{"as_of":"2026-08-10T04:14:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fd29857b708488f4d0bd98db24f7db21a3e6ed3b75482b11903baf67d610b702","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:38:26.388096Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:38:22.211976Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-07T05:38:26.772211Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"cited_work":{"arxiv_id":"2506.07590","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.07590","snapshot_observed_at":"2026-08-07T05:38:26.772211Z","title":"Explore the vulnerability of black-box models via diffusion models","venue":"cs.CV","work_id":"91db597f-bf7d-4f46-8915-f855da6b316c","year":2025},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.211976Z"},"links":{"cited_paper":"/paper/2506.07590","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:df2f70a587c0516fa6d9e1f8fca1a6e0d18cdbb6ed7ee0db1a8245ac6da11b34","observation_id":"882318f0-82e7-487b-b17a-73d6027f28f5","resolution":{"observed_at":"2026-08-07T05:38:26.873879Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.07590/citation-record","integrity":"/paper/2506.07590/integrity","json":"/paper/2506.07590/citation-record.json","paper":"/paper/2506.07590"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"cited_work":{"arxiv_id":"2506.07590","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.07590","snapshot_observed_at":"2026-08-07T05:38:26.772211Z","title":"Explore the vulnerability of black-box models via diffusion models","venue":"cs.CV","work_id":"91db597f-bf7d-4f46-8915-f855da6b316c","year":2025},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.211976Z"},"links":{"cited_paper":"/paper/2506.07590","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:df2f70a587c0516fa6d9e1f8fca1a6e0d18cdbb6ed7ee0db1a8245ac6da11b34","observation_id":"882318f0-82e7-487b-b17a-73d6027f28f5","resolution":{"observed_at":"2026-08-07T05:38:26.873879Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.530420Z","title":"Diffusion-based generative models, known for generating high-fidelity and diverse synthetic images, are central to our research, particularly stable and latent diffu- sion models","venue":null,"work_id":"b3207e5c-9b90-47af-b431-f48aad22b5a8","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.281048Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:cc8b5cefd7ecfbd6fb47b9e39a65521a66aea357e74ddabd82a8488cd9cdfa86","observation_id":"649b364b-7a2e-49a5-beb1-552e0b7a4ae3","resolution":{"observed_at":"2026-08-07T05:38:30.593333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.390353Z","title":null,"venue":null,"work_id":"c6570c16-13a9-48ea-bf24-8a0a531a0bfb","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.378307Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:2bf4157ddea7372f16ae1879a6e9a2ec89a40dd0bd56708eafece0c9f6a5b820","observation_id":"1a187c80-e236-4878-a400-8cdf3ef27217","resolution":{"observed_at":"2026-08-07T05:38:30.464833Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.236704Z","title":"Experiments on Model Extraction 4.1.1","venue":null,"work_id":"68c5d449-f38f-4c5e-bad8-0564958db708","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.465615Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:3c483250e9f69e2dd41370e6733ef094582a69c18717fdda213780f93c6584ce","observation_id":"64ba7d80-bd91-4bf7-81b2-3d3fd8150215","resolution":{"observed_at":"2026-08-07T05:38:30.311261Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.089530Z","title":"We developed a method for training robust substitute models in a data-free, hard-label, and query-limited setting","venue":null,"work_id":"2b822aba-3cd5-48cc-8bf5-55bd980c6c82","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.531451Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:0ebc5d1662dd7cace19dbe0766fb75fed3db625670ff0d781dbc696e9b07741c","observation_id":"910d23f9-8830-457f-9d6d-4faddd0d5da1","resolution":{"observed_at":"2026-08-07T05:38:30.139455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.943320Z","title":"Data-free model extraction,","venue":null,"work_id":"2b2ba8f2-2631-4691-b580-0a59117a8335","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.654121Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:f806a7530d63a6114a9405b1cc6b0d7ced86eff24193d54bdfbe41bd180f3da7","observation_id":"b6dab6e1-be3e-4406-a62b-19105cc62fb4","resolution":{"observed_at":"2026-08-07T05:38:30.025492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.783478Z","title":"Disguide: Disagreement-guided data-free model extraction,","venue":null,"work_id":"15d7f887-b6b3-44b1-b358-c9af7e7df99f","year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.783026Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:675c28da2b147ae01a0cd3bd025ea5e33f04a0c02cd47af5c5035508803a95dc","observation_id":"08a9ed2c-5478-49b8-b443-c07aeb598d66","resolution":{"observed_at":"2026-08-07T05:38:29.864264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.512835Z","title":"Dast: