{"as_of":"2026-08-13T23:31:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:55db3085dd200d75093022168ea361ca3d74f440de6621a1b90d460e693b3643","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:49:48.767310Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.17579/citation-record","integrity":"/paper/2505.17579/integrity","json":"/paper/2505.17579/citation-record.json","paper":"/paper/2505.17579"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2304.14613","last_updated":"2023-06-17T09:08:18Z","snapshot_observed_at":"2026-08-13T11:53:42.080603Z","submitted_at":"2023-04-28T03:34:43Z","title":"Deep Intellectual Property Protection: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.14613","snapshot_observed_at":"2026-08-07T14:49:47.596326Z","title":"Deep intellectual property protection: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.596326Z"},"links":{"cited_paper":"/paper/2304.14613","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:2b87157c44562bd1fb1efe4ee5a2cba0b744af1fa99b12ea5c41c111bda28d3c","observation_id":"92a9d4d8-bc2a-4630-8874-99076aca200f","resolution":{"observed_at":"2026-08-07T14:49:47.596326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-07T14:49:47.707265Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.707265Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:429c4ebf0f24d662958da42d5bb11f2e7607c1ffe2ef7c77618b5810d0b00b0d","observation_id":"6fd12706-7b0e-456c-b913-3035a14c5d8e","resolution":{"observed_at":"2026-08-07T14:49:47.707265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2208.05477","last_updated":"2022-08-10T08:27:26Z","snapshot_observed_at":"2026-08-13T14:47:51.332075Z","submitted_at":"2022-08-10T08:27:26Z","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","version":1},"cited_work":{"arxiv_id":"2208.05477","doi":null,"metadata_source":"pith","pith_arxiv_id":"2208.05477","snapshot_observed_at":"2026-08-07T14:49:48.985783Z","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","venue":"cs.CR","work_id":"2a5ee40d-5311-46a5-a76b-3a057c08a6de","year":2022},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.790079Z"},"links":{"cited_paper":"/paper/2208.05477","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:e844b000a1287327d1a217e4025dd520571fac979c3dcd5539b076e1853e28e2","observation_id":"01caabd8-225a-4e77-9850-26f5b313a41f","resolution":{"observed_at":"2026-08-07T14:49:49.078445Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:50.061379Z","title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring,","venue":null,"work_id":"daf24266-6a88-403c-bcd3-6491ecc366bf","year":2018},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.899982Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:1bcf94996378a7e2227f0137015bb57f1576b957fe0b25f6cca9b9ba352c06e7","observation_id":"4ff63cf6-297a-4007-bdc0-3f69813e07c1","resolution":{"observed_at":"2026-08-07T14:49:50.163826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14880","last_updated":"2022-02-24T23:04:32Z","snapshot_observed_at":"2026-08-13T17:44:23.724975Z","submitted_at":"2021-10-28T04:36:48Z","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14880","snapshot_observed_at":"2026-08-07T14:49:47.975982Z","title":"Aeva: Black-box backdoor detection using adversarial extreme value analysis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.975982Z"},"links":{"cited_paper":"/paper/2110.14880","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:722b15c616edc0a51c8a252ff180b55dc24cacfc94cd42ae75e3efa837415d62","observation_id":"6ef72ba0-d42a-47d5-82ba-db22dce64420","resolution":{"observed_at":"2026-08-07T14:49:47.975982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-08-13T12:49:42.080923Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-07T14:49:48.056361Z","title":"Scale- up: Scalable black-box input-level backdoor detection via analyzing predictions across scales,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.056361Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:1d6145a117bd07e7a65b4c65f54708286e4e8a3b66775eeef215a12da1140da9","observation_id":"31f05c83-a9b5-4f5b-97d8-5fd97f02afac","resolution":{"observed_at":"2026-08-07T14:49:48.056361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.12903","last_updated":"2020-10-31T15:19:17Z","snapshot_observed_at":"2026-08-12T02:21:56.303337Z","submitted_at":"2019-10-28T18:39:49Z","title":"IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.12903","snapshot_observed_at":"2026-08-07T14:49:48.145267Z","title":"IPGuard: Protecting intellectual property of deep neural networks via fingerprinting