{"as_of":"2026-08-14T12:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e6c6d03c8c26e0b81c3322cf299789de595b2b3a3ad7c1b259a97d0a87712fda","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T22:49:02.747168Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.20576/citation-record","integrity":"/paper/2506.20576/integrity","json":"/paper/2506.20576/citation-record.json","paper":"/paper/2506.20576"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.835367Z","title":"A comprehen- sive systematic literature review on intrusion detection systems,","venue":null,"work_id":"49c5cfdf-6b72-4a4a-a1ab-988c0063e163","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.434086Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:938b6774a1d08785eea72e54a14121c8ab415f584d99a52edf608a27bbbb16ed","observation_id":"390ee41d-4794-4a04-a32c-9563cdb3b300","resolution":{"observed_at":"2026-08-06T22:49:12.973497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.549213Z","title":"A survey on data-driven network intrusion detection,","venue":null,"work_id":"550809cf-a651-4d82-af73-20a3c408814b","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.537265Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e4117764194cca1ac90ba3b706001970ebb1b0b0b49be7f46f35e5430915c168","observation_id":"dc638f54-1c51-4c1b-9382-58509deb7b4d","resolution":{"observed_at":"2026-08-06T22:49:12.674504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:12.259428Z","title":"Generative adversarial attacks against intrusion detection systems using active learning,","venue":null,"work_id":"0ee54ee8-d02e-4407-be2d-41423bc6daa1","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.596044Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:74a65b7b609e8c80daa984acaface3f36944e7abe84a5a961dbfaa9d06adc0ef","observation_id":"73664678-d250-4220-922e-814618ca3879","resolution":{"observed_at":"2026-08-06T22:49:12.375589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T22:48:55.751196Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.751196Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:4bd833845be5d4a06a2387845f6c4f9294eb50b1a7d3f49d5410e6eb2ec2a3a9","observation_id":"9ee06155-e6f2-4c70-bdc0-235011fd1f83","resolution":{"observed_at":"2026-08-06T22:48:55.751196Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:55.886974Z","title":"Adversarial examples: Opportunities and chal- lenges,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.886974Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:6550f3cbbe70824b909ab95ddfd2166dd9235a2ce2a103b911ebb38acab91bad","observation_id":"d4586e27-60ad-4aa3-bb01-bc166ee726ef","resolution":{"observed_at":"2026-08-06T22:48:55.886974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.939420Z","title":"Bringing a gan to a knife-fight: Adapting malware communication to avoid detection,","venue":null,"work_id":"d60cfe5e-9eed-4b58-b44d-f7da67b7e6d1","year":2018},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:55.959360Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:032cb9948aeb4a73686871cc33c48963bfdc6b1a2605c10c49b5d0acfee64128","observation_id":"25b7413c-9da9-4ae9-bb02-7d9d9f07646e","resolution":{"observed_at":"2026-08-06T22:49:12.096376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.18736","last_updated":"2024-10-22T09:49:44Z","snapshot_observed_at":"2026-08-12T22:36:04.281165Z","submitted_at":"2024-09-27T13:27:29Z","title":"Adversarial Challenges in Network Intrusion Detection Systems: Research Insights and Future Prospects","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.18736","snapshot_observed_at":"2026-08-06T22:48:56.109272Z","title":"Adversarial challenges in network intrusion detection systems: Research insights and future prospects,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.109272Z"},"links":{"cited_paper":"/paper/2409.18736","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:67fdf2d03671641e0e6a97a42fe11058e5c00d3a372b3ec544ae798dd38133f4","observation_id":"b345d6ca-41ac-4696-a187-33121b21909b","resolution":{"observed_at":"2026-08-06T22:48:56.109272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.631230Z","title":"Modeling realistic adversarial attacks against network intrusion detection