{"as_of":"2026-08-15T04:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3c6ab8fc7950e4ed01fbb1c57cf53b7ab7fc3ba83015070ce92516694816dbbc","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:02:05.286844Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.06856/citation-record","integrity":"/paper/2507.06856/integrity","json":"/paper/2507.06856/citation-record.json","paper":"/paper/2507.06856"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.914891Z","title":"Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices","venue":null,"work_id":"5ea51ccd-72d4-404f-9daf-9a01d1520547","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.092400Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a1eaae42288bec722c128779fcf64cdc7bc52025430f87a01d20089a832d5658","observation_id":"299ab545-9dd4-4b53-b49e-3bb397853bcf","resolution":{"observed_at":"2026-08-06T19:02:05.918332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-14T19:59:46.791515Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-06T19:02:05.096629Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.096629Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:f9d8aed08538779af311e897d000079f34932d1e7a4f5cb05626e555bfe56c71","observation_id":"6af8c1df-4221-4e5c-ad27-4926969925e4","resolution":{"observed_at":"2026-08-06T19:02:05.096629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.904552Z","title":"Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks","venue":null,"work_id":"4b57f4a4-cb1d-4b9a-ae83-24189ffe0e75","year":2015},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.100673Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:e74c4da6ea7da231f746e0862da112f867cd09651857fd4821f979d9c1219c59","observation_id":"85693d5e-b752-471a-b3bd-d679fa0cdd10","resolution":{"observed_at":"2026-08-06T19:02:05.908197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.893020Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"fe969424-7901-41be-90c1-c9e95ba5401d","year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.104242Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:977f393947156fce3303557a9893efab21aeb01f7fb607f57910f88cca9a3be3","observation_id":"b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065","resolution":{"observed_at":"2026-08-06T19:02:05.897193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.881819Z","title":"Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022","venue":null,"work_id":"9a02e6d1-2a1c-47de-8160-104bc865473b","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.108100Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:2bd76c300540961ab267bdee1dedb821fa5fa6d5e3150c74ab326647124d17b5","observation_id":"ae8aaa8c-7bdf-4202-9fb7-b2911ac64997","resolution":{"observed_at":"2026-08-06T19:02:05.885334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.871813Z","title":"Sparse and imperceiv- able adversarial attacks","venue":null,"work_id":"9c798455-8593-47cf-b0af-2ca933d7fa96","year":2019},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.111768Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a68eb1d35c4612ea2224472a16d3ce13c332b100d8bbe068770fedc30b4de33f","observation_id":"3f59faa7-3aca-4d59-b7d9-f3d011649801","resolution":{"observed_at":"2026-08-06T19:02:05.875151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.862136Z","title":"Diffusion models beat gans on image synthesis","venue":null,"work_id":"6f5264f5-7538-4458-b6f9-c84583804012","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.115181Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:7fa6b618d4314622d90f1fd71fc7d6aee8ed60054ffe0f96b523bb9112069ed0","observation_id":"35aad53c-ce37-460b-bac1-c750abf35f3a","resolution":{"observed_at":"2026-08-06T19:02:05.865794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.851037Z","title":"Perceptual quality metrics applied to still image compression","venue":null,"work_id":"57600789-0f76-4553-8a03-1836d2d18426","year":1998},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.118802Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:63c1788689a36651074b4d6154099bb7909942fd17e90d30ded3d81f6d559a45","observation_id":"770eb60e-4077-4148-91a9-e5def99783c4","resolution":{"observed_at":"2026-08-06T19:02:05.855357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.840220Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"c485eb5d-6d1b-44fc-ba10-8f033e274843","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.122059Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:428ce14ee3410ba070f9a886b20b3ea7bdeada2a18bfdd1794a9b4dbcc40034a","observation_id":"a13257ea-773b-4d09-adc0-c6bdffd67d6e","resolution":{"observed_at":"2026-08-06T19:02:05.844160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.24006","last_updated":"2024-11-14T14:58:26Z","snapshot_observed_at":"2026-08-12T22:10:41.004401Z","submitted_at":"2024-10-31T15:09:36Z","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","version":2},"cited_work":{"arxiv_id":"2410.24006","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.24006","snapshot_observed_at":"2026-08-06T19:02:05.440576Z","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","venue":"cs.CV","work_id":"53d54fde-884a-4295-9b45-8eb6248e0ad4","year":2024},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.125550Z"},"links":{"cited_paper":"/paper/2410.24006","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:287d39df7b2eee885028fd552174e780a295971409cd960ab3748bf45fb8c679","observation_id":"25de0660-82d6-4d56-8153-9a1a06da10d4","resolution":{"observed_at":"2026-08-06T19:02:05.444597Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.129316Z","title":"Wichmann, and