{"as_of":"2026-08-23T05:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:809c33505b262c95578bbe4cc2fa125324309171a7313f44f7986c4a6e269d18","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:37:17.818810Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.04823/citation-record","integrity":"/paper/2506.04823/integrity","json":"/paper/2506.04823/citation-record.json","paper":"/paper/2506.04823"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.505786Z","title":"Traffic light mapping and detection,","venue":null,"work_id":"d6eb8903-4bf5-405a-82f7-41c27ec303f0","year":2011},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.685189Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1930f380614b38ab49429be4b377a865b5aafe9e1699869af6926aabfd04b858","observation_id":"19c6ea73-8dfd-471d-b722-0523a8e251b4","resolution":{"observed_at":"2026-08-07T10:37:18.508846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.496367Z","title":"Traffic light recognition using deep learning and prior maps for autonomous cars,","venue":null,"work_id":"ea439de3-9a72-4483-a7a6-c9e1df9b0c5a","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.743873Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:59f75890793e733875575196e9e7be09a4d50be550e1d1c046ecacd2d2c392f5","observation_id":"85915943-8337-4878-92b6-d57655d64fbc","resolution":{"observed_at":"2026-08-07T10:37:18.499833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.486785Z","title":"Intriguing Properties of Neural Networks,","venue":null,"work_id":"bdba45f6-7f93-4ec8-b967-514c6f2abef9","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.817225Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:37ffc2cbb6f0c2aa772e0b0f6fc489b10a2e42221489239401d597166cc34b19","observation_id":"87bcd682-30e2-4cb0-89ed-31d39c6fa593","resolution":{"observed_at":"2026-08-07T10:37:18.489977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.476945Z","title":"Explaining and Harness- ing Adversarial Examples,","venue":null,"work_id":"1f02009e-3552-4688-8d83-7f0d8da85f2b","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.905139Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:3db84c21a87907b55002276d0478b9f26a2a70a7d7d64d5d20171e9e3dd64b19","observation_id":"5f45c8b1-9d65-4930-b878-286d998d51a6","resolution":{"observed_at":"2026-08-07T10:37:18.480380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.467331Z","title":"Adversarial Patch,","venue":null,"work_id":"12813269-19df-4568-aff2-dc11bfa52a25","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.989816Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b65d213fdee30776acf3891323460e0f8c5f874f1847f4e0d72365b739e36919","observation_id":"1f2d426d-8ec6-4076-87e6-5ac0e183da3e","resolution":{"observed_at":"2026-08-07T10:37:18.470676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.457773Z","title":"Evalu- ating the robustness of semantic segmentation for autonomous driving against real-world adversarial patch attacks,","venue":null,"work_id":"4ad05d75-983d-43fc-8067-67b08f24bb70","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.080480Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0fab3ae6edbcc9eff41992597925aff0f9a543e62a9c9e8544f99e1cf999a499","observation_id":"a2021e9f-a8ae-457c-8367-ff4ba6881bec","resolution":{"observed_at":"2026-08-07T10:37:18.461332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.448778Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":"e69a959c-e09a-48cd-aa57-b74dbfabe623","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.162860Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:329e3f60a03786d18c83908047d78cee5be11378dfcf54d2e9831df3e41ab8da","observation_id":"205096b7-0ad3-459f-9827-621ecab2034e","resolution":{"observed_at":"2026-08-07T10:37:18.451970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.439587Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":"d510ffe5-6fdb-4e21-9da9-31622fa63366","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.231449Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5cd6768a4c2868cbfbd221ce9cacd540cd806588462864e25741dd69867cf690","observation_id":"c9068850-d865-40c5-a0b0-ebcc4a73386a","resolution":{"observed_at":"2026-08-07T10:37:18.443124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.430460Z","title":"Feasibility and sup- pression of adversarial patch attacks on end-to-end vehicle