{"as_of":"2026-08-16T11:33:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:eed4915a72969d432184749f5d1aa5407bfd68f2381bfea3c3b8497c75f56d12","coverage":[{"denominator":48,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":48,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T17:27:45.506800Z","state":"measured"},{"denominator":48,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":48,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2508.12384/citation-record","integrity":"/paper/2508.12384/integrity","json":"/paper/2508.12384/citation-record.json","paper":"/paper/2508.12384"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:46.069314Z","title":"An adaptive model ensemble adversarial attack for boosting adversarial transferability","venue":null,"work_id":"5c12b136-af61-4275-9017-4df10e5fba64","year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.309401Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:80c150b0c7ea94b2d49f06c3eb35818db3073251608e9295ec359f591fe55db5","observation_id":"3897efc5-47bf-421c-8851-753048e94689","resolution":{"observed_at":"2026-08-15T17:27:46.074662Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.314360Z","title":"Visformer: The vision-friendly transformer","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.314360Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:4ee872d73a33ddfcced45368c68e4e89ff6395efd867dc3be5bda3af18ea1f5f","observation_id":"7f245155-22d0-408a-ad58-d85426bae3b2","resolution":{"observed_at":"2026-08-15T17:27:45.314360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:46.046850Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"69c2340b-7087-4c78-955b-766eecf41a3e","year":2018},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.318507Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:c62fb0b40600bb815a2593f12a2b8504d562295b6a4c5eacc065c4462a3a7f3e","observation_id":"e9571995-e3e9-4437-97ac-53a0a890eda2","resolution":{"observed_at":"2026-08-15T17:27:46.051454Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:46.033765Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"b76b249d-bc99-4cfa-ba1e-88ea29ef05a8","year":2019},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.322675Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:fc9679f9cc61232566f17e6f9722bbf4d215ddd3d4daadd4034341ea8182aad3","observation_id":"b83cb56a-16d3-4758-adad-de6e01ddb661","resolution":{"observed_at":"2026-08-15T17:27:46.037718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-16T09:25:53.087782Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-15T17:27:45.327056Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.327056Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:6049537cb2a42b9245a9ae83ea367ed99cdcef85fe46738897f41564e7d3bdd7","observation_id":"70417bee-98db-45a0-beac-0fa55ea5afaa","resolution":{"observed_at":"2026-08-15T17:27:45.327056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:46.021098Z","title":"Convit: Improv- ing vision transformers with soft convolutional inductive bi- ases","venue":null,"work_id":"5f1a779e-1ba7-4f19-83e9-c217ed325c38","year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.331666Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:97d60fb7cebc74047959c9287a4eca7dc3fcf363014883755d4e5f765bc1e296","observation_id":"9a7aaf27-883d-421d-8282-472f43ba923b","resolution":{"observed_at":"2026-08-15T17:27:46.025373Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:46.008900Z","title":"Fda: Feature disruptive attack","venue":null,"work_id":"e01ccd1e-ebb5-4c0f-ae54-e2ef571102e6","year":2019},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.337186Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:0065931c52ef289ad4b2cdfa5defc00ebd3e0355444b1f49a3d1599449f7a3bc","observation_id":"817e9c58-fbdc-45d7-a008-7a8bf9125ebe","resolution":{"observed_at":"2026-08-15T17:27:46.013148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.996565Z","title":"Boosting Adversarial Transferability by Achieving Flat Local Maxima","venue":null,"work_id":"11ed436d-0654-49e1-9044-ffff5ff0059a","year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.341045Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:3ce86b83456e63978999559c0ebe1aed68b067bf77806db228e110fb0275ffea","observation_id":"058b639f-c246-4186-a20c-3fd1be0f45c8","resolution":{"observed_at":"2026-08-15T17:27:46.000591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.984920Z","title":"Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer","venue":null,"work_id":"ac9b165a-9775-4c5f-baff-2f57da44f25b","year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.345239Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:5286b03da84ac336d66bb0e0ef649521bda91a6b372ba5cdc314e18c58da0d21","observation_id":"14af46bd-075f-4f61-b153-a7d7901a1d26","resolution":{"observed_at":"2026-08-15T17:27:45.988814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-15T17:27:45.349866Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.349866Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:bc483cedea3564b576b4a6a89501d1388ba70503bbaf9f0354f00c3bdc6c71a5","observation_id":"06b8dafe-c974-4c19-b8a0-57e84aa7a352","resolution":{"observed_at":"2026-08-15T17:27:45.349866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.353843Z","title":"Levit: a vision transformer in convnet’s clothing for faster inference","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.353843Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:db8fe0227fd8b982d89e2ae1af40de332fa3f47eddb8d3aa884742f9317570b0","observation_id":"00b41356-e820-4778-9f9d-d8826d63eeb1","resolution":{"observed_at":"2026-08-15T17:27:45.353843Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-08-14T20:18:12.840327Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-15T17:27:45.359191Z","title":"Countering adversarial images using input transformations","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.359191Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:42e0d42e82e7accfd13be3f7fda4c3080317a6ba281db7fb18c6c78d067308e2","observation_id":"79845059-adb8-41ab-a2c9-e9316a869730","resolution":{"observed_at":"2026-08-15T17:27:45.359191Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.363808Z","title":"Transformer in transformer","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.363808Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:11f9c89bc3f083deea6728d5c41a6423169aeca14d1067e5982ad4d3ec6830e3","observation_id":"97e90a96-1e3f-46c5-bfd8-f59ff1921840","resolution":{"observed_at":"2026-08-15T17:27:45.363808Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.368022Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.368022Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:130ccaf2d43fa2c96314a8122b99a373af2d75e73fdda4873e8af89862456e77","observation_id":"933c09ba-44af-461a-b1c2-a8dc670157fa","resolution":{"observed_at":"2026-08-15T17:27:45.368022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.372387Z","title":"Rethinking spa- tial dimensions of vision transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.372387Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:0fb27036190fc8b83aff39fb965fdce0def3773a865a1e280bdf22d11e4048a9","observation_id":"da5fe8c1-93a0-4150-81dd-5629c527fc42","resolution":{"observed_at":"2026-08-15T17:27:45.372387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.943845Z","title":"Accelerating stochastic gradi- ent descent using predictive variance reduction","venue":null,"work_id":"6dfd00f0-bdf7-4e54-b3c9-06cee1e4c302","year":2013},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.376649Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:1f55c1cd9bff294105cbbf3183eb5e7827a0b5b30fad8a1587e2adbed4b86166","observation_id":"9e219378-9c51-4d99-b868-a426830f2fd6","resolution":{"observed_at":"2026-08-15T17:27:45.947920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.932467Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"4036a78f-8b4f-4b55-b041-244eac457486","year":2018},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.381089Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:1eac072b553d00ae162d8348592219899097252a4a89ab5a3623a24241c27a71","observation_id":"dd0a7cfa-db26-44c0-aaf3-6f2fdc171bdd","resolution":{"observed_at":"2026-08-15T17:27:45.936173Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.920093Z","title":"Improving adversarial transferability via intermediate-level perturbation decay","venue":null,"work_id":"16ee47d9-ea69-49af-bd74-0d374bf985fc","year":2024},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.385076Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:68fe22bf454c215416ba6fd324683df7ffd8f5e0c2313a46b56161526c831c31","observation_id":"7c5f8666-5162-41cb-87c0-9b6c7c90938a","resolution":{"observed_at":"2026-08-15T17:27:45.924149Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.909171Z","title":"Learning transferable adversarial examples via ghost networks","venue":null,"work_id":"e42e413b-b6f3-4824-a1a0-a4745399d1f4","year":null},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.389092Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:891b8a66e6e1cbbfc533a447c0290e1004ab92a09eb7fef38b1fbd6273babe30","observation_id":"ddd01164-d654-42ac-9eb8-0b64bb5734ce","resolution":{"observed_at":"2026-08-15T17:27:45.912925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-15T17:27:45.393420Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.393420Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:a5198645baaac7b42150fd780021083d2438b9aef6b9e4551e1c11cda6940125","observation_id":"5ea6cfdc-adde-4da6-941d-57b6e6e27ead","resolution":{"observed_at":"2026-08-15T17:27:45.393420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.897654Z","title":"Boosting adversarial transferability across model genus by