Wieland Brendel","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.129316Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:363b2b115e118bd1cfd274848c67b5af564c1e4f1b0591fa289b96a89349d354","observation_id":"967abd3d-f578-4ec7-9a85-0cae36515b7c","resolution":{"observed_at":"2026-08-06T19:02:05.129316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T19:02:05.132750Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.132750Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ba1947ed859bb727356e97606af82a88e960e7ed779fe6b9f61037c4ebe2c427","observation_id":"f9ef3337-8950-4b3c-9adc-62993a6b87cd","resolution":{"observed_at":"2026-08-06T19:02:05.132750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.821584Z","title":"Unravelling robustness of deep learning based face recognition against adversarial attacks,","venue":null,"work_id":"45dbbe3d-829b-405e-9690-a8c2cfbe9038","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.136260Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:2b1475d1b2533e799175d530c57d0d0a76e39ad63230f8a68271713deae86d0c","observation_id":"4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f","resolution":{"observed_at":"2026-08-06T19:02:05.825439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.811333Z","title":"On visible adversarial perturbations & digital watermarking","venue":null,"work_id":"1cd99d24-f95b-4237-805a-aa24bdbd04ea","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.139567Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5a15169258fe0d52d4d67629c03f98d1ef95c82f5d40069cb86502b002906249","observation_id":"e2338ec8-a17c-484c-b006-4bf8259e17eb","resolution":{"observed_at":"2026-08-06T19:02:05.814904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.800445Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"7626addf-2612-43b3-b644-67cc0f937fca","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.143551Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a7eb935d364609abe51d8fa4e915ff7b05f558e05b6527a3854b481f29aa0461","observation_id":"66a9de09-e542-4cbe-b864-bf9d86bc4038","resolution":{"observed_at":"2026-08-06T19:02:05.804253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08718","last_updated":"2022-03-23T19:47:21Z","snapshot_observed_at":"2026-07-06T11:01:02.207193Z","submitted_at":"2021-04-18T05:00:29Z","title":"CLIPScore: A Reference-free Evaluation Metric for Image Captioning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08718","snapshot_observed_at":"2026-08-06T19:02:05.146699Z","title":"Clipscore: A reference-free evaluation metric for image captioning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.146699Z"},"links":{"cited_paper":"/paper/2104.08718","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:6ac957823987164b99f523275071720cdcdbfd9720cf0874eabc270034f69c91","observation_id":"b3f5c767-0e04-458a-85ea-1c0dd0710cfb","resolution":{"observed_at":"2026-08-06T19:02:05.146699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.790411Z","title":"Denoising diffu- sion probabilistic models","venue":null,"work_id":"f8aa784f-bf22-4f97-b2d1-a03ceb5ebc32","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.150190Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:710f2db646ba39358457073f983200d18e82c19336604c7aa65f8f1a0a2b73b7","observation_id":"47bba56d-9829-4106-97ce-f13f8f00a064","resolution":{"observed_at":"2026-08-06T19:02:05.793798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.779634Z","title":"Human imperceptible attacks and applications to improve fairness, 2021","venue":null,"work_id":"639f086e-bb45-4735-94cc-8e32143be524","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.153870Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:bbd3dcb7595f5ba9d4d1542b3b6441cca9627ddee7bafa78bb0922ba2146f38e","observation_id":"708f49fc-74e0-41bd-b04f-037451ceade5","resolution":{"observed_at":"2026-08-06T19:02:05.783508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.769365Z","title":"Black-box adversarial attacks with limited queries and information, 