control,","venue":null,"work_id":"82603485-da91-4d7b-ab9e-b72a2c7538a1","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.302466Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:9003f9e31e50294535d25a816b1f53d6a49db5b5301db0844f7463a5852675e8","observation_id":"d5781805-0694-4291-b896-5e88044270ac","resolution":{"observed_at":"2026-08-07T10:37:18.433449Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.421930Z","title":"Effects of and defenses against adversarial attacks on a traffic light classification cnn,","venue":null,"work_id":"cd116786-2d32-4029-bdb7-94826c3d3b08","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.372750Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:4f1f5047ec0247f300f537e50f65d50ac5d593befe8c2d62f03e0815bd36d9e5","observation_id":"3013aa1c-8191-4cdd-9ff3-ed34ae88df6a","resolution":{"observed_at":"2026-08-07T10:37:18.424833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.412035Z","title":"SITAR: evaluating the adversarial robustness of traffic light recognition in level-4 autonomous driving,","venue":null,"work_id":"368063c5-47d0-476c-901d-6306aaec0141","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.425422Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:56843d31462ff02750add1c7a4b76e32220fd8b286e9754dbb9d00b67779dcb6","observation_id":"728c023e-f1c9-4b03-a544-f7f6fcb8df6a","resolution":{"observed_at":"2026-08-07T10:37:18.415879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.403100Z","title":"Rolling colors: Adversarial laser exploits against traffic light recognition,","venue":null,"work_id":"6f007a01-6c79-41da-bf1a-5e8a8182e7d0","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.502743Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:7458f5a3e07d9654705e4d8aaf42191cab550936c00aa5fdf5c87941176cf6d3","observation_id":"e56b75f9-ab3a-4463-a0c3-5d1c6f00f6f7","resolution":{"observed_at":"2026-08-07T10:37:18.406669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.393741Z","title":"On the vulnerability of traffic light recognition systems to laser illumination attacks,","venue":null,"work_id":"26a46fe4-5043-499e-8c7c-70a5e35d69e5","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.577835Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0528b9fe222c855bd8795753bf272bcea89841899562eca8e65a6db7291640de","observation_id":"035514f2-0521-4130-83c3-f474d71d4b5e","resolution":{"observed_at":"2026-08-07T10:37:18.397130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.383762Z","title":"Deepbillboard: Systematic physical-world testing of autonomous driving systems,","venue":null,"work_id":"0444e19a-22e5-481e-814c-2bf364861d1d","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.670412Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0dc11e0bfe323309fd64a765ce425435e5d97324ab542e7cd64e9d8b66861524","observation_id":"aedfcf2b-9e5b-420d-a467-3f0acb2315a6","resolution":{"observed_at":"2026-08-07T10:37:18.387533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.373893Z","title":"TLD-READY: traffic light detection - relevance estimation and deployment analysis,","venue":null,"work_id":"b0703224-cbcc-456f-b23a-437da0826163","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.784067Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:c591b6cc2bb065c4ba1a831dcde0942adc17d6eb427297cece554578c8100ce0","observation_id":"73b2598a-3d9c-4e72-999c-11b94612d1bb","resolution":{"observed_at":"2026-08-07T10:37:18.377223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.364529Z","title":"From door to door—principles and applications of computer vision for driver assistant systems,","venue":null,"work_id":"a9029686-8a36-4866-ae5b-f1baad6e1178","year":2001},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.895269Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:2e6d06e2ad1596c8b7d7c0762cc7ff4f3dcb0a13ff83517caca8698b8f24ce5d","observation_id":"a4d56762-daa4-4c28-bd86-9b8f8e92c18f","resolution":{"observed_at":"2026-08-07T10:37:18.367827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.355674Z","title":"A vision-based traffic light detection system at intersections,","venue":null,"work_id":"69774cd1-f7b2-4aef-954e-0a2dc677c795","year":2002},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.969130Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:a5558b282bca230f88f93ef7d634eb61ab9f36bbc21b8603472e302a50d86ac7","observation_id":"429c28b5-f86b-4ab2-99a1-107b5db70c41","resolution":{"observed_at":"2026-08-07T10:37:18.358654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.347042Z","title":"Robust recognition of traffic