systems,","venue":null,"work_id":"e0ca944a-595e-493f-8f43-de265223f229","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.325061Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:0062c4fd841a4367cae3031713eefb63afc3179080e50e29cc56007035b0c7f1","observation_id":"26e47f4a-0acf-4fac-a9d1-932532a64c33","resolution":{"observed_at":"2026-08-06T22:49:11.777013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.339253Z","title":"A gradient- based approach for adversarial attack on deep learning-based network intrusion detection systems,","venue":null,"work_id":"4301ef0e-1e17-4a89-bb89-b13c92b473f3","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.433678Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:15de344ae10a1428af0db0e1550e61332e8b6c364a950135acd4607eb84d5e59","observation_id":"bf661ebe-6d7f-4cf1-9a95-5bd955e5a747","resolution":{"observed_at":"2026-08-06T22:49:11.461210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:11.024100Z","title":"Adversarial machine learning in network intrusion detection systems,","venue":null,"work_id":"d1d14d90-9edf-4bfe-85fb-75c929acca4f","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.569528Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:b842888072295eaf305651c0a7cebb41666f5c7b1e92d8c41b82051e8b7511fa","observation_id":"c50048d9-f00d-4855-bece-283887ca85f4","resolution":{"observed_at":"2026-08-06T22:49:11.201334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.777097Z","title":"Adversarial examples for network intrusion detection systems,","venue":null,"work_id":"7f19618c-56fe-490a-9faf-e17ee5d385f1","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.682656Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:cc5b4bbfd5fc2d41706705133d3328c7024adf540144cfd7ab7edd999ee2790b","observation_id":"d0929150-1a9e-4a6d-b499-84b66211881f","resolution":{"observed_at":"2026-08-06T22:49:10.881922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.500935Z","title":"Adaptative perturbation patterns: Realistic adversarial learning for robust intrusion detection,","venue":null,"work_id":"29440291-0e5f-4902-81e7-21b034b25a53","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.851322Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:5af01289ab101b7cff422110a13fa0e1c8ccd7aa45c09ccd087e813f8575e960","observation_id":"a4127ede-945f-4d04-aa36-b6c524235dbf","resolution":{"observed_at":"2026-08-06T22:49:10.622237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:56.973376Z","title":"Adversarial machine learning- industry perspectives,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:56.973376Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:5210d2c1acd757646d0a6fc1c881870d7742fd068766b139287ef4c0d7b17a68","observation_id":"e1c30c7a-0c80-4cc8-92c5-7b665a8f8e3a","resolution":{"observed_at":"2026-08-06T22:48:56.973376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:10.188719Z","title":"Survey on intrusion detection systems based on machine learning techniques for the protection of critical infrastructure,","venue":null,"work_id":"2f8c15da-ed50-41c6-b512-4b14329477cc","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.095951Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:376127f7c31ebc006abad30fde683442a615331c12663a392fc0521a05c30a55","observation_id":"464dddf1-3e9c-4b6b-87dd-24ae8ad6fbfc","resolution":{"observed_at":"2026-08-06T22:49:10.327120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.253228Z","title":"Adversarial machine learning attacks against intrusion detection systems: A survey on strategies and defense,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.253228Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:823187d44f23f512692c4096a1d2e4309526a57de8597b95a57603526ec7a8cd","observation_id":"7aeb2688-83ba-484e-802c-95e3a479979d","resolution":{"observed_at":"2026-08-06T22:48:57.253228Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.875322Z","title":"Adversarial machine learning applied to intrusion and malware scenarios: a systematic review,","venue":null,"work_id":"59a3370d-5c46-4633-b5c1-90f28a3dc957","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.384058Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2c6dd4aaafd6aba80126eb6482851dcb5a38734801379e73d4322d92aadd1ee1","observation_id":"7914913c-732f-4f5f-a381-2245bef12244","resolution":{"observed_at":"2026-08-06T22:49:10.058616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.547251Z","title":"A