2018","venue":null,"work_id":"63efaa7c-5587-41e1-b796-e105cdc45cb4","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.157229Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:883e032e195bd89fccdc8903e2ce8ff9ad3f77dc37935b363697618cf95aca1e","observation_id":"0bf0fdf1-7b13-4979-a66c-b91cbb24abdd","resolution":{"observed_at":"2026-08-06T19:02:05.773345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.758833Z","title":"Diffender: Diffusion-based adversarial defense against patch attacks","venue":null,"work_id":"cbb2a986-2069-435f-b064-8a52e134455d","year":2024},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.160742Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:d2772a163ac0f032473bdf5a2b4c969386d551150e6b22bb236992265466c896","observation_id":"02e2868b-1d8a-42a9-a199-ae7cb21a6b48","resolution":{"observed_at":"2026-08-06T19:02:05.762770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.748151Z","title":"Lavan: Localized and visible adversarial noise","venue":null,"work_id":"07f2784d-05de-4abb-8b00-d5f6e05ef1a9","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.164084Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:fbd5f19022a0627a9372621a2f4b5b95c05662eef7ddb9bba9b69daa9be4df82","observation_id":"d449fe56-ebb4-40d4-b508-4eb100ba3bd6","resolution":{"observed_at":"2026-08-06T19:02:05.751908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.736617Z","title":"Advhat: Real- world adversarial attack on arcface face id system","venue":null,"work_id":"a687c0fc-56d8-46b7-a522-142d11a347d7","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.167688Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:99185e263fd81955361ad44e2c0bf16cbcf17c930fcc067d180ccc7ddcd6d724","observation_id":"0a17c12f-97b0-47a2-82af-7d07f9f5245f","resolution":{"observed_at":"2026-08-06T19:02:05.740415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.726002Z","title":"Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network","venue":null,"work_id":"4b9bca3b-a639-48d4-b1c4-b64c3a535659","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.170975Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:7dea3cdc64dce1ff9094531db25ab2d5c54d65e14e2898266a4aecb8e56d4895","observation_id":"718b978a-7a64-4152-89a2-3ca6f209a2de","resolution":{"observed_at":"2026-08-06T19:02:05.730070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.04266","last_updated":"2021-11-15T16:39:22Z","snapshot_observed_at":"2026-08-13T17:38:09.405474Z","submitted_at":"2021-11-08T04:15:34Z","title":"Generative Dynamic Patch Attack","version":2},"cited_work":{"arxiv_id":"2111.04266","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.04266","snapshot_observed_at":"2026-08-06T19:02:05.406541Z","title":"Generative Dynamic Patch Attack","venue":"cs.CV","work_id":"dc313fab-60e5-427b-bfe1-118946ed6928","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.174128Z"},"links":{"cited_paper":"/paper/2111.04266","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:0c435906424fbbf1b245eb0f1feed3c723e86e355cd823fac54c679815c71c64","observation_id":"25e07283-ddc1-4be7-9e40-fb24db658449","resolution":{"observed_at":"2026-08-06T19:02:05.410546Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.715039Z","title":null,"venue":null,"work_id":"eac772c1-7095-45fa-87a7-e70bb2871898","year":2010},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.177905Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:22cf4c3f18105a4fc778f44dfbe14b79b2cd169305f541ce7db6ce20f5136ed5","observation_id":"9aa57581-6e9b-4607-a0a9-989727cfb249","resolution":{"observed_at":"2026-08-06T19:02:05.718918Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.703706Z","title":"Perceptual-sensitive gan for generating adversarial patches","venue":null,"work_id":"6e721105-7548-41dc-9d29-e84a2e203512","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.181478Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5ebc5dc8137ac29f1a489addc920aeb40b1a1f570f4aae36ae2b5e3f256b3e87","observation_id":"214276aa-e2fc-454f-8ef6-fd406cf37938","resolution":{"observed_at":"2026-08-06T19:02:05.707736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.691474Z","title":"Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection","venue":null,"work_id":"4457a6ad-c1a7-4697-8614-c18572998a04","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.185239Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:109ccce31658b0bf80350cfc3fb2c782081ad10be02d2823109f31bc07d0a6ae","observation_id":"9c91745b-6ea1-4887-bbcf-e13d5230ea43","resolution":{"observed_at":"2026-08-06T19:02:05.695591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.678730Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"06284633-731c-48f6-8212-2411d45e4e0b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.189085Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:2176dd7d809d2a6819ac6434f52bf56030710baf9f0f53a78ec0bc71bcbfec36","observation_id":"0a6c1c1b-9d57-4c96-a075-6c20ba31a3df","resolution":{"observed_at":"2026-08-06T19:02:05.683587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.668003Z","title":"Towards imperceptible and robust adversarial example