signals,","venue":null,"work_id":"4977eb5d-28c7-4cc4-a71c-4dbe3955cbe0","year":2004},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.045295Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0d014871016ed256cc4e1361cba2546e2fffe3a34d83c947e99e739df80f60b8","observation_id":"a6e844dd-251e-4454-ae41-f219c9356fb4","resolution":{"observed_at":"2026-08-07T10:37:18.349950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.338356Z","title":"Visual state estima- tion of traffic lights using hidden markov models,","venue":null,"work_id":"66894c8a-4974-4370-9d60-2197b9edef12","year":2010},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.166031Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:cff76554f409437d32d5500efe29bee60cd49008bb1dbc6d93524b09ac0997ed","observation_id":"ff040fdf-695e-4ea9-b8f2-58b838ea57ab","resolution":{"observed_at":"2026-08-07T10:37:18.341308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.329824Z","title":"Traffic light recognition using convolutional neural networks: A survey,","venue":null,"work_id":"85270fb4-7bd0-4a0c-ac9b-ab35d95de31b","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.272657Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:ac6dd41ce730fdd32e5990436b1248d36401c82597ba80612becb8b8b02c7057","observation_id":"ba8b17ff-ca59-45e3-bb4b-0c322a6567fd","resolution":{"observed_at":"2026-08-07T10:37:18.332750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.321221Z","title":"You only look once: Unified, real-time object detection,","venue":null,"work_id":"ff0f3768-1d1d-49c2-98ff-2c8e173d9515","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.339833Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:173aa2881d9c69ab1cb070ad75e4399e9df6ff82b9d6dec04a90b2dd2883c1e2","observation_id":"34268bd4-c9e4-4d0b-a944-f51c562cf255","resolution":{"observed_at":"2026-08-07T10:37:18.324315Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.312416Z","title":"Ssd: Single shot multibox detector,","venue":null,"work_id":"dcea5cb4-bccb-450b-9e4c-44d5d0640d95","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.451483Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f7ca93f76c15e66643ee88a5870506f640c07b92cf770534815af9cd604f11a2","observation_id":"b19ca7db-145b-494e-ba08-920591199833","resolution":{"observed_at":"2026-08-07T10:37:18.315359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.303572Z","title":"Vision for looking at traffic lights: Issues, survey, and perspectives,","venue":null,"work_id":"e0b4e823-835c-40e9-84dc-a5abe8bd4549","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.535986Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:a0bab9460877d238810e3f4c0c606a0322534841c48201b9581bcc818aab57bd","observation_id":"9049a220-6853-4977-96a3-57b06fbea182","resolution":{"observed_at":"2026-08-07T10:37:18.306606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.294696Z","title":"Detecting traffic lights by single shot detection,","venue":null,"work_id":"d2d25121-aa09-4cd1-b539-7d718c7fd42a","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.591803Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:957dbd6a5cdc20b9fbab0f0c9651733b825fe81b995331ca3b5e17468daf6a8e","observation_id":"ec9fa99f-e3e1-46b2-afbf-2e180013bda0","resolution":{"observed_at":"2026-08-07T10:37:18.297808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.285891Z","title":"A hierarchical deep architecture and mini-batch selection method for joint traffic sign and light detection,","venue":null,"work_id":"a4295226-54f2-4e0d-bc4e-52fe7abd014e","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.667854Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:789531dc87475cbea21d363fec2f355577c98ef12c59f1853385f4daad36b948","observation_id":"a3220457-26b9-4ac8-9032-3957f27bdd66","resolution":{"observed_at":"2026-08-07T10:37:18.288901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.277435Z","title":"Deep convolutional traffic light recognition for automated driving,","venue":null,"work_id":"c69f5cea-8f48-455d-8e99-1da36294af6c","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.739395Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:75e04d35d7216a36cd5710ed8d08d9ca729a9d9b49133610a5625ebf7d481078","observation_id":"d0f5653f-9760-4bf2-8f49-544882aac162","resolution":{"observed_at":"2026-08-07T10:37:18.280253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.268559Z","title":"Real-time traffic light detection and recognition based on deep retinanet for self driving cars,","venue":null,"work_id":"6dc2f575-5cc9-453b-a00d-af6ce9735efa","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.794930Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f3dd07ef83204cdda1ceacadaaffd190ce0b10220ec8bc0009979ef6922ab3b4","observation_id":"fe458551-5e0a-4a53-99c1-07dc3bdbc4cf","resolution":{"observed_at":"2026-08-07T10:37:18.271641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.260097Z","title":"A