Data-free substitute training for adversarial attacks,","venue":null,"work_id":"d9fd4e38-bcbc-47c7-868b-be97236fc7df","year":2020},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.921980Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:8590158a5c78e576fff6b28f8cb4cacf71363e32455d1a20db1fbe1775fcbf9e","observation_id":"7ac29e3b-a42e-4666-b704-8a6efd7ee427","resolution":{"observed_at":"2026-08-07T05:38:29.641566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.230200Z","title":"Towards efficient data free black-box adversarial attack,","venue":null,"work_id":"8717e73a-310c-4aae-9fff-e54330a60e8a","year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.040110Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:8cd510bb695990f31a8b69e7bbbcd331d6cfd424328dbc52d2f1de76ee0c827a","observation_id":"e647d121-605b-4bb8-b8a5-0c3adf9d492f","resolution":{"observed_at":"2026-08-07T05:38:29.385289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.022233Z","title":"Why do adversarial attacks transfer? explaining transferability of evasion and poi- soning attacks,","venue":null,"work_id":"2fc5f8d1-b877-43b8-a88b-eb59c35ff967","year":2019},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.198186Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:712a7830ace115e8e8a7863b45c7bc70d49988cc2c773c0ad3d6167d63e45720","observation_id":"36ab0e62-3d0d-45e4-86a1-1ecab2e19016","resolution":{"observed_at":"2026-08-07T05:38:29.114300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.859210Z","title":"Catastrophic forgetting and mode collapse in gans,","venue":null,"work_id":"52256860-155f-4ed4-9619-9fc2bb4d1e52","year":2020},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.333762Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:461f258d171b204d7d79567f7fd18945cfd2748c7420ea13ee3f54ab9709452b","observation_id":"1b7426f4-2718-48a5-8935-7801f565e588","resolution":{"observed_at":"2026-08-07T05:38:28.935621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.705185Z","title":"Adversarial attacks against deep generative models on data: a survey,","venue":null,"work_id":"89674155-6013-4f67-9424-d00e657e514d","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.425628Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:b545a436834befd9e0e0804c66e44fe2a0fa75361e4ef852a91b10e5c3ce2937","observation_id":"4d5ef2ec-41fa-4945-9e7a-7165f50d264a","resolution":{"observed_at":"2026-08-07T05:38:28.769909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12872","last_updated":"2024-03-30T06:59:35Z","snapshot_observed_at":"2026-07-06T15:57:53.178833Z","submitted_at":"2023-07-24T15:10:22Z","title":"Latent Code Augmentation Based on Stable Diffusion for Data-free Substitute Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.12872","snapshot_observed_at":"2026-08-07T05:38:23.487864Z","title":"Data-free black- box attack based on diffusion model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.487864Z"},"links":{"cited_paper":"/paper/2307.12872","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:fd948bb99b454a27f9796369a43b377ab3de00b7edc00dbe4e821bfc923b2b40","observation_id":"14f453da-b792-461c-b6a7-3a7cbe320d16","resolution":{"observed_at":"2026-08-07T05:38:23.487864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.508871Z","title":"Safe latent diffusion: Mitigating inappropriate degeneration in diffusion models,","venue":null,"work_id":"840d83db-c849-4059-8870-1622be93a60d","year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.620198Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:9fc6369fb21825f558eee7e91e25234f3090c292fa30e4ad9f7a5ba49a5ede05","observation_id":"dbd470d5-fa12-4c62-85b3-0b11381d7ce5","resolution":{"observed_at":"2026-08-07T05:38:28.595281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6550","last_updated":"2015-03-27T11:52:28Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-19T22:40:51Z","title":"FitNets: Hints for Thin Deep Nets","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6550","snapshot_observed_at":"2026-08-07T05:38:23.710105Z","title":"Fitnets: Hints for thin deep nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.710105Z"},"links":{"cited_paper":"/paper/1412.6550","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:4a83b8c24c6ecde20375648d1ac7e614d47f88b59d96a35f82b8fc93a053dd40","observation_id":"6610efc6-2005-4416-9f0a-57a87543b988","resolution":{"observed_at":"2026-08-07T05:38:23.710105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.374395Z","title":"Maze: Data-free model stealing attack us- ing zeroth-order gradient