the classification boundary,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.145267Z"},"links":{"cited_paper":"/paper/1910.12903","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:6eb49ae62ffb8b7438b44aba9335e7ca8dc694511c33adcf7bbb58329444bad0","observation_id":"5f1e14f7-a77a-4e3e-af38-d40ce50294c2","resolution":{"observed_at":"2026-08-07T14:49:48.145267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T14:49:48.240706Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.240706Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:a66aa413c97a5e6c269181c0c8eabeeab9b6470ba4947b4489fb40ca92cd47ad","observation_id":"5c4dadde-51c4-4e42-b275-30a1f844a2cd","resolution":{"observed_at":"2026-08-07T14:49:48.240706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.917355Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"bcd0eefd-9b07-4607-979d-af545b347bbd","year":2009},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.323491Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:69c0cce83ad693a4a0bc09bec999c62384a5367c8ecb90cc3f0475fe3517c4df","observation_id":"7d8f2a72-b4c2-40fd-a5b1-dfffd21511d2","resolution":{"observed_at":"2026-08-07T14:49:49.974792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:48.412336Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.412336Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:985bd8afaef91d81e93f0b41aab3ca4954f2f9058097d8cb53e4f5358f866d53","observation_id":"ac6b6620-32a0-4d65-859a-a5b05000009b","resolution":{"observed_at":"2026-08-07T14:49:48.412336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.765273Z","title":"Pytorch: An imperative style, high-performance deep learning library,","venue":null,"work_id":"7f4f31c0-dd21-4c93-834c-77364b34237e","year":2019},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.477252Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:6fb9c05f0ecbe0bb4efd38593c5c549ea49982564913f3777a8b731201a56ed0","observation_id":"043e974b-9e07-4088-b90a-98ace881b77e","resolution":{"observed_at":"2026-08-07T14:49:49.819612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.612999Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":"05594e01-1270-487b-9c7d-da61687ed8e1","year":2004},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.583138Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:66151a7faaa99c24c834022f3f4d8c29ca45240f6eaa0b39e479963cee121e81","observation_id":"571b673c-05e6-4070-a9ca-3d4bfdcd83d8","resolution":{"observed_at":"2026-08-07T14:49:49.692500Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-12T14:19:29.389332Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-07T14:49:48.692444Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.692444Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:dec5d3e4143632930cf802044cc612749e01c531786afadbdc885da3212dd448","observation_id":"58ed454f-22e5-4624-aed4-baa53c1a9787","resolution":{"observed_at":"2026-08-07T14:49:48.692444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.439237Z","title":"ADV oIP: Adver- sarial detection of encrypted and concealed voip,","venue":null,"work_id":"a627fd69-dae3-4931-b757-aca4511573d8","year":2020},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.767310Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:9977012907cbb076117ce7ce0af7d203f54443ea3a9d26871d958e6ab42836cf","observation_id":"5e122db0-c38a-414f-a253-0fdda2d7a59d","resolution":{"observed_at":"2026-08-07T14:49:49.526734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.09274","last_updated":"2021-03-16T18:35:07Z","snapshot_observed_at":"2026-08-13T19:57:17.881674Z","submitted_at":"2021-03-16T18:35:07Z","title":"A survey of deep neural network watermarking techniques","version":1},"cited_work":{"arxiv_id":"2103.09274","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.09274","snapshot_observed_at":"2026-08-07T14:49:49.266359Z","title":"A survey of deep neural network watermarking techniques","venue":"cs.CR","work_id":"95c54b31-4a07-4579-b66a-51165549ea7f","year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.525966Z"},"links":{"cited_paper":"/paper/2103.09274","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:2e368678e420108ea52b2522ebb1b5d6d072cd99ed5154ff938a6dd27653b423","observation_id":"8e14c429-f86b-48d2-ab0e-3b9477076ef2","resolution":{"observed_at":"2026-08-07T14:49:49.343823Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-10T01:22:36.560324Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":8,"verified_exact":1,"verified_fuzzy":5},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2505.17579."}