comparative study between state-of-the-art object detectors for traffic light detection,","venue":null,"work_id":"58d5f5bd-f7d5-4896-96a6-0b1a88330c9b","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.844478Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:31ebb2d9a3c04fbc56840c2db17e2d89d2b22be26581cd3b378794963ebabf50","observation_id":"0821f706-1d37-444f-857b-4fe62346b8dc","resolution":{"observed_at":"2026-08-07T10:37:18.263043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.251020Z","title":"An end-to-end traffic light detection algorithm based on deep learning,","venue":null,"work_id":"f99969c9-8718-46ae-a76d-cd18130ac0cc","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.916694Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:9d14b623dbb18feb5adfe94f8278401092ca83198be797e5c7204c38a86f58a8","observation_id":"0b2ad625-a0b0-4e5f-889b-92ccd07e73d5","resolution":{"observed_at":"2026-08-07T10:37:18.254380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.241842Z","title":"Traffic light detection based on depth improved yolov5,","venue":null,"work_id":"8532b9cf-0ef7-46fe-938f-87f6702e212c","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.980983Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:4c02997ae3898020c3e62b814449d2adfd515dda497be7ffd8ba250429a59b2c","observation_id":"31f9fe89-a20c-41a3-bd75-53edceec4f3f","resolution":{"observed_at":"2026-08-07T10:37:18.245130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.232737Z","title":"Real-time small traffic sign detection with revised faster-rcnn,","venue":null,"work_id":"6f280bee-c2eb-4b72-8129-c5bcada8246e","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.042478Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:268f83cc2f5df9f0731c49ce61e938d69a51fcdb8788caf296bf7af11a05779b","observation_id":"a7197b45-63c3-434e-9758-e74056159680","resolution":{"observed_at":"2026-08-07T10:37:18.236032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.223802Z","title":"Traffic lights detection and recognition method based on the improved yolov4 algorithm,","venue":null,"work_id":"b802e934-bb16-4ee7-853d-3f37a949ac27","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.091742Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e0195d2b801732fa7fb4349ec115b992bb1569e553b7f63eb34a9fa17841ee43","observation_id":"6ffdcd3a-e6bb-44dd-90eb-0ed05f6e7ed0","resolution":{"observed_at":"2026-08-07T10:37:18.226937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.214277Z","title":"Fast traffic sign and light detection using deep learning for automotive applications,","venue":null,"work_id":"9a79cfbf-e4c5-4e75-93f9-8c9a38820a41","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.161030Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1dd5d3d7f7d9fffc9d57ef33163fa38749facedce40cc321a79d4f65fbed6411","observation_id":"c2a885ae-e544-4e37-935e-ccba31260621","resolution":{"observed_at":"2026-08-07T10:37:18.217656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.204701Z","title":"Deeptlr: A single deep convolutional network for detection and classification of traffic lights,","venue":null,"work_id":"3cf7ad60-ecd8-4ec7-b192-760bf0ef3dde","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.239775Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:30197650fb5285c3150681f88c4aabffc9028749167005426234d057f381a76b","observation_id":"89064089-d066-40b4-ab00-f29f37124288","resolution":{"observed_at":"2026-08-07T10:37:18.207802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.195127Z","title":"Hdtlr: A cnn based hierarchical detector for traffic lights,","venue":null,"work_id":"8c62d5cd-7b37-4953-824c-28c02fc1d896","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.296031Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e60b5bd376adbcd05e48ac8883640606f27e274f4b4fe37af960ad092875ce89","observation_id":"56e088c4-6c7b-49dc-a38a-4f87e2c0484c","resolution":{"observed_at":"2026-08-07T10:37:18.198420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.186059Z","title":"Traffic light recog- nition in varying illumination using deep learning and saliency map,","venue":null,"work_id":"eb6a5f51-a1c1-47ff-9b75-fc8bbe1e5cbf","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.355629Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:6348ebbefc122c42d5a62cb63042442fd4346b289b112a14f6c2731a47b538a6","observation_id":"ded1eb49-d3ac-4081-861f-a4cbe7f482f9","resolution":{"observed_at":"2026-08-07T10:37:18.189121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.176450Z","title":"Saliency