estimation,","venue":null,"work_id":"d768efb3-cc94-414c-ac4a-44968fdd5350","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.879387Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:01846c5d913a7e072b3a6a1bb52e81fad57b2adf1da3afab63930a3791ef8565","observation_id":"8096c855-ecd7-4623-9ba5-3d2fcc001090","resolution":{"observed_at":"2026-08-07T05:38:28.422319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.186987Z","title":"Zero-shot knowledge distillation from a decision-based black-box model,","venue":null,"work_id":"3e24c24e-8f98-48a3-a110-65b78032575b","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.982961Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:2c30c548757bd30b76eb09ecd413e3eefdb1f8af56f5bd25ae00c660910503c9","observation_id":"7a929063-12d1-4fd7-81f8-8fc0c0b1b294","resolution":{"observed_at":"2026-08-07T05:38:28.255340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.042631Z","title":"Towards data-free model stealing in a hard label setting,","venue":null,"work_id":"e8913194-c569-404c-aeda-40fdc15fa263","year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.191977Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:830de3917a9b2232a38742a2579eea00959d8b1d1dd96846b2b3c0371eecd6d0","observation_id":"ab7e70dc-919c-4b98-ba77-8086afc5aa22","resolution":{"observed_at":"2026-08-07T05:38:28.131392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02140","last_updated":"2024-08-04T20:38:45Z","snapshot_observed_at":"2026-07-06T18:56:45.173494Z","submitted_at":"2024-08-04T20:38:45Z","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","version":1},"cited_work":{"arxiv_id":"2408.02140","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.02140","snapshot_observed_at":"2026-08-07T05:38:26.525516Z","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","venue":"cs.CV","work_id":"732947ee-4591-4cbd-b028-33f8de88adf7","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.370705Z"},"links":{"cited_paper":"/paper/2408.02140","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:baf44f922d080d814e8cd861d10fffa7d886af49e0cd059a790f6d0337b4123d","observation_id":"c20387de-4b05-487d-b6b8-7bce4d46e30e","resolution":{"observed_at":"2026-08-07T05:38:26.641223Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.891265Z","title":"Dualcos: Query-efficient data-free model stealing with dual clone networks and optimal samples,","venue":null,"work_id":"fff9f146-912f-4b6f-ab91-1d6b4333a1dc","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.544281Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:7a6366e5556c9e6406ddac015553f89208438f034ea4aca0869330651332cfa4","observation_id":"57792c09-29c6-45c6-b425-7d71c879b4ed","resolution":{"observed_at":"2026-08-07T05:38:27.961925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.780592Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":"1fbd686e-9897-467e-9e6c-8016a19b9822","year":2017},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.668299Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:ec60f5c8ee09a4b59d43ed2a4725cb2d6646f1bc9f832bd795e158337806c9b7","observation_id":"ef28d2e9-8c6c-4151-b0e3-149b185e49a4","resolution":{"observed_at":"2026-08-07T05:38:27.815604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.575090Z","title":"Knockoff nets: Stealing functionality of black-box models,","venue":null,"work_id":"7ff05ed5-c020-4e6d-8280-34a1ed818d85","year":2019},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.831241Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:dd0d9e076fea8b84a807126dfab17ada8b64f2f6da4e63cc3f621d8d0095f9ce","observation_id":"65cf8257-2aa7-4436-afc2-c9726fc03586","resolution":{"observed_at":"2026-08-07T05:38:27.706205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.440769Z","title":"Difattack: Query-efficient black-box adversarial at- tack via disentangled feature space,","venue":null,"work_id":"2f71a200-a586-4690-9a08-19d667949fac","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.949038Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:c11de6a43acf5487f87dc9a710952b5cd1bc50a4e0ac2467d1bde5d4ebe308c0","observation_id":"f0f7991d-9f79-417d-83b3-df088ebd90c3","resolution":{"observed_at":"2026-08-07T05:38:27.509082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.263842Z","title":"Derd: data-free adversarial robustness distillation through self-adversarial teacher group,","venue":null,"work_id":"78b17abc-1d91-4a7f-8383-262530f74780","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.086384Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:002ed3737bea9e023cea25150016b6e01a6c3a3e3890efe2e69f55fda7d6c3f5","observation_id":"6da76ab3-d966-45a9-8e42-8ff2e9aa64bb","resolution":{"observed_at":"2026-08-07T05:38:27.318189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.197272Z","title":"High-resolution im- age synthesis with latent diffusion