deformation-constrained warping","venue":null,"work_id":"23fe35b8-216f-43a6-8e07-6467381c2998","year":2024},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.397698Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:cdc2cd1dcca63e3ca8ebaaaeca933f2a32b0b7162968239b253ceb8643295153","observation_id":"b9f0c49d-fe81-4f59-b784-099cad795279","resolution":{"observed_at":"2026-08-15T17:27:45.901708Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-14T21:31:19.477872Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-15T17:27:45.401485Z","title":"Delving into transferable adversarial examples and black- box attacks","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.401485Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:fc2784d707a41ae09da6b26d074624265060bf0bc16bb8ca3ba2690541070488","observation_id":"7b2908b4-c7f8-47f3-aab6-b3fc29e737fa","resolution":{"observed_at":"2026-08-15T17:27:45.401485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.10493","last_updated":"2022-04-02T01:51:00Z","snapshot_observed_at":"2026-08-16T06:59:47.583046Z","submitted_at":"2021-11-20T01:49:56Z","title":"Discrete Representations Strengthen Vision Transformer Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.10493","snapshot_observed_at":"2026-08-15T17:27:45.407046Z","title":"Discrete representations strengthen vision transformer robustness","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.407046Z"},"links":{"cited_paper":"/paper/2111.10493","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:a6cffae5545107270481f6bc735bfe318f3bdfaf57ff17a060ff4a41b73cb4f5","observation_id":"780d69a4-a7a0-43d6-b9e5-ab1188eeb5fa","resolution":{"observed_at":"2026-08-15T17:27:45.407046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.885412Z","title":"Enhance the visual representation via discrete adversarial training","venue":null,"work_id":"e783b977-48a8-4211-90b5-9a805baabe20","year":2022},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.412523Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:ca4a726bd05af4ccfb31e93ececf85ffe24a567cff3774309c5a0e791c448c5b","observation_id":"93563e55-90a1-4465-90ae-961585aac8b7","resolution":{"observed_at":"2026-08-15T17:27:45.889505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.873354Z","title":"Towards robust vision transformer","venue":null,"work_id":"0143dc53-591a-4a59-9e17-1f4665dede21","year":2022},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.416525Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:1a6c267169fb7a4b8d2e39aba528d350c76a4877978b829ab0723fa053c850d7","observation_id":"5cbb16d5-3f99-48e0-bddb-7f82df192a6d","resolution":{"observed_at":"2026-08-15T17:27:45.877292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2206.02680","last_updated":"2022-06-06T15:31:35Z","snapshot_observed_at":"2026-08-13T15:29:23.546543Z","submitted_at":"2022-06-06T15:31:35Z","title":"Separable Self-attention for Mobile Vision Transformers","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.02680","snapshot_observed_at":"2026-08-15T17:27:45.421210Z","title":"Separable self- attention for mobile vision transformers","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.421210Z"},"links":{"cited_paper":"/paper/2206.02680","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:da8509e4c045b68a87a83257a6e338c33552c18240f0b6c3660ff9893181a1b5","observation_id":"4ada3316-bc99-49b8-87d2-7e4cb36d23f0","resolution":{"observed_at":"2026-08-15T17:27:45.421210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.425324Z","title":"When adversarial training meets vision trans- formers: Recipes from training to architecture","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.425324Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:935481a019d47138fcd3366a3abf8a74cc476ae608907a1104a9a544c2d862bc","observation_id":"02dbb314-1478-431f-b3dc-d45f3cb8843e","resolution":{"observed_at":"2026-08-15T17:27:45.425324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.852660Z","title":"A self-supervised approach for adversarial robustness","venue":null,"work_id":"6e0782c7-3bc9-4b4a-9245-7bdfaa2976c8","year":2020},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.429110Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:cbfb14d1269653388009fffc7011d4ddfee1900eb8884594d1d95e019d5a5355","observation_id":"5e6299ba-da2a-4130-8dda-574fc3833911","resolution":{"observed_at":"2026-08-15T17:27:45.857547Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.433583Z","title":"Imagenet large scale visual recognition challenge","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.433583Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:5f126fcace83e38c04d1a093cb54b690b9e153aadf1e1d41899274c89a771313","observation_id":"7d782a44-eae0-4f96-90c6-c60bf8a32528","resolution":{"observed_at":"2026-08-15T17:27:45.433583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.437314Z","title":"Rethinking the