{"as_of":"2026-08-18T11:34:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:038fe0aa148873fdbfb4cf5289260ec454b45bca6467f0378e15482a81192891","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:16:45.187332Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04559/citation-record","integrity":"/paper/2608.04559/integrity","json":"/paper/2608.04559/citation-record.json","paper":"/paper/2608.04559"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.048362Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.048362Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:6b8aaa59a69682ab681b57b4f9bb3bb949ff71b9aa99f7ef18becb0a23908c16","observation_id":"8ae614c3-3342-47d0-9587-185e28eb4224","resolution":{"observed_at":"2026-08-11T04:16:45.048362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.052440Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.052440Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:a8bea4d3e72e54253d64ec6799630f06d0036486582dcd582b31fdc348126d0a","observation_id":"a64adbb9-688e-4dd6-a1e6-c11c18f17bae","resolution":{"observed_at":"2026-08-11T04:16:45.052440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.056340Z","title":"Position guided dynamic receptive field network: A small object detection friendly to optical and sar images,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.056340Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:d8d69370b6249d5cab43e15c735837283245dbc0f78f41bbd042f79bb3021fb2","observation_id":"a6da3329-39dc-4761-b725-b1923cff2148","resolution":{"observed_at":"2026-08-11T04:16:45.056340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.060272Z","title":"Fldet: Faster and lighter aerial object detector,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.060272Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:c764bd1d44e65b93056f950962832eee0e7f64fbac15eb1ee8c01a71009d86da","observation_id":"4c101e82-80c2-47b5-bc2c-4e1fad82a7ce","resolution":{"observed_at":"2026-08-11T04:16:45.060272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.064031Z","title":"Fooling automated surveil- lance cameras: Adversarial patches to attack person detection,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.064031Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:562d75a78f81e9714f2f3d7c54b7db03f35d012d08304f0c54882c08d557547e","observation_id":"8e4f033b-0976-46b8-9ccb-58426b2e3494","resolution":{"observed_at":"2026-08-11T04:16:45.064031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-11T04:16:45.067571Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.067571Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:c10cf15daa9c07ff3ebc96e6b58ad262699b1ac174a781c3653fa12f441d78a8","observation_id":"489510a1-6c90-4520-b6e3-91d468fc0834","resolution":{"observed_at":"2026-08-11T04:16:45.067571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.072075Z","title":"A unified framework for adversarial patch attacks against visual 3d object detection in autonomous driving,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.072075Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:d48c8bc022b0d66252212cb00c39826b23244be4549f06e2dfcc8db90e2918c9","observation_id":"4ebdf849-0121-4c7f-854f-970b096ba077","resolution":{"observed_at":"2026-08-11T04:16:45.072075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.075853Z","title":"Dual attention suppression attack: Generate adversarial camouflage in physical world,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.075853Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:eee19334df70a28d6aeea26eb43009084e538fd09f3a9489fd9ba435a8a8aa9d","observation_id":"51808ca3-896c-4a0d-9551-05ff8e5876a9","resolution":{"observed_at":"2026-08-11T04:16:45.075853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.079209Z","title":"Fca: Learning a 3d full-coverage vehicle camouflage for multi-view physical adversarial attack,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.079209Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:cc9af9756a9501f7278b0648cb5b5c2dad070ac65afc7b8ef480d9d557d446cd","observation_id":"17c81535-95c2-4f75-a8a3-3080408f92cc","resolution":{"observed_at":"2026-08-11T04:16:45.079209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.082529Z","title":"Naturalistic physical adversarial camouflage for object detection via differentiable rendering and style learning,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.082529Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:3c3ec9c88cebdce464a849dc514a2b3ebb87c9e32857de769e295918569c9926","observation_id":"f286a72d-2f1d-42db-8cb3-f8ba907b36e1","resolution":{"observed_at":"2026-08-11T04:16:45.082529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.085721Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.085721Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:25da89b8bf42d7aeb928fdef7a0cd2c2c10cd55690f140cb8c8dd2df00dd27c0","observation_id":"d9fdda46-5f68-4c12-affd-7043f29292d3","resolution":{"observed_at":"2026-08-11T04:16:45.085721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.089068Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.089068Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:1454d0b8a0664ab97d376885e64fc352d7d8d22227fccb6b73820536f3446a4f","observation_id":"55f787a4-fd8a-4f87-918f-41cf0db0b926","resolution":{"observed_at":"2026-08-11T04:16:45.089068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.093055Z","title":"Rfla: A stealthy reflected light adversarial attack in the physical world,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.093055Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:517355d15944282264b4ae2f28c4d1ccc1e672cd2ea61d3a0dbfe195fe6b4620","observation_id":"55294ec7-da45-41a6-9df1-d0444e115459","resolution":{"observed_at":"2026-08-11T04:16:45.093055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.096339Z","title":"Black-box adversarial patch attacks using differential evolution against aerial imagery object detectors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.096339Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:653f26752bee3bb7abe028f7c8211d4c4f4617d44a8fb8dc1d75e6c0c83fb724","observation_id":"6f895c22-b8f7-4e1c-bd3f-98bdd577b026","resolution":{"observed_at":"2026-08-11T04:16:45.096339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.099407Z","title":"Lesep: Boosting adversarial transferability via latent encoding and semantic embedding perturbations,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.099407Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:11619e1301439460a034943f03f82ff962a492e2ced9ec10add950d5a3558246","observation_id":"01300662-de7b-4558-9eaf-ce8865b28620","resolution":{"observed_at":"2026-08-11T04:16:45.099407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.102541Z","title":"Query efficient black- box adversarial attack on deep neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.102541Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:1262431ce5fb34a0a698d695549b4ce5373e79364ec0fa15d643fe99ff69b8a4","observation_id":"44489d89-4674-4e6c-ad20-8fb851e67b36","resolution":{"observed_at":"2026-08-11T04:16:45.102541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.106463Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.106463Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:bc35439ffcdf9059cca4f71faf61f96fcb62ec608c14797652e9cc965f023620","observation_id":"86748dd0-6d05-494a-a95d-c349b64d345b","resolution":{"observed_at":"2026-08-11T04:16:45.106463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.109542Z","title":"Genattack: practical black-box attacks with gradient- free optimization,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.109542Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:a6fec295ee8ab63d8860e7b27508b07a37b5e918522b77b927454d924958c956","observation_id":"015f064d-4419-427a-8dbc-fff77860f7fc","resolution":{"observed_at":"2026-08-11T04:16:45.109542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.113330Z","title":"Pso-based closed box adversarial patch attack against face recognition,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.113330Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:1697f908a70ce0a2f2ed5f73cf9e5531312a58fafd41fe2b9ac316051e1a25fb","observation_id":"4925f872-23e8-41ed-b7ad-308394e6448e","resolution":{"observed_at":"2026-08-11T04:16:45.113330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.116657Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.116657Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:196b4c84e20f7cb5b0c3363cdd2a54a57784549353734504f8f54766b25d3b6b","observation_id":"f950d7ee-7512-48e4-8e9f-efb84ad940e5","resolution":{"observed_at":"2026-08-11T04:16:45.116657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.120775Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.120775Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:6983a05785db57342cc7affa8afe41719a36ebf42c5076e74a1384802398a488","observation_id":"402579c9-95ab-4da6-bd6b-d8c803d50214","resolution":{"observed_at":"2026-08-11T04:16:45.120775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.124254Z","title":"A general framework for adversarial examples with objectives,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.124254Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:102a62e60d4588e0474555181d453e87bc844358b0fe2c26f2976f6d90f4c1c2","observation_id":"9b77bdb0-e949-474a-8334-682cd32ef34d","resolution":{"observed_at":"2026-08-11T04:16:45.124254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.128247Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.128247Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:d810862348540bee921c59aa94a1b5b4b2fa739f6f620156f2f1a67332214f87","observation_id":"fd6919d0-7b10-4c99-beea-fef2e8179bac","resolution":{"observed_at":"2026-08-11T04:16:45.128247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.131362Z","title":"Facenet: A unified embed- ding for face recognition and clustering,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.131362Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:6953e9a7ededc1ea6297a56802d338b0581ec1cb2dd1b6c425129939c6e1eb80","observation_id":"a2aee7b1-c8bb-47f0-b6b5-7f283c92f194","resolution":{"observed_at":"2026-08-11T04:16:45.131362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.134561Z","title":"Yolo9000: Better, faster, stronger,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.134561Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:4a7c238c2f992113bf1ffa422ffab2cb66a2715b42ca9b4c596d8ebba720c377","observation_id":"581bdcb8-a1e7-4836-b559-4d0f7b3e6bb