map generation by the convolutional neural network for real-time traffic light detection using template matching,","venue":null,"work_id":"5ed10cf1-9cdc-481b-9363-383c86dcff08","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.439643Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:eb626c49b150182526df840a0a3407407cbf71cfb635f50fefd4bf5b67ecab00","observation_id":"d6360d40-c8a2-403a-8d6e-d5c7e6ef5624","resolution":{"observed_at":"2026-08-07T10:37:18.179690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.167252Z","title":"Universal adversarial perturbations,","venue":null,"work_id":"8def07b0-2d24-4e77-b66f-e714db7b1f43","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.496377Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:dd3356da776af3f1cab74e69c552d209b83dd7b0b8920a3328ca3c32f672fa20","observation_id":"79ec9c8b-e83e-4c17-b005-748946772e09","resolution":{"observed_at":"2026-08-07T10:37:18.170302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.158389Z","title":"Lavan: Localized and visible adversarial noise,","venue":null,"work_id":"1f8f031d-01d8-42be-acf9-d68c57ceed08","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.565804Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:488dbdead2bcb720a9b86909fde90d539e58c8460f5f26bc17cda4fc9ea2c520","observation_id":"e98a64f9-7b7d-40db-817c-3a6eee6bc7e5","resolution":{"observed_at":"2026-08-07T10:37:18.161319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.149564Z","title":"Adversarial vulnerability of temporal feature networks for object detection,","venue":null,"work_id":"74d932b7-0f9d-490c-a863-5d5ba93b2f39","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.632131Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b2ad318277ccc52113d187d82eac0b1aa29787b45fab32b6dbbe4430753f45b7","observation_id":"e4cc175f-bdc4-4c3a-a961-10be1ab636ed","resolution":{"observed_at":"2026-08-07T10:37:18.152890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.140906Z","title":"Feasibility of incon- spicuous gan-generated adversarial patches against object detection,","venue":null,"work_id":"0cf0183f-ae8b-43fc-a5d3-75fabfdb5445","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.705093Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:49e9479da997adb1c256ac24e0ccce99084afc92d908ad9683cdeb1620a76bf5","observation_id":"8b3dc529-5e36-43ca-93f9-794d0ae9ddfd","resolution":{"observed_at":"2026-08-07T10:37:18.144130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.131084Z","title":"Patch-based attack on traffic sign recognition,","venue":null,"work_id":"67646529-c703-4133-9974-0ee7f50372cc","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.764045Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:8efdca68afe8c04d895573667c920f15939eee5954138d9aecf6f3899c2e9ef2","observation_id":"38509f7e-d59c-436f-80a0-430eb342bacf","resolution":{"observed_at":"2026-08-07T10:37:18.134565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.122251Z","title":"Cyber attacks on scada based traffic light control systems in the smart cities,","venue":null,"work_id":"0595278a-3d6f-45d2-9c6f-5fb73ab02667","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.828184Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f6be63f40d98f98a41cca47ef9871a695d00c9c9ef7e76086c2010eb4d15dbb3","observation_id":"a09b0d95-001c-4678-9494-d9204b415630","resolution":{"observed_at":"2026-08-07T10:37:18.125236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.113237Z","title":"Green lights forever: Analyzing the security of traffic infrastructure,","venue":null,"work_id":"7da06f11-a78d-49ea-b975-f8098ee86436","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.898528Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:65b7416f7bebc75ac51e89a04abbba08d1e1c35256e832268420dd2cb5cbaaad","observation_id":"ac9cdb83-9a5c-4b36-bb67-e49a149b62f6","resolution":{"observed_at":"2026-08-07T10:37:18.116399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.103766Z","title":"Fooling perception via location: a case of region-of-interest attacks on traffic light detection in au- tonomous driving,","venue":null,"work_id":"ca2d9630-4818-4a87-91cd-ed18c86f293c","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.964721Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:14ce83da9963c523bb133be421df2d9c21129198061ba34012501890c5114322","observation_id":"4b32bc11-5fb1-4203-8ca2-3aa3dd59f163","resolution":{"observed_at":"2026-08-07T10:37:18.107100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.094555Z","title":"Exposing