survey on the vulnerability of deep neural networks against adversarial attacks,","venue":null,"work_id":"4ad55cd4-e93e-40e6-ad3a-c85f5667801b","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.572988Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:25fa3e57afcd2ba7495522b4ef9b0d743574d32d308ff1cdf04cb4946e853666","observation_id":"980c88c6-0fe1-4340-a98a-94556b94f6b1","resolution":{"observed_at":"2026-08-06T22:49:09.667349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.707687Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.707687Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2ef9c187675c150d81298c5dc7e1bc29150b8f930e3becd5dc653410b98496b3","observation_id":"b513cb4b-03cc-40ac-b86d-e8a9361a3311","resolution":{"observed_at":"2026-08-06T22:48:57.707687Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.877777Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.877777Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:918b9c1efdb9bbbfa3ecda9c293aadb1ed46a6b3949bdb835d96197e97b94a30","observation_id":"2fd2c7a9-e601-4a42-b503-2b9cf0074e6f","resolution":{"observed_at":"2026-08-06T22:48:57.877777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:48:57.986706Z","title":"Hopskipjumpattack: A query-efficient decision-based attack,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:57.986706Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:b4b28c34a14cef138d8fa65d0457006d2455550f02a3a05db74b78c7da00e896","observation_id":"3e5df237-0b24-41c4-b326-6dc8cc5cb3ec","resolution":{"observed_at":"2026-08-06T22:48:57.986706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T22:48:58.118531Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.118531Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:14095d684355df0e7b108e2fde888f99bef1d6d760dbe47f1da6ce59621f45cb","observation_id":"7f9c8402-2405-4df8-9c27-da7cedc4be98","resolution":{"observed_at":"2026-08-06T22:48:58.118531Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.206568Z","title":"Improving adversarial ro- bustness via promoting ensemble diversity,","venue":null,"work_id":"ddf33032-962e-411d-b7f7-325e7dda9d54","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.214077Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:f5aecb7978e90835b0c80864d5bf5b3ca538e80847d65b4bcf24befbe2771620","observation_id":"98f4ded0-1ba4-4f35-8cd0-8a5e44d035da","resolution":{"observed_at":"2026-08-06T22:49:09.351678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1702.04267","last_updated":"2017-02-21T06:53:38Z","snapshot_observed_at":"2026-08-09T14:02:38.261220Z","submitted_at":"2017-02-14T15:44:26Z","title":"On Detecting Adversarial Perturbations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.04267","snapshot_observed_at":"2026-08-06T22:48:58.317947Z","title":"On detecting adversarial perturbations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.317947Z"},"links":{"cited_paper":"/paper/1702.04267","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:5a9f49e6217760fd38a8b07c7d5e189ec37a4b7bd80bdcdff6cfd7d6aec0af2f","observation_id":"253e5838-3d61-4dfb-bf56-e3bebc283846","resolution":{"observed_at":"2026-08-06T22:48:58.317947Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:09.001891Z","title":"Evaluating adversarial robustness of secret key-based defenses,","venue":null,"work_id":"41ce7d19-f3e3-41c2-a65d-70eb1439efa0","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.420399Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a95a023a00652e89da41d9525841ebd9ab0580ec7807bf852a05c3d45981c760","observation_id":"8be3120a-f5c8-4b18-a7dc-6bd28035557f","resolution":{"observed_at":"2026-08-06T22:49:09.088942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.765983Z","title":"Adversarial attacks and defenses in image classification: A practical perspective,","venue":null,"work_id":"3369f03a-993c-439f-a84c-5ee6c4b3c878","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.524759Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2ac848bdfec1d980a5e767aabc5ee00affdf69acd9e1650f5dd225e3cdcbcf03","observation_id":"47c28566-3abe-45f8-b4b2-f02fcea8b19c","resolution":{"observed_at":"2026-08-06T22:49:08.876889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02613","last_updated":"2018-03-14T07:24:10Z","snapshot_observed_at":"2026-08-05T05:21:53.374752Z","submitted_at":"2018-01-08T18:54:40Z","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02613","snapshot_observed_at":"2026-08-06T22:48:58.635526Z","title":"Characterizing