading person detectors in a physical world,","venue":null,"work_id":"1480fac1-840a-41ea-b612-87925556b8dd","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.527215Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:225144ed10ea266672e2914cc3ac8ea89f0eae3d8a514a8e1edc29580952cff1","observation_id":"fe3b3c5d-c593-4925-81e2-07e340fb4a1e","resolution":{"observed_at":"2026-08-07T15:05:52.560124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.393366Z","title":"Adversarial objectness gradient attacks in real-time object detection systems,","venue":null,"work_id":"be04aaa4-2be1-4a3b-9329-a364c3bc51ee","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.630358Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:358b43b84773bdf20c9d469ff56c90a8a4ad576b5a301298c9602721547aa93d","observation_id":"242908f1-ae85-4829-8ab5-982d2541e876","resolution":{"observed_at":"2026-08-07T15:05:52.457072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.284695Z","title":"Naturalistic physical adversarial patch for object detectors,","venue":null,"work_id":"bbe6d1e0-82fd-4330-a339-710add6042a0","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.679616Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4b030ff4c9047b1e92f882091233adfd79cdd51f8abc6efbf6cabda46ffcac9b","observation_id":"09f68886-057f-4480-a8b0-208c643e8f9d","resolution":{"observed_at":"2026-08-07T15:05:52.331235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.202747Z","title":"Dap: A dynamic adversarial patch for evading person detectors,","venue":null,"work_id":"a6b3d0c1-fca5-4d89-b557-063f2c1f60d4","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.772759Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c9525ab6d93f5bec65f9cfa5805b17782a93457c5a9da25f53a92f3eb3139e93","observation_id":"102eba8a-d9b9-4206-bfa8-88b0efebe0a3","resolution":{"observed_at":"2026-08-07T15:05:52.241431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.109361Z","title":"Pad: Patch-agnostic defense against adversarial patch attacks,","venue":null,"work_id":"fbc775a9-401a-43ff-948a-6b1bd3c45d4b","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.890215Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4abbf3b7b3dba4a0a52d2e8c1682b71fdd33226a033d49143f043ddfa3c98115","observation_id":"b11ca903-0953-4b93-8145-a74ec0e9d2fe","resolution":{"observed_at":"2026-08-07T15:05:52.150965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.005058Z","title":"Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,","venue":null,"work_id":"0011030e-fa87-4ecb-a523-a7c55c65afc6","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.993334Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:30e0d75e26062161f8bb8a75dc9035ce2ecb341b16d60a4a68caba9fbb33a76b","observation_id":"49186be2-5b10-438d-a662-543179f7fa24","resolution":{"observed_at":"2026-08-07T15:05:52.056265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.786827Z","title":"Reap: a large-scale realistic adversarial patch benchmark,","venue":null,"work_id":"52c76e67-0125-4c44-8c95-ed0a1bb1d3f2","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.098031Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:64424fa043401785458d2ce0ae4f177d10a92a3efb9c3050b34245aac74f6ef5","observation_id":"e740d650-c1c0-4c63-90a8-dd34f7ca1b83","resolution":{"observed_at":"2026-08-07T15:05:51.899948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:42.173364Z","title":"nuscenes: A multimodal dataset for autonomous driving,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.173364Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:250de8e2fa6616be63ebc31b4678c78b3ab7528ea1fedc3d603bd37b881d72dd","observation_id":"f518c8ce-8b97-4e85-9f89-6a991bcf2e22","resolution":{"observed_at":"2026-08-07T15:05:42.173364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.477377Z","title":"Yolo9000: better, faster, stronger,","venue":null,"work_id":"626ca862-fb6d-4ac7-bd5d-0ad5499ad59e","year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.285282Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:aa9cfb685746e2890d3fbbc95aca6f2c738ce353c67b398d0660a2330293e54d","observation_id":"848b69bf-03a8-45d2-a64b-3b671c43c072","resolution":{"observed_at":"2026-08-07T15:05:51.622021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-06T11:09:16.409556Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-07T15:05:42.373493Z","title":"Yolov3: An incremental improvement,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.373493Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ddc7f50eddec64724e921d0d2c05b3df60d87b63e9443f09b72255869bc2c23e","observation_id":"b3ab7286-07e1-400e-8699-0f2a2efd0b42","resolution":{"observed_at":"2026-08-07T15:05:42.373493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.258454Z","title":"ultralytics/yolov5: v3. 