attacks against 9 neural networks","venue":null,"work_id":"8d7c1f12-defa-44bc-9c16-130e2aebe83b","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.192313Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:f3933dd0ab82f531a179a741148b14bede1590f0c9bac917d85c16e9c492c337","observation_id":"e39d81c6-ed70-4879-b6b0-8791fdeba67b","resolution":{"observed_at":"2026-08-06T19:02:05.672104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T19:02:05.195978Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.195978Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:c53aefe3c5a2bb3063286e20c3d26f573fe882fc34af0bd9c541af5e2e36fa9d","observation_id":"2aab3dc0-2051-4dbd-9ae3-f43914e6b323","resolution":{"observed_at":"2026-08-06T19:02:05.195978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.656373Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"7a0df9ea-3470-47a7-9956-20b9e27283e1","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.199893Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ef947d2380c55ee160260e9b4071e6bd8533a872dd488b7ab85acd7264560568","observation_id":"1e5c525d-739b-4adb-ae29-dfc23fa4a80d","resolution":{"observed_at":"2026-08-06T19:02:05.660317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15144","last_updated":"2021-03-28T14:49:17Z","snapshot_observed_at":"2026-08-08T18:55:36.180119Z","submitted_at":"2021-03-28T14:49:17Z","title":"Face Recognition as a Method of Authentication in a Web-Based System","version":1},"cited_work":{"arxiv_id":"2103.15144","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.15144","snapshot_observed_at":"2026-08-06T19:02:05.380892Z","title":"Face Recognition as a Method of Authentication in a Web-Based System","venue":"cs.CV","work_id":"73b1d697-71fd-4cae-a703-5009a6c5247b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.203908Z"},"links":{"cited_paper":"/paper/2103.15144","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:391e784a24e6f2f059229c17bc446559206098291446906da191eb9c205a345f","observation_id":"93e9ea78-aeb4-4a1d-a198-6113cc7184c0","resolution":{"observed_at":"2026-08-06T19:02:05.385165Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.645109Z","title":"Diffusion models for adver- sarial purification, 2022","venue":null,"work_id":"b76b1a48-90c5-4942-a5ba-bff2f656c32c","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.207586Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:cf75f02a115afe44279a25d2728f1d66630fd9bf7647f2cf6e1323b24ed08ad6","observation_id":"6f6e5f53-11b8-4f5d-92d2-8c411da88933","resolution":{"observed_at":"2026-08-06T19:02:05.649317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.634116Z","title":"Parkhi, Andrea Vedaldi, and Andrew Zisserman","venue":null,"work_id":"9d1e72e4-9874-4432-8c48-4571c8ccda24","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.210908Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:b9279500866f99970ba68c50a7e4a9b0c076ed990c6ad76d88b38ba2ca8f2672","observation_id":"be6733dc-537a-4b1c-8f92-3492e02daf89","resolution":{"observed_at":"2026-08-06T19:02:05.638192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2012.00909","last_updated":"2021-04-27T06:14:28Z","snapshot_observed_at":"2026-08-10T11:03:40.909352Z","submitted_at":"2020-12-02T00:47:56Z","title":"Visually Imperceptible Adversarial Patch Attacks on Digital Images","version":3},"cited_work":{"arxiv_id":"2012.00909","doi":null,"metadata_source":"pith","pith_arxiv_id":"2012.00909","snapshot_observed_at":"2026-08-06T19:02:05.365881Z","title":"Visually Imperceptible Adversarial Patch Attacks on Digital Images","venue":"cs.CV","work_id":"8458c77b-3d52-4537-ad22-ab66f47a9124","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.214447Z"},"links":{"cited_paper":"/paper/2012.00909","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ce1578ab169e6c96d35d4404be3e521029a2068b6c326277e651e339c2e0bd22","observation_id":"8ac3e957-5ef1-41ad-879c-6a94951ce284","resolution":{"observed_at":"2026-08-06T19:02:05.369809Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.218232Z","title":"Berg, and Li Fei-Fei","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.218232Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:01cb20d6009141dc8165fc891f3d1a512496621872dab2ea67e6f65ea983bdc7","observation_id":"92e96646-0315-4f22-babe-dd14a87bb251","resolution":{"observed_at":"2026-08-06T19:02:05.218232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.617128Z","title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018","venue":null,"work_id":"5a93dd64-06e3-44dd-aba5-2b4db2e05dea","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.221815Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:b85046952815cb4ec1ca6ca0b8a52a60cf7e3e68d2338126d79599b217931356","observation_id":"3fa15ba9-d27a-43b6-ac83-42b0da465843","resolution":{"observed_at":"2026-08-06T19:02:05.621102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.605175Z","title":"Grad- cam: Visual