adversar- ial subspaces using local intrinsic dimensionality,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.635526Z"},"links":{"cited_paper":"/paper/1801.02613","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:05980b18c7fbf0f313f91d70bdb67ca34cba2b03e2bdab484347ed4e9522e660","observation_id":"768bedd8-e18d-4c50-85cc-4241ebfd2398","resolution":{"observed_at":"2026-08-06T22:48:58.635526Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.563194Z","title":"Query efficient black- box adversarial attack on deep neural networks,","venue":null,"work_id":"cf986a74-5e0b-46bd-89da-d8f928489a31","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.758773Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:50d3359d2361eb5be8b59f8bb78c216da251a36bb7d2a2e5bb180ebe7a5b4137","observation_id":"7e5b130f-4a71-40b1-962d-97800a57803b","resolution":{"observed_at":"2026-08-06T22:49:08.659007Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.378769Z","title":"The logbarrier adversarial attack: making effective use of decision boundary information,","venue":null,"work_id":"307b2d1f-ca0b-414a-906b-a8598a4397bd","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:58.912194Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:7a2752f7b50d956ed52eb690caab486d89109e1952b46bd291ae0a55ada3c95d","observation_id":"e35e39db-3b76-4484-82ba-2386f984fc4d","resolution":{"observed_at":"2026-08-06T22:49:08.476644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:08.084560Z","title":"Improving the robust- ness of adversarial attacks using an affine-invariant gradient estimator,","venue":null,"work_id":"df84fe6e-ab08-43bd-9023-06cce6cd143e","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.036816Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:e80061bfc88d845995d644d3b102900ba0ae45796e23267211933682a191c57c","observation_id":"087f8c3b-9e9d-4e28-a341-e033f9d316b0","resolution":{"observed_at":"2026-08-06T22:49:08.201971Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.820696Z","title":"Towards transferable targeted adversarial examples,","venue":null,"work_id":"d417d79a-e9c7-4319-bf86-61a3d5ef57cc","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.155906Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:b3ddf1e23fbbea1269a248af99eed311c8c619026cf47421f7fb9c8d0c73fd70","observation_id":"7329dedc-ccb6-4e82-94fd-f813e593de30","resolution":{"observed_at":"2026-08-06T22:49:07.916140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.601707Z","title":"A complete list of all (arxiv) adversarial example papers,","venue":null,"work_id":"3c2cb51f-92fe-4a54-8b45-acf0926a43a7","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.227024Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:aac31c39cb810556232cd94bca13a77a9cb52ad131e725fe5ebbf1c022736e93","observation_id":"c343bec9-698b-4f84-bfc9-ee8d7536d3a8","resolution":{"observed_at":"2026-08-06T22:49:07.722624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.374017Z","title":"Adver- sarial attacks on machine learning cybersecurity defences in industrial control systems,","venue":null,"work_id":"3228aec7-1bb7-4155-a3c9-b7d5e7a37f2b","year":2021},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.326979Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:c3633f60d671b04472c27a791060ed9dd7d5faf0e2a1e74c6d9b490dc749618f","observation_id":"9fa8cf17-ebc9-4a80-8bf3-d0fc58ee6ddd","resolution":{"observed_at":"2026-08-06T22:49:07.480180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:07.145525Z","title":"Untargeted white-box adver- sarial attack with heuristic defence methods in real-time deep learning based network intrusion detection system,","venue":null,"work_id":"719067d2-e9ef-4d4d-bcc9-4dfdb2f586e5","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.441043Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:bf31b3d7c19e66748ba1453d6e7e356dc8895305c45219ac35af0183b83321ac","observation_id":"e589e07f-ec28-4783-93d5-edb9746400c8","resolution":{"observed_at":"2026-08-06T22:49:07.233682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.918992Z","title":"Boosting robustness of network intrusion detection systems: A novel two phase defense strategy against untar- geted white-box optimization adversarial attack,","venue":null,"work_id":"920f8cc6-0313-4536-9178-6673557c536b","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.588390Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:988f91eb67a737edc4e67b8c40f98cb6bbf7efe34a0be18a1cf48e5ac0238c57","observation_id":"8ca32139-f2d3-49c6-a5b3-7a8d8afcbd1e","resolution":{"observed_at":"2026-08-06T22:49:06.998363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.681603Z","title":"Defending network intrusion detection systems against adversarial evasion attacks,","venue":null,"work_id":"ac199087-84ee-43cd-9202-f2db15d43385","year":2020},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.729255Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:6292734a35ee66f1cd9ce6a7d5bfc3ebd8787cd93127b17034f0a150f25ed7db","observation_id":"e80cd6d9-6644-439b-99d2-390ad55d62ff","resolution":{"observed_at":"2026-08-06T22:49:06.797098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.439215Z","title":"Argan-ids: Adversarial resistant intrusion detection systems using generative adversarial networks,","venue":null,"work_id":"f5f2aa9d-345b-40c8-a065-55b947ae3782","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.883998Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:6d98b8d4b9565c8e3b7fc28782a88eaf12f6cba32d9b367b3c929522e745c4f7","observation_id":"650f2863-cfc1-42b8-a830-a6733ba3b350","resolution":{"observed_at":"2026-08-06T22:49:06.583958Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:06.237701Z","title":"Adversarial attacks against deep learning-based network intrusion detection systems and defense mechanisms,","venue":null,"work_id":"162a7fc3-9a62-481f-b0c9-0046e93e0273","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T22:48:59.996503Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:f429a225d7588f29b0ceb1da75cfa35a6f1fe8ae7ed72ded9db37f107eb0160f","observation_id":"5887aae7-19b9-40c7-95de-67747c2ecdca","resolution":{"observed_at":"2026-08-06T22:49:06.317294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.998816Z","title":"Adversarial attack against dos intrusion detection: An improved boundary-based method,","venue":null,"work_id":"e618208e-dd09-4e3e-8ebe-97a76680dbc1","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.133210Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:20530d54daadd835ca2f2c6a649eed9d2c2f7008b4ed54044a331c8f08f4591e","observation_id":"8a26f087-3cd1-43a9-8f67-3601c269bd13","resolution":{"observed_at":"2026-08-06T22:49:06.093876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.863180Z","title":"Evading machine learning botnet detection models via deep reinforcement learning,","venue":null,"work_id":"5aa4448b-3ae7-41ee-aad2-dadaa147c700","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.295302Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:af363d35b6fb8575dd6ed80c6fc6094088b19131d13f09e6b506c23976a4484d","observation_id":"c94e679a-3a73-488a-9611-ef01509f5462","resolution":{"observed_at":"2026-08-06T22:49:05.931225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.685541Z","title":"Tantra: Timing-based adversarial network traffic reshaping attack,","venue":null,"work_id":"11f9bd40-8c04-4afd-8309-8f2066b0cd1f","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.419504Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:7cf5f93e40b6c5cc9e1ad95bd3b38b095b27b4e39fbd106ea099e6de45f19a12","observation_id":"7869a959-4cb8-4063-be37-e871c599fc34","resolution":{"observed_at":"2026-08-06T22:49:05.746495Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.543839Z","title":"Adv-bot: Realistic adversarial botnet attacks against network intrusion detection systems,","venue":null,"work_id":"19f292ff-732d-4ec8-83e7-4eebe5f7b224","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.558934Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:6b7400d5fc243b1e56c7fd488cb2f6f967fac3e0842733e97cd6930bcbeb63f6","observation_id":"089eb51c-985a-4cfd-92c4-5e35cbf05d7f","resolution":{"observed_at":"2026-08-06T22:49:05.600125Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.366029Z","title":"Idsgan: Generative adversarial networks for attack generation against intrusion