0,","venue":null,"work_id":"d719775f-8266-4c15-9698-f6822045de4d","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.482773Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1088da011c60866b2eead259e37d7409d5e10beb6f0590537c740717918bec21","observation_id":"d1362225-2722-4101-8257-99f1a58ae3ff","resolution":{"observed_at":"2026-08-07T15:05:51.356674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.04159","last_updated":"2021-03-18T03:14:26Z","snapshot_observed_at":"2026-07-06T10:02:45.105181Z","submitted_at":"2020-10-08T17:59:21Z","title":"Deformable DETR: Deformable Transformers for End-to-End Object Detection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.04159","snapshot_observed_at":"2026-08-07T15:05:42.618623Z","title":"Deformable detr: Deformable transformers for end-to-end object detection,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.618623Z"},"links":{"cited_paper":"/paper/2010.04159","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4c32d06f79af8885842d88e0f23743397a14a2a2dd2a323bc8c595522182f32b","observation_id":"ace7d5dd-faad-48bd-8f4d-9aa4aff04f2b","resolution":{"observed_at":"2026-08-07T15:05:42.618623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1506.01497","last_updated":"2016-01-06T06:30:17Z","snapshot_observed_at":"2026-07-06T04:19:53.343717Z","submitted_at":"2015-06-04T07:58:34Z","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.01497","snapshot_observed_at":"2026-08-07T15:05:42.756290Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.756290Z"},"links":{"cited_paper":"/paper/1506.01497","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:15c6342e092306723c6e69432e91591bd79b03f6b28f2608c5e020ec3fc1634e","observation_id":"def365d7-bbf4-49c2-8f32-2322f3a281d9","resolution":{"observed_at":"2026-08-07T15:05:42.756290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.032523Z","title":"T-sea: Transfer-based self-ensemble attack on object detection,","venue":null,"work_id":"4b18dd12-104f-4cf9-bc29-6e74899edab1","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.890796Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:2cf53becd258afbf9cb1a12ac6873f3d8d44d7cdf2ea785ea440ac649e8178b3","observation_id":"0f7e6527-8efd-4d45-9a3c-ead560581d84","resolution":{"observed_at":"2026-08-07T15:05:51.122815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:43.027320Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.027320Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ebd5292b796d2e674985efbe3f98f90e269acf74223f745b539dee770d939585","observation_id":"61dd13cd-68f6-4048-941a-72961d47081d","resolution":{"observed_at":"2026-08-07T15:05:43.027320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.738634Z","title":"Fca: Learning a 3d full- coverage vehicle camouflage for multi-view physical adversarial attack,","venue":null,"work_id":"803e5c9f-4295-48b1-a5d1-c81dccc651e9","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.092807Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:76679731444596780503d6f041db31157661e0a58fc4f30ec4490217feae521c","observation_id":"a5940445-076a-4a7f-a62e-c5b15659830a","resolution":{"observed_at":"2026-08-07T15:05:50.845301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.537826Z","title":"Intelligent amphibious ground-aerial vehicles: State of the art technology for future transportation,","venue":null,"work_id":"0b679d15-0917-4a42-b843-c7b3449e6c5c","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.195319Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fa1596562045f6580271e49422ae364ecaec6ef0ffbae787953fbe9a5a1defaf","observation_id":"bfd95bcf-0783-4e4f-a879-d73c67ad6785","resolution":{"observed_at":"2026-08-07T15:05:50.657559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.338783Z","title":"An ar-based meta vehicle road cooperation testing systems: framework, components modeling and an implementation example,","venue":null,"work_id":"6b6d5a36-3f84-458c-8b81-e4e14ac81c86","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.317688Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:20da5997bac62c71ccd01fa233fd2a077d626670bcc4d684417d24e71796a716","observation_id":"9a4cb7b9-bddc-4490-85eb-0ac60e28ea36","resolution":{"observed_at":"2026-08-07T15:05:50.431823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:43.464564Z","title":"Street-view image generation from a bird’s-eye view layout,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.464564Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:994f2e4e3917750c1fd2b202ed7f6171620d3f3ff615c22462f312ed8cc1fa47","observation_id":"20e26ac6-407c-4224-91f6-aeb153988d4e","resolution":{"observed_at":"2026-08-07T15:05:43.464564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.125149Z","title":"Advswap: Covert adversarial perturba- tion