inception archi- tecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.437314Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:82997c00e6cd6b4c8793fea7b40c8c1607c322d336c5c19a6fe3ce2795baf447","observation_id":"f78a665b-3502-4622-b887-5346778fe884","resolution":{"observed_at":"2026-08-15T17:27:45.437314Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.822816Z","title":"Inception-v4, inception-resnet and the im- pact of residual connections on learning","venue":null,"work_id":"dceac6dc-15bb-44a4-8024-8a88edce864b","year":2017},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.440833Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:78711279d713f6c708ed39d67454056c059033585f0f98df9728b33845fe56d9","observation_id":"ab1ce8e5-7ead-46e8-9106-b2ec17aeac24","resolution":{"observed_at":"2026-08-15T17:27:45.826964Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.811330Z","title":"Ensemble diversity facilitates adversarial transferability","venue":null,"work_id":"d874519c-de14-4d05-847f-a7784fc77bdd","year":2024},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.444492Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:2b68fbbbebdf177e0bebec12fd4a54b6459ef4ef8d64307f7f5e50791d14d860","observation_id":"9639caf7-afdc-496d-8e93-425725816246","resolution":{"observed_at":"2026-08-15T17:27:45.815273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.798906Z","title":"Training data-efficient image transformers & distillation through at- tention","venue":null,"work_id":"da03e389-549e-4e15-b421-ede68a3a22aa","year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.448629Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:00c311030d1c288720385ac53ded459b63b595fc3bcf75ec73cfd0a78b86cba7","observation_id":"a201b439-79cb-4e5a-a4fe-65c08ca2b565","resolution":{"observed_at":"2026-08-15T17:27:45.803187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.786457Z","title":"Going deeper with im- age transformers","venue":null,"work_id":"b2b1a247-2e69-4903-b867-5e81784872f5","year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.453009Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:2247bba3fed002ff08d2cd71bed7ae25890c0f3f86366281e315dfa0a1b94ce0","observation_id":"87b010ca-0917-416d-bd1b-be956e588ceb","resolution":{"observed_at":"2026-08-15T17:27:45.790512Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-15T17:27:45.456906Z","title":"Ensemble adversarial training: Attacks and defenses","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.456906Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:062db532fafcead4eaa2a81cb67fbdaa185535564ac7dc1a4cc672ee56e39849","observation_id":"2b271089-51e3-4de4-9bd5-ceac577526e6","resolution":{"observed_at":"2026-08-15T17:27:45.456906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.773846Z","title":"Boosting adversarial transferability by block shuffle and rotation","venue":null,"work_id":"4c1dbdf8-fbbe-496e-9f25-08785da885f2","year":2024},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.461299Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:fffa0d077018826eda5276e42585e7b665b87e93a30458d1ef5bc1021836e798","observation_id":"15fe691c-ade9-4efc-bb7a-b8f5239dbc92","resolution":{"observed_at":"2026-08-15T17:27:45.778048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.761174Z","title":"Enhancing the Transferability of Adversarial Attacks through Variance Tuning","venue":null,"work_id":"fb2e590a-b538-4216-8ebc-e13b8f33fcf3","year":1924},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.465795Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:1e533f529543fec7f74e4056e0d1002b20573fc58dbfb7676a4cfc9b9f9769e6","observation_id":"19f9158e-c763-4a28-aa1b-b43bac9cc365","resolution":{"observed_at":"2026-08-15T17:27:45.765541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.749032Z","title":"Boosting Adversarial Transferability through En- hanced Momentum","venue":null,"work_id":"85cd21df-f464-4f19-b25d-a3733a70caad","year":2021},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.470130Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:ccd78185657dfd8a5ebfce03858e3ddc97d7ef28fbc1040f05f781594a88affa","observation_id":"7d338e21-ef86-4c8c-bffc-99836136a56c","resolution":{"observed_at":"2026-08-15T17:27:45.753231Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.734692Z","title":"Struc- ture Invariant Transformation for better Adversarial Trans- ferability","venue":null,"work_id":"c8dfc324-87ae-4adc-aa2a-ee7ea47be9cf","year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.473738Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:ab739e56b875e4d27f48bae3aad3ea17113b230e98ca91898365fce748b6d77f","observation_id":"8f5623e5-4637-4e7c-818e-344980e81fde","resolution":{"observed_at":"2026-08-15T17:27:45.739540Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.477265Z","title":"Better diffusion models further improve adversarial