explanations from deep networks via gradient- based localization","venue":null,"work_id":"04dc973e-f4d0-42a7-a095-90cc6e6031f3","year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.225548Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:098d9876c516011aa286e8fd3f0462c1a22865917d7a26d5edf7b6344f466552","observation_id":"0e0e8cb8-7742-4664-8fa0-782e3ca09cf5","resolution":{"observed_at":"2026-08-06T19:02:05.609035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.594845Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"a7c2d105-1197-4627-8308-ad60ebfdfa68","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.228749Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:d0d4d752a99332634d671285686118aade7a708d735a9415927c7d686e6547cb","observation_id":"334692ea-6ccc-4ef7-8183-a94911cce4e3","resolution":{"observed_at":"2026-08-06T19:02:05.598567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.584362Z","title":"A general framework for adversarial ex- amples with objectives","venue":null,"work_id":"c51e2c9b-5d3d-4cc9-87f0-69441729d38b","year":2019},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.232541Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:c84e72e17df189d66069ff47e6d089d8f5ad70664e589537c19a4a7265ef3d0b","observation_id":"7f80e671-113d-4a27-83e0-5b16121731b2","resolution":{"observed_at":"2026-08-06T19:02:05.588781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-14T23:20:42.336514Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-06T19:02:05.236010Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.236010Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a162631eea1101e39c3ee3eea64b5ce19269ddab8ad3e1ab8c91b3e34a7da5ce","observation_id":"4ad5f2dd-f9a6-4ef8-86f8-91378594a931","resolution":{"observed_at":"2026-08-06T19:02:05.236010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-06T19:02:05.239599Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.239599Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8c582ec96b495f5f7ac2661fa109f99e4faf4bb99384c64b0d125d977efdc594","observation_id":"7f3193fe-fe52-4f80-a6c2-06657c10d0b8","resolution":{"observed_at":"2026-08-06T19:02:05.239599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.574437Z","title":"Jedi: entropy-based localization and removal of adversarial patches","venue":null,"work_id":"a64c4752-2a9d-4bb5-802e-c1fd1c3e084e","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.242958Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:705ffae629e75f564bfb3ae7a10fa0a82048896580c060258a4f2834d609c241","observation_id":"042dd1a1-b454-4fd4-b128-4401f8c54d4d","resolution":{"observed_at":"2026-08-06T19:02:05.577870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.14969","last_updated":"2022-06-29T02:42:05Z","snapshot_observed_at":"2026-08-13T15:34:13.869232Z","submitted_at":"2022-05-30T10:11:15Z","title":"Guided Diffusion Model for Adversarial Purification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.14969","snapshot_observed_at":"2026-08-06T19:02:05.246199Z","title":"Guided diffusion model for adversarial purification.arXiv preprint arXiv:2205.14969, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.246199Z"},"links":{"cited_paper":"/paper/2205.14969","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:1ad6c1bf37c4aca18b699b0423927885bf482ed3ba2c4a8c71318127338427af","observation_id":"5971908d-e759-4d83-af38-6c56fe5047dc","resolution":{"observed_at":"2026-08-06T19:02:05.246199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03030","last_updated":"2023-12-05T11:07:39Z","snapshot_observed_at":"2026-08-13T05:09:40.065742Z","submitted_at":"2023-12-05T11:07:39Z","title":"Generating Visually Realistic Adversarial Patch","version":1},"cited_work":{"arxiv_id":"2312.03030","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.03030","snapshot_observed_at":"2026-08-06T19:02:05.318080Z","title":"Generating Visually Realistic Adversarial Patch","venue":"cs.CV","work_id":"61fc9cb2-e6dd-4399-b5e8-80e7d50cf1e5","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.249694Z"},"links":{"cited_paper":"/paper/2312.03030","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:7a6c0de03dc300cf7f754127e01ee7a55cf8e06aea19aeb1aac133c57f5897c2","observation_id":"3c9d7d99-7724-4a7e-b43c-3670910704ad","resolution":{"observed_at":"2026-08-06T19:02:05.323915Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.564720Z","title":"A universal image quality index","venue":null,"work_id":"658a2275-5f68-47f3-b9c7-b3bfda7e18e8","year":2002},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.253404Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:12deb345e1f0f44edf4ba198d8b12a2b9906b78a0896a1f403019059cb15fdeb","observation_id":"33270bd5-cf97-443f-b362-7aff7daf8024","resolution":{"observed_at":"2026-08-06T19:02:05.568001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.554684Z","title":"Image quality assessment: from error visibility to structural