with high frequency info-swapping for autonomous driving perception,","venue":null,"work_id":"42b7f16f-204c-4775-9493-3feea0a6849a","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.584021Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:a9d29c46c9f8aba960d656fc9336be441d3502e81e22a1723b1b50b287dd2c96","observation_id":"01a002df-7539-41b7-a323-afb7e2a0a32f","resolution":{"observed_at":"2026-08-07T15:05:50.225805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.902021Z","title":"Attention-disentangled re-id network for unsupervised domain adaptive person re-identification,","venue":null,"work_id":"4311ef00-5091-4e8e-8eb9-672d527e987f","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.700449Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c67c89fc37252e0dcc6c942cfa6757a5fb7efe4d31c71e9cf2f676eb9f42e008","observation_id":"9dc24e80-b575-488e-89ff-4df1bbd9cb86","resolution":{"observed_at":"2026-08-07T15:05:49.995361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.661507Z","title":"Adversarial examples for vehicle detection with projection transformation,","venue":null,"work_id":"460883d8-06cf-49e4-80da-fdf2c9d6bcd5","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.823926Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:585a151e3ac6bd7284aabccb2c2760d80748376b2e6f6576e6b001ee314b39e8","observation_id":"84755ef6-3b19-4b4c-aca8-c51495ca0fd9","resolution":{"observed_at":"2026-08-07T15:05:49.775230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.424377Z","title":"Toward robust 3d perception for autonomous vehicles: A review of adversarial attacks and countermeasures,","venue":null,"work_id":"d5c7682d-72af-48b8-ad57-6af32a37de82","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.953194Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:934ab0b139198f33e6453e35ac64ea1b643c8b34f3ae68849eeab69ab7d2dc30","observation_id":"a5f7a010-efa3-4534-99c2-d3cf33c27b95","resolution":{"observed_at":"2026-08-07T15:05:49.525535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.253283Z","title":"Deep networks with stochastic depth,","venue":null,"work_id":"05112ecb-38d7-4634-89da-52dc04b6995d","year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.120362Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:37b4bf997994c820449c35c068db05e840e97f42d598200211ff0673190df667","observation_id":"fceddb7c-7c76-4c97-b663-5c3b27bcedae","resolution":{"observed_at":"2026-08-07T15:05:49.333990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.230644Z","title":"Uv-attack: Physical-world adversarial attacks for person detection via dynamic-nerf-based uv mapping,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.230644Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:cde8a3627e8445cfa1ed0ca495de8de87aafecf24857a90f788b2c78f049d01d","observation_id":"71765079-8f32-42c9-aa3e-0c9964973e14","resolution":{"observed_at":"2026-08-07T15:05:44.230644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.148420Z","title":"Physical adversarial attack meets computer vision: A decade survey,","venue":null,"work_id":"d7facf16-f48b-4d21-82d1-5eb2e1f4ff96","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.350074Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:72e1df75b6b8e2986423f40c046de15e786fcd2fb591bc5d3edb5a4483a0988c","observation_id":"106e4986-7ae6-4d1a-8318-6b6ada6f3600","resolution":{"observed_at":"2026-08-07T15:05:49.208048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.008162Z","title":"Force-based representation for non-rigid shape and elastic model estimation,","venue":null,"work_id":"087ae44f-fabd-4ad0-a039-a3972be19ebd","year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.469926Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:28033866fa8a3238af94383c665fade91d3b0db594948a6bb96ac14344322f40","observation_id":"d9f3725f-5d4e-40a3-819b-21066508fb21","resolution":{"observed_at":"2026-08-07T15:05:49.106760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.875837Z","title":"Garnet++: Im- proving fast and accurate static 3d cloth draping by curvature loss,","venue":null,"work_id":"d93db2bf-a726-4eef-b190-89ac47a5a392","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.556523Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:8424f02e78213207b9379247e8b7c3431b9d1c33dfeff6e9a7e48650c5f9985a","observation_id":"22111197-4f08-4148-9215-4ce3dd5be2a2","resolution":{"observed_at":"2026-08-07T15:05:48.923296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.661586Z","title":"Ultralytics yolov8,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.661586Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:09538adb795243a8f0e416f595724af20c43482472b7fc8fee2332b69c7d2465","observation_id":"ee707c59-0913-46a5-9721-9770ac02d18b","resolution":{"observed_at":"2026-08-07T15:05:44.661586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.731307Z","title":"Ultralytics