detection,","venue":null,"work_id":"fc1b485d-3d3a-4d7b-b46f-2f18add9a3e8","year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.674836Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a27dce24c9fef375c8b0c990ec35d661a55af4edd2f7288018a0d259eac8eeb4","observation_id":"1cd80266-442e-4d73-a302-7110742b4144","resolution":{"observed_at":"2026-08-06T22:49:05.427874Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.204107Z","title":"Black-box adversarial transferability: An empirical study in cybersecurity perspective,","venue":null,"work_id":"d132ec7b-9d89-4d2d-86c9-94f79f371f69","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.817868Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:173dca11650db2a372820a7243744240b0540a024790afe6c80c655d1de2d34f","observation_id":"a69deb41-975c-46e4-b2ee-ad2a11ee8d4e","resolution":{"observed_at":"2026-08-06T22:49:05.282618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:05.054820Z","title":"Toward transferable adversarial attacks against autoencoder-based network intrusion detectors,","venue":null,"work_id":"b709e774-f448-4236-a570-e69c41da4c4e","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:00.962345Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:7272c2de5c947c604b930e426760dfd5d3e9543817af1ae02ecc21221967a61b","observation_id":"caff6795-7265-4c02-ba1e-dd7bff2f2b4d","resolution":{"observed_at":"2026-08-06T22:49:05.113716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.845522Z","title":"Nids-vis: Improving the gen- eralized adversarial robustness of network intrusion detection system,","venue":null,"work_id":"a68b7bb0-a5d5-472b-a35c-7183c6e90222","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.094773Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:bfa1265d966f579804106bb4ca4f98baed6e8b1f9393b37790bc0862e1fb4953","observation_id":"39d0d207-7c33-42ca-a9af-f7339209a596","resolution":{"observed_at":"2026-08-06T22:49:04.951171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.06694","last_updated":"2022-03-13T16:00:09Z","snapshot_observed_at":"2026-08-14T10:56:03.873711Z","submitted_at":"2022-03-13T16:00:09Z","title":"Generating Practical Adversarial Network Traffic Flows Using NIDSGAN","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.06694","snapshot_observed_at":"2026-08-06T22:49:01.254692Z","title":"Generating practical adversarial network traffic flows using nidsgan,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.254692Z"},"links":{"cited_paper":"/paper/2203.06694","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:a99df0e3f36d8ac7376439030106f12a571f1f48b3200da64325fd55fddc4468","observation_id":"74281f78-f9dc-4f6c-9015-79209cee4a64","resolution":{"observed_at":"2026-08-06T22:49:01.254692Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.599700Z","title":"Multiple change-point detection: a selective overview,","venue":null,"work_id":"2cad1eec-ef31-4e84-beaa-5bad2abd2c00","year":2016},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.452312Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:21c8a1719cf23033108f48108aa3c19e5360bd2b9f042ab452bdb69e60eafa86","observation_id":"3f98e37e-c3a8-4549-8ed7-c02e223d446b","resolution":{"observed_at":"2026-08-06T22:49:04.725291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.376629Z","title":"Seeded binary segmenta- tion: a general methodology for fast and optimal changepoint detection,","venue":null,"work_id":"e815bc13-ecbf-439a-bae6-91c8ac7e2d4d","year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.582759Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:ee16cc1aa651697f857fd30cfef6b731d49422cdc8f085a6cda30f342b17be58","observation_id":"7f75bbc0-3109-4c66-91e8-f401963a3e90","resolution":{"observed_at":"2026-08-06T22:49:04.474377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:01.723610Z","title":"Causal inference for time series,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.723610Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:5b5debbe8675f5b9fc54798b0c8823c478d4e1fbee2b61293feb6bff996dcb66","observation_id":"ada7ea49-f0f2-4b77-8619-e2c21c3ae21f","resolution":{"observed_at":"2026-08-06T22:49:01.723610Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:04.086709Z","title":"Ordinary least-squares (ols) model,","venue":null,"work_id":"daca5506-3e68-4829-bcf2-297c6b8ed516","year":2024},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.842366Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:83896b9ceae0503da9dbae8d160ff5d7941742c63d3374fd20f67af2e31a170d","observation_id":"e9d3af97-02aa-4f3a-98fb-56c42a838db9","resolution":{"observed_at":"2026-08-06T22:49:04.242382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.808641Z","title":"Extracting the variance inflation factor and other multicollinearity diagnostics from typical regression results,","venue":null,"work_id":"cb69b4be-4cf4-43fe-a911-d4830f440d80","year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:01.964080Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:2840de746bd10b3bd299265f12ada99b718139d29a85a133e5de35b782aaa706","observation_id":"eb669993-d7d8-4b3d-b117-d1089175c6c7","resolution":{"observed_at":"2026-08-06T22:49:03.921042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:02.073356Z","title":"Deep isolation forest for anomaly detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.073356Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:3c7289c4af803e06f5203fd144b42d485d2ca6472db45b60e2f43d33ea4b69c2","observation_id":"18e818e6-c707-4202-b73a-eb1718a5657c","resolution":{"observed_at":"2026-08-06T22:49:02.073356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1909.10773","last_updated":"2020-02-14T01:44:07Z","snapshot_observed_at":"2026-08-13T16:33:00.351161Z","submitted_at":"2019-09-24T09:27:08Z","title":"Sign-OPT: A Query-Efficient Hard-label Adversarial Attack","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1909.10773","snapshot_observed_at":"2026-08-06T22:49:02.191727Z","title":"Sign- opt: A query-efficient hard-label adversarial attack,","venue":null,"work_id":null,"year":1909},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.191727Z"},"links":{"cited_paper":"/paper/1909.10773","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:669382fc8f792cd7edd6a3985c0b21759020bc34ecfbfd2bc41a5039b64408ff","observation_id":"6d7a1022-1698-4b9e-a0aa-4d7820d7508b","resolution":{"observed_at":"2026-08-06T22:49:02.191727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.535495Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"ef91024a-b43e-40ff-a189-00837a1d434d","year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.366993Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:9087a00c629355c611f172dda9115a90f2057306a6b8c99c38c5cd88a75a43c9","observation_id":"fe622020-75d5-44e2-99d0-7ab97411836d","resolution":{"observed_at":"2026-08-06T22:49:03.673568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-08-13T00:34:03.935687Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-06T22:49:02.511616Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.511616Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:26e082183ac3bf970d58c16c2b7c5f4e4514a365a731ca47ca2418050329bbe5","observation_id":"ba99617f-b446-48cb-b0d6-6a9cb955fac5","resolution":{"observed_at":"2026-08-06T22:49:02.511616Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.294026Z","title":"Genattack: Practical black-box attacks with gradient- free optimization,","venue":null,"work_id":"f79324fa-5e7f-4782-985c-3e2342940091","year":2019},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.639242Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:8afbe31d2a459c9b30bcf051c85e81ef51a8c2776a2e684a55c008c62b0411c3","observation_id":"ec2581d9-2451-4fc6-93e0-fb735c1cb218","resolution":{"observed_at":"2026-08-06T22:49:03.416692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T22:49:03.066082Z","title":"Evolu- tionary algorithms,","venue":null,"work_id":"be72b27d-bef7-4878-b647-3ec57c8d218d","year":2014},"citing_paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T22:49:02.747168Z"},"links":{"citing_paper":"/paper/2506.20576"},"observation_digest":"sha256:be0c04d904f8ad4a4be683132d8f1fe5a2a83d8aec01754a4fd09108e882c7ec","observation_id":"b8514a4a-2f8a-4ba0-935e-c70e7210b41a","resolution":{"observed_at":"2026-08-06T22:49:03.173183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.20576","last_updated":"2025-06-25T16:10:20Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T11:34:46.335651Z","submitted_at":"2025-06-25T16:10:20Z","title":"Vulnerability Disclosure through Adaptive Black-Box Adversarial Attacks on NIDS"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":41},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2506.20576."}