congestion attack on emerging connected vehicle based traffic signal control","venue":null,"work_id":"67fdabd2-ae59-4740-b022-8c3f18680646","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.026097Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:7a925a55a43bb464f15939d8c8c6898383a9e17b31851a149a09d83d344c530a","observation_id":"18c31f7d-2671-4999-b9a1-a808aa01e4f7","resolution":{"observed_at":"2026-08-07T10:37:18.097716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.085306Z","title":"Secure traffic lights: Replay attack detection for model-based smart traffic con- trollers,","venue":null,"work_id":"705ec983-e35f-4ee7-85c2-510117181f79","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.112752Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5a4a78cc26ac1f2646f4be715c2af17335970ecd75ac99af3b0edda748132588","observation_id":"c5eece71-0f99-4378-8ae2-03f53363c887","resolution":{"observed_at":"2026-08-07T10:37:18.088793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.076275Z","title":"I can see the light: Attacks on autonomous vehicles using invisible lights,","venue":null,"work_id":"e1b7e086-0174-4477-83ac-d424a6c89bc0","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.249590Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:c398915e7908e02621855aeb6b19869403ce8e2cd51b0cacaeeea546ae7e5a92","observation_id":"25c7ed25-d2c8-4739-9adf-d3f0f14dd3d9","resolution":{"observed_at":"2026-08-07T10:37:18.079344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.067587Z","title":"Baidu apollo team (2017), apollo: Open source autonomous driving,","venue":null,"work_id":"c69ded06-d3f9-45b1-a1eb-e909ab7fd70a","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.379467Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:243a9b38da712086c471c043b842bd36a88e3e0a4072cb84a1dd8423e1169036","observation_id":"0b62d41f-d3e6-4fe8-8965-c6ee572a37bb","resolution":{"observed_at":"2026-08-07T10:37:18.070484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.058714Z","title":"BDD100K: A diverse driving dataset for heterogeneous multitask learning,","venue":null,"work_id":"5230b707-062a-46e8-adec-ffcb52bae12c","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.385571Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:d487963bacdfc05543b3fd516aa7c81d25f8de349a709eb77a344cedc976a3e4","observation_id":"5dbfab1c-5b9b-4c6e-b59d-7620859edf40","resolution":{"observed_at":"2026-08-07T10:37:18.061831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.050137Z","title":"Autoware on board: Enabling autonomous vehicles with embedded systems,","venue":null,"work_id":"afee3012-91f3-4597-a3af-6ee7b5bc72b2","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.497891Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:a7f1b489e572a149998b7a9ada634913daeccb17b9d3f84bbc73cca91d51d4ee","observation_id":"113ca649-1dc1-43fa-8c46-2f5c388b2db4","resolution":{"observed_at":"2026-08-07T10:37:18.053086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.04861","last_updated":"2017-04-17T03:57:34Z","snapshot_observed_at":"2026-08-20T09:32:02.065929Z","submitted_at":"2017-04-17T03:57:34Z","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.04861","snapshot_observed_at":"2026-08-07T10:37:15.585881Z","title":"Mobilenets: Efficient convolutional neural networks for mobile vision applications,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.585881Z"},"links":{"cited_paper":"/paper/1704.04861","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:6eae3a13b0a06005060fef3af78d6b168ba1f1fce87aad60050ad9b401609c0d","observation_id":"5ff093cc-f37e-42f1-a549-b2a6830aaee2","resolution":{"observed_at":"2026-08-07T10:37:15.585881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.041205Z","title":"Rethink- ing the inception architecture for computer vision,","venue":null,"work_id":"518af005-31e8-48d2-a8b8-151a0d3bbe51","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.698745Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:8f097dff59887a44521251ca38d4673a44a1b342aac0268643d54e6910a3e3d5","observation_id":"5eb276da-852f-4ad2-a0b4-0cedf947191d","resolution":{"observed_at":"2026-08-07T10:37:18.044268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.032035Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":"4a0b5cd9-6d78-48d0-b862-e7a40c34bda5","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.844467Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1dfc2ecd249841b0d8958099b32ed230a62438246aa92e91f3a5de5906708cea","observation_id":"9dd116f0-bded-4dd3-a22a-7614a4e55626","resolution":{"observed_at":"2026-08-07T10:37:18.035070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02779","last_updated":"2019-09-16T04:38:13Z","snapshot_observed_at":"2026-08-14T20:05:48.423304Z","submitted_at":"2017-12-07T18:53:52Z","title":"Exploring