yolo11,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.731307Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ef97bd76728dd9a3a32fd539f6df49e5b254d9094ad8dc01cd16445f92e6e6f4","observation_id":"42f645a0-5f2b-4adf-93ee-820fa0574fe3","resolution":{"observed_at":"2026-08-07T15:05:44.731307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12524","last_updated":"2025-02-18T04:20:14Z","snapshot_observed_at":"2026-07-06T20:38:20.545914Z","submitted_at":"2025-02-18T04:20:14Z","title":"YOLOv12: Attention-Centric Real-Time Object Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12524","snapshot_observed_at":"2026-08-07T15:05:44.796167Z","title":"Yolov12: Attention-centric real-time object detectors,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.796167Z"},"links":{"cited_paper":"/paper/2502.12524","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:44575dc90bbfee59aeaa4f6b3882f06dad10add56b92019d12d433e5c9044dde","observation_id":"790f3a1c-f7f1-468e-ab57-b634577b89cc","resolution":{"observed_at":"2026-08-07T15:05:44.796167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.750771Z","title":"Shakedrop regularization,","venue":null,"work_id":"b5f6048c-b020-4ea1-b3c9-76d2225d2d9b","year":2018},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.860992Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:8c54846516be3ada0df4f21e0477321b4147e0c3663addfa7384e8a5033c339c","observation_id":"7840e154-0acc-4f2a-8af2-17cf1638efbd","resolution":{"observed_at":"2026-08-07T15:05:48.805087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.921988Z","title":"Histograms of oriented gradients for human detection,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.921988Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:203f7c64f368ca075e6f1a3a199bbe9b2c5ad6915b0100d0090330a5c7556a53","observation_id":"8cdeca79-48e2-4533-9a04-0f4b245e98c8","resolution":{"observed_at":"2026-08-07T15:05:44.921988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.578343Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":"a603bcbc-09e1-4303-a13b-c49e926b3d4d","year":2014},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.980496Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c7450a159ffdd53b5108ac4e7f14f81da18c2901fbe64ab2b49036fa5fc051fe","observation_id":"6fbe4ae7-1e66-4215-b176-a8b9f9de5bfb","resolution":{"observed_at":"2026-08-07T15:05:48.648073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.440268Z","title":"Black-box adversarial attacks against image quality assessment models,","venue":null,"work_id":"bb37f283-6e2f-43b8-aa3b-67e141fc56aa","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.099324Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:5907ed46db9518d4f626c09f6f672fca2c9abb2139c737c2c2f26806903796c3","observation_id":"f9167b61-5d56-4769-9372-a773e59888d4","resolution":{"observed_at":"2026-08-07T15:05:48.503484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.278275Z","title":"So-yolov8: A novel deep learning-based approach for small object detection with yolo beyond coco,","venue":null,"work_id":"da4a7257-a41f-4add-a764-b69c58398986","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.205692Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:bd089715dc15fd9a5b3eaebd0f67b78c63da16d9335878423ac2bf948f10e3e7","observation_id":"ff36c0fd-fe3a-4652-ad3b-fb9a5d078809","resolution":{"observed_at":"2026-08-07T15:05:48.371808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.137752Z","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems,","venue":null,"work_id":"8497e870-6827-4ee2-995c-93e2a0f3e920","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.360199Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b7e205d82c0fcfc681b9b042591a32602a3afff3e83c3a9772068e26f2dc09c8","observation_id":"f162f3dd-a02c-46d6-bd9b-99ebbaef581d","resolution":{"observed_at":"2026-08-07T15:05:48.201497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.007180Z","title":"Evaluating adversarial attacks on driving safety in vision- based autonomous vehicles,","venue":null,"work_id":"bc8488d0-2d4e-4335-8d4c-4513a8f93d61","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.460515Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1bb064349b50a9247a78677a7b761c6715437980ea723c4bd8518e727e23c127","observation_id":"0349f20b-b7ef-4910-af76-a1d06083bcd9","resolution":{"observed_at":"2026-08-07T15:05:48.067872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.851171Z","title":"A transformer-based adversarial network frame- work for