models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.197272Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:61de903096889e9b247e8eeb11da0fb0071f742b9c1d215113ea97fdffaadad1","observation_id":"da556fe9-b69b-4064-a3e7-1baf51fbf98f","resolution":{"observed_at":"2026-08-07T05:38:25.197272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.329071Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.329071Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:74cdbe7008e2082e441acc887262fd3569d8b5118da46b0a4c932955020f64be","observation_id":"9963415e-0095-4cb8-881f-49b92198ba0e","resolution":{"observed_at":"2026-08-07T05:38:25.329071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.111065Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"523ea4c6-3fc3-455a-ba5f-d6686ba51329","year":2009},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.519189Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:b2df33cf48545d4b9bfb040971b8c61a1c68b591281e32170fe1f399156b0228","observation_id":"417ba244-8cf4-4ad3-9e85-28428d40ddf9","resolution":{"observed_at":"2026-08-07T05:38:27.189788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:26.981109Z","title":"Tiny imagenet visual recogni- tion challenge,","venue":null,"work_id":"763bb357-33a7-43d5-a87a-fb8fe35a2f8d","year":2015},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.721018Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:697f6a190141e597c8ac7f0e776323a477bb826bf3d95b56390d0bb6edab6865","observation_id":"97474fa2-6302-430d-8ca8-3e75a3effc42","resolution":{"observed_at":"2026-08-07T05:38:27.021754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.847394Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.847394Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:5518e1841928fbfb1b3055b070be35ab77c13f5293de0d18c256312d44ed7025","observation_id":"5d935f33-a1ef-40ef-a6ed-f743c50ae927","resolution":{"observed_at":"2026-08-07T05:38:25.847394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-07T05:38:26.012423Z","title":"Very deep convolutional networks for large-scale image recogni- tion,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.012423Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:e2a9f22fd99b19cdcb2903b3ed36af5803473a020105baf1268b03399c214bfd","observation_id":"2e23e900-33fd-4eea-a895-ebaab0b0a1f5","resolution":{"observed_at":"2026-08-07T05:38:26.012423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07146","last_updated":"2017-06-14T06:06:48Z","snapshot_observed_at":"2026-08-08T14:57:17.868613Z","submitted_at":"2016-05-23T19:27:13Z","title":"Wide Residual Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07146","snapshot_observed_at":"2026-08-07T05:38:26.099644Z","title":"Wide resid- ual networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.099644Z"},"links":{"cited_paper":"/paper/1605.07146","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:a45953f01b29055fa9efcec1261a46327fcf48fa267f8ccce371627c5b9c6aa4","observation_id":"0a2183a4-28a7-4254-953f-451730f850f5","resolution":{"observed_at":"2026-08-07T05:38:26.099644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:26.164974Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.164974Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:1074c0bc9415e2a50225d30477aa0f8eb3d78619fd88dfaeac316296ed671908","observation_id":"37fd0a82-69d7-442a-b0ee-b0b868b6ff15","resolution":{"observed_at":"2026-08-07T05:38:26.164974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-07-06T05:17:20.642708Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-07T05:38:26.232722Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.232722Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:ee463259bbe4246b5530c01efc14054680a9260d7617ee84c94b471e807203bf","observation_id":"b72b8892-a0b5-4fbf-aa6e-ae822a17f48c","resolution":{"observed_at":"2026-08-07T05:38:26.232722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-07T05:38:26.317562Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.317562Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:764d8db4ee57b80fccc8bdcc763dd609cbb97daef5ba746f08b4cd0f431e049a","observation_id":"36a7b84a-aa7e-47e3-b4bd-26a76646ee5a","resolution":{"observed_at":"2026-08-07T05:38:26.317562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T05:38:26.388096Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.388096Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:425abb3677728f419422e0a7c50aabe58d07fb7b3f99c035776062bdf3c67000","observation_id":"685565d0-b9dd-4a59-8e49-2d65e00ce9d2","resolution":{"observed_at":"2026-08-07T05:38:26.388096Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":2,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":11,"verified_exact":1,"verified_fuzzy":20},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 1 inbound Pith citation observation for arXiv:2506.07590."}