training","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.477265Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:cd4ae33504b7c7f3cea9446a28635eddff139f4e694122add11ac79cddd6de30","observation_id":"db30418b-4cb7-4624-8840-74a2d0728584","resolution":{"observed_at":"2026-08-15T17:27:45.477265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.712570Z","title":"Towards transferable adversarial attacks on vision transformers","venue":null,"work_id":"81302d7f-da6e-4927-832b-070e8d2e1d75","year":2022},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.480980Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:d5856f44fd85ffe82548767c7222f2c7447ec419393d54c62a922581a766da34","observation_id":"df95cbb4-0d8f-45ce-b939-f69557fc85b3","resolution":{"observed_at":"2026-08-15T17:27:45.717166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.699633Z","title":"Rethinking the backward propagation for adversarial transferability","venue":null,"work_id":"014f982a-8367-4752-b514-e18a09534d10","year":1905},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.484291Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:eaf7936adb08568aea52090063716dfd03fcaa8ed4714cbc49fa75f2f21e0557","observation_id":"46b9dca7-cd41-47af-840e-25cff4c81839","resolution":{"observed_at":"2026-08-15T17:27:45.703752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-15T17:27:45.487895Z","title":"Mitigating adversarial effects through random- ization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.487895Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:448e6be3740659d23ac4109121d95342e8bca62fdb6188ec7b05204066b20ec5","observation_id":"f4b9468e-b7e6-4c5b-a03c-028c66fe9741","resolution":{"observed_at":"2026-08-15T17:27:45.487895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.687405Z","title":"Improving transferabil- ity of adversarial examples with input diversity","venue":null,"work_id":"9bcf659e-5fdc-4566-8743-b1b096f54c60","year":2019},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.491718Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:3563660bd9a42931b7ff9069a8aba07858133a1b21240cabc5e7a008f6e8dbfb","observation_id":"b65ef6c6-abdb-494d-830f-3fdfbe8ed7da","resolution":{"observed_at":"2026-08-15T17:27:45.691330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.674776Z","title":"Stochastic variance reduced ensemble adver- sarial attack for boosting the adversarial transferability","venue":null,"work_id":"55e32adc-d69e-44cc-9751-6235cbd3e509","year":2022},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.495662Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:c8f44484462dc2926e1cd09b82195652bbf58ec5773cc52f340434e587e0080b","observation_id":"ed46cfac-6fbf-4bb8-91c7-ddd24d1032e8","resolution":{"observed_at":"2026-08-15T17:27:45.679097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.660281Z","title":"Improving adversarial transferability via neuron attribution-based at- tacks","venue":null,"work_id":"8710be6e-efcf-49df-a72b-6f89917d87be","year":null},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.499404Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:50e9ea9e50d12dfc9d4532998285543e03878159dcc24031a7c348fd66ea692b","observation_id":"b54d554e-a1ce-4390-84c7-74d5b6eee41e","resolution":{"observed_at":"2026-08-15T17:27:45.666339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.647702Z","title":null,"venue":null,"work_id":"d547e84b-b042-460a-b5f5-60d7edb2684d","year":2023},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.503208Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:6fe2b836fb885a0719597c75a74ef2f2df531ae23efeac68f92af2913db3063d","observation_id":"e50207d3-17fe-47fe-9034-4d43e99c3a9a","resolution":{"observed_at":"2026-08-15T17:27:45.651708Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T17:27:45.632823Z","title":"Bag of Tricks to Boost Adversarial Transfer- ability","venue":null,"work_id":"81d6abf1-7f0b-4ed9-a3fc-56f499a1174a","year":2024},"citing_paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T17:27:45.506800Z"},"links":{"citing_paper":"/paper/2508.12384"},"observation_digest":"sha256:caee7049f1e7efcb103f755d39a94dbd57e0f034e7232c06cdcab6dd25b8fe6b","observation_id":"a8d67555-5bec-41ae-9d42-579dbef413be","resolution":{"observed_at":"2026-08-15T17:27:45.639200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2508.12384","last_updated":"2025-08-17T14:47:31Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T03:16:31.563131Z","submitted_at":"2025-08-17T14:47:31Z","title":"ViT-EnsembleAttack: Augmenting Ensemble Models for Stronger Adversarial Transferability in Vision Transformers"},"reference_resolution":{"displayed":48,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":0,"verified_fuzzy":29},"total_outbound_references":48},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 48 of 48 outbound references and 0 inbound Pith citation observations for arXiv:2508.12384."}