steganography,","venue":null,"work_id":"a4ae4ed0-9321-4585-8101-c968215e859a","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.594649Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:3063f6a89db5c5f019ac33357fa1afb68ad8a63e43eb669e8d53549047074e9f","observation_id":"a585fe4f-5253-4c26-b067-e9e2a921214f","resolution":{"observed_at":"2026-08-07T15:05:47.922213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.659473Z","title":"Mining the benefits of two-stage and one-stage hoi detection,","venue":null,"work_id":"1c2810aa-d3cf-4a88-be5d-e56e06f6051f","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.691112Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1f50a9b6cae1526c24fa9a9a94442ab1423b23e3678874829182327d207d2134","observation_id":"c2412b11-76a0-4664-ae77-8a372b919a92","resolution":{"observed_at":"2026-08-07T15:05:47.734463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.489622Z","title":"A survey and evaluation of adversarial attacks in object detection,","venue":null,"work_id":"1d8021db-4804-4aa7-9d19-305da7a51e63","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.807114Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:cd044d8eb2d18ff3a260126861ffbb96eca76d11f6bceb342c5b807e0d9be0a8","observation_id":"6cf9bf9d-2c24-491c-89af-1d3c8eea45b0","resolution":{"observed_at":"2026-08-07T15:05:47.562651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.320993Z","title":"Adversarial attack and defense of yolo detectors in autonomous driving scenarios,","venue":null,"work_id":"f76d9f7f-f436-4c18-8b9b-5db96d87a478","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.898556Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1f1fa85b51864f391b8a558c88fa3e1e25aba32f1e8e65ecfafda97e680e0af2","observation_id":"199e4b7a-13ad-4e3c-b244-ed196d2bada1","resolution":{"observed_at":"2026-08-07T15:05:47.415285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.151010Z","title":"Adversarial attacks on faster r-cnn object detector,","venue":null,"work_id":"cee4c27b-4899-41f0-9a48-8af0bf63a431","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.022683Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:bc58fa47026ed732083284bd541ac8fc80c15b2dc4416beb884122b4007cb86e","observation_id":"507b7116-ba43-4db8-b553-d44d494586ae","resolution":{"observed_at":"2026-08-07T15:05:47.236197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15670","last_updated":"2022-11-02T18:57:19Z","snapshot_observed_at":"2026-08-08T22:57:45.855434Z","submitted_at":"2021-03-29T14:48:24Z","title":"On the Adversarial Robustness of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.15670","snapshot_observed_at":"2026-08-07T15:05:46.120059Z","title":"On the adversarial robustness of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.120059Z"},"links":{"cited_paper":"/paper/2103.15670","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:74ba95900f7aefe748c6cc4a9392e2676cdbd0c675dd9721ee485c0e09571b90","observation_id":"744b3f33-fe80-4b88-93dd-5f710e820754","resolution":{"observed_at":"2026-08-07T15:05:46.120059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:46.221545Z","title":"From patches to pictures (paq-2-piq): Mapping the perceptual space of picture quality,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.221545Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:26ab0e2a7f8b6474edd68d48d627e569641dc04cc8b2197b653b15650ad5cee9","observation_id":"0109a09b-f852-4b79-889e-c5e432b5d8cb","resolution":{"observed_at":"2026-08-07T15:05:46.221545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:46.964312Z","title":"Napguard: Towards detecting naturalistic adversarial patches,","venue":null,"work_id":"8f6fcb61-8cf2-4f55-9e1d-03d23b7e06fd","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.318842Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fc3664bffa32af5e9b4869c447da9d583e8bcc2c57d39c2c2256e1024433cdca","observation_id":"c7a150a0-ddc7-42e2-8dfe-80d743ab5c5c","resolution":{"observed_at":"2026-08-07T15:05:47.043488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01473","last_updated":"2024-08-22T04:12:59Z","snapshot_observed_at":"2026-07-06T16:42:19.938941Z","submitted_at":"2023-11-01T06:55:09Z","title":"Adversarial Examples in the Physical World: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01473","snapshot_observed_at":"2026-08-07T15:05:46.425293Z","title":"Adversarial examples in the physical world: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.425293Z"},"links":{"cited_paper":"/paper/2311.01473","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:9ceeb20155ae44a4516d518b985babd1a2e02e5a6d43426152c7a03824077c8a","observation_id":"8575730e-53bd-49d0-9576-09323b6f50f4","resolution":{"observed_at":"2026-08-07T15:05:46.425293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T09:09:34.374985Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":1,"verified_fuzzy":41},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2505.16402."}