the Landscape of Spatial Robustness","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02779","snapshot_observed_at":"2026-08-07T10:37:16.019987Z","title":"A rotation and a translation suffice: Fooling cnns with simple transfor- mations,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.019987Z"},"links":{"cited_paper":"/paper/1712.02779","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:c6a82473c46b6ffa5e6f607bc0068a6a29d0befe1f18497039edb8b5f8f55f62","observation_id":"0b187d66-f89c-433a-8dd7-ee66f3c42bca","resolution":{"observed_at":"2026-08-07T10:37:16.019987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.022372Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":"88897d90-1cd9-467f-bffc-ec7279682377","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.115237Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:6fa05d99173ea033ae28165d1f4a261cc0a68b602a537bb9ed55a51b00c013e2","observation_id":"5eeaa45e-60cb-4b07-bce3-a827f6769bad","resolution":{"observed_at":"2026-08-07T10:37:18.025609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.012035Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"53f7f764-392d-47ab-ba4f-59a87f8df009","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.243787Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1b60eda562364946886983f3dd3ab3223c90aa82cbbbdf8b048bec976f409901","observation_id":"87c80969-7af9-4058-abc4-2fead663f26f","resolution":{"observed_at":"2026-08-07T10:37:18.015742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.001836Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"d39fd3a9-c458-41fa-bd74-3ee8733aada4","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.398754Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:05d6d5769bc8604ea39f6227c2a11265a475e2d8d5b3406a1857177560b1afd9","observation_id":"8a7db17d-ddbe-4f83-8c25-e2bd0aadb8f4","resolution":{"observed_at":"2026-08-07T10:37:18.005468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.991853Z","title":"Carla: An open urban driving simulator,","venue":null,"work_id":"1560ce40-402b-4782-8b00-a9f3a3469716","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.528560Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:7a3aa27c1323c55ba68d6e6f0864c1cf74d8994db1aeba5eda0a192e7c911c60","observation_id":"a40a06aa-8b25-4a84-930e-9d63e57f2c96","resolution":{"observed_at":"2026-08-07T10:37:17.995424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.982510Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks,","venue":null,"work_id":"ac3ad053-0df7-48da-8578-dd3e73d817aa","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.599747Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:c1f60e994ce007dd0b6f075e9a92bf6e87a81d6a4b217b1334e88aafe5f7e742","observation_id":"51c80d3f-f055-4150-9324-bf4baa473c8e","resolution":{"observed_at":"2026-08-07T10:37:17.985715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04320","last_updated":"2020-04-09T01:36:23Z","snapshot_observed_at":"2026-07-06T09:11:05.464327Z","submitted_at":"2020-04-09T01:36:23Z","title":"TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems","version":1},"cited_work":{"arxiv_id":"2004.04320","doi":null,"metadata_source":"pith","pith_arxiv_id":"2004.04320","snapshot_observed_at":"2026-08-07T10:37:17.859606Z","title":"TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems","venue":"cs.LG","work_id":"20cef069-6b44-449a-ab6a-0aa2c0fa1c25","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.752120Z"},"links":{"cited_paper":"/paper/2004.04320","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:d961ae932734acb696643864f62cdfb7499b8bc0c80328e8ed96c122a6d36d1a","observation_id":"06a7c3e0-3f37-4f28-97cd-93369acb7161","resolution":{"observed_at":"2026-08-07T10:37:17.865443Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.971843Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":"9b0563ee-64cd-4969-8e0b-4dccac1537d4","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.863878Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:095b27338ea940fce5a80d68e95fc7fc9650e515844940d7000b337b96255d8a","observation_id":"f048c503-8e80-4f81-b8b1-3ec2f0d5e06a","resolution":{"observed_at":"2026-08-07T10:37:17.975525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.961821Z","title":"Adam: A method for stochastic opti- mization,","venue":null,"work_id":"ee719623-b7e8-4ce3-bfb0-a13f8452084b","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.971849Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:43ac1f43008c5f65796ca0f7f71f8bac6864bd96dc170c37ef81f86a1e34ffb6","observation_id":"9093ce40-e207-4cda-a4c1-4e9b6836460e","resolution":{"observed_at":"2026-08-07T10:37:17.965511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.952879Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":"d345b595-6758-4500-aeed-b03b01078c48","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.081980Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:4cce6fee3994cab3f554b234e6e69d3faf248294e421c43601840f424f635bbb","observation_id":"8eed12ef-b56c-45f8-af11-4eed65c060d7","resolution":{"observed_at":"2026-08-07T10:37:17.955887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-19T18:36:08.419955Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T10:37:17.197850Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.197850Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:d8262f4f3e690d7bbe651425dbc3f327a9a2b80240b42e0eb387c4150fefe276","observation_id":"60ff88c6-b72c-4886-9c65-c04e9587339f","resolution":{"observed_at":"2026-08-07T10:37:17.197850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.942894Z","title":"Yolov7: Trainable bag- of-freebies sets new state-of-the-art for real-time object detectors,","venue":null,"work_id":"f39e97ed-0a6f-4798-8d1f-14eb755449d2","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.334661Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:7d44776d17004fc2ec0356dcac8c1447db50be13113852291202d4772ef74c70","observation_id":"0ca1dd0a-14fb-4d89-828e-088a26f1f977","resolution":{"observed_at":"2026-08-07T10:37:17.946620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.933095Z","title":"Yolo by ultralytics (version 8.0.0) [computer software],","venue":null,"work_id":"733503cf-f8d0-42cd-a48d-347369be613e","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.488777Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:bac7f08f78121df89310550ef7036aa3733c64ec0b525a0a852b5ad4c6c59ca3","observation_id":"9e158376-8c81-4c47-a32d-1d9b122c72c9","resolution":{"observed_at":"2026-08-07T10:37:17.936416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.923484Z","title":"A deep analysis of the existing datasets for traffic light state recognition,","venue":null,"work_id":"0c691b32-bf40-4cf3-804f-6a096949ccb3","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.645056Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:63ceb95fccc028e7e51c1f6a24e227d835cbbf66bc21ecec2b3e2946bcfb84de","observation_id":"77d3635a-872c-4899-8ddc-4a07d75dade6","resolution":{"observed_at":"2026-08-07T10:37:17.926794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.913900Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"6c774466-d8ff-4300-b69b-97f985ccd48a","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.806408Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b891f95a0e6ed89c54f53921fc8bd51ab2d7f33c313e5203c4f7942a00bd8494","observation_id":"29a2425e-225f-4b0d-b114-f89229a01d06","resolution":{"observed_at":"2026-08-07T10:37:17.917394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.903957Z","title":"CoCar NextGen: a Multi-Purpose Platform for Con- nected Autonomous Driving Research,","venue":null,"work_id":"35f03f94-a917-4e9a-be14-ab89ec72b78b","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.815518Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:c7ae6bd6cf0b40328ed23ce71d92bce22bb52e75acc2995a2ca528d1d4784be0","observation_id":"a70b0229-f7da-4245-bff1-16b98da59020","resolution":{"observed_at":"2026-08-07T10:37:17.907459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.893800Z","title":"The atlas of traffic lights: A reliable perception framework for autonomous driving,","venue":null,"work_id":"f752fb10-06ef-4acd-bf65-b9711820b9a7","year":2025},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.818810Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:fa38b9c26a7028e6d388860e47d5e04c57bee15755a1c82ab0a251ef06fbe492","observation_id":"fa8b2308-b648-4cd3-9482-98b50a0eaa2d","resolution":{"observed_at":"2026-08-07T10:37:17.897088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-19T13:47:47.729441Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":1,"verified_fuzzy":67},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 23 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2506.04823."}