similarity","venue":null,"work_id":"20eeebee-feb3-46b1-810e-b439da241e94","year":2004},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.256345Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:fdf0295cca3264d46e9c691822f92fcc4c73f106a851335629e15cd2588cf3db","observation_id":"78b34c76-dbb8-4b4c-a085-1f1d59b48ca0","resolution":{"observed_at":"2026-08-06T19:02:05.558099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.544224Z","title":"Privacy-preserving adversarial facial features","venue":null,"work_id":"50bc6a4b-3d98-49dd-8857-d0839f466726","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.259670Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5b9df7002e85dc023184c4962d23f422dc6ec83e53be86fe657a4ac89cbf60e6","observation_id":"a7d579ed-de42-4dbd-89c5-284b20c65545","resolution":{"observed_at":"2026-08-06T19:02:05.547636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.534104Z","title":"Patchguard++: Efficient provable attack detection against adversarial patches, 2021","venue":null,"work_id":"e6c71f52-85c9-4501-8aee-30b3a64eac0b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.263014Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:32d527ed7cd8025aeab24d42661b476a21bf01caccc2353f900e0e60013e61d2","observation_id":"c4161b82-f911-4591-858c-68264d2d69eb","resolution":{"observed_at":"2026-08-06T19:02:05.537589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.523764Z","title":"Densepure: Understanding diffusion models for adversarial robustness","venue":null,"work_id":"eb601a53-3061-49cd-8994-65a0d7306410","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.266074Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8299bade68ffe4377bbfc7f9b96940baaab16170dc98138f3769642b8789fd27","observation_id":"0d965048-9686-4749-ae0e-093211d71678","resolution":{"observed_at":"2026-08-06T19:02:05.527593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.513465Z","title":"Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch","venue":null,"work_id":"ae72443c-c96d-4555-b6ae-0ff97e9af025","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.269082Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:cf9e0be432fab1967102c8b50be347af4ffad46b0e6ec4a1376d3bb0083bf8a4","observation_id":"b73a1066-a902-4348-b8a8-5a6b3a214a5b","resolution":{"observed_at":"2026-08-06T19:02:05.517128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.503270Z","title":"Visualizing and un- derstanding convolutional networks","venue":null,"work_id":"c66200ad-5533-432c-b254-db2dd7c4ff82","year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.272766Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a8abd1a7e7c9af2e8c2134a3243ae3da7ba310f33ffb96f9eb920a24d3e32ca2","observation_id":"b8fdc49d-a8f3-4563-bcd8-328ce302da6a","resolution":{"observed_at":"2026-08-06T19:02:05.506635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.493233Z","title":"The unreasonable effectiveness of deep features as a perceptual metric","venue":null,"work_id":"5f8adf2a-06c9-4d6f-85b9-d52d86f7e520","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.276338Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:47f92d4c21c9f81bd02bfcea073c49a201fb2c3f514d194f29e35ec2feb63220","observation_id":"6030ad09-3b94-40b0-9ae4-94ed7e8499b5","resolution":{"observed_at":"2026-08-06T19:02:05.496718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.482954Z","title":"The translucent patch: A physical and universal attack on object detectors","venue":null,"work_id":"09eb0324-e6c0-46dd-83b7-7e94af305535","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.279629Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:e5691a9b8ec1f68d8b882fa73aabd8a0d81f48b4a4f813789911de9f4a3da968","observation_id":"490bde89-7e2c-4dac-8695-16ca84298333","resolution":{"observed_at":"2026-08-06T19:02:05.486339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.472750Z","title":"Toaster” class to include “Baseball","venue":null,"work_id":"3d1b05b9-9604-434e-b733-d0ca48415c52","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.282996Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ffc5e454471c28382e6339cf3fad5c6c544191f38b2864149415633448cf5154","observation_id":"a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c","resolution":{"observed_at":"2026-08-06T19:02:05.476133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.462785Z","title":"A. J. Buckley","venue":null,"work_id":"04290188-ebb3-481c-9ab3-24f48a6f52b9","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.286844Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:eec50a771ee782070ff68ff12ba045ed100b8d2e7f7ebe5fa440d7b77d0c8e50","observation_id":"cab95ced-b4d6-471c-9424-016c09b08aae","resolution":{"observed_at":"2026-08-06T19:02:05.466187Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T06:17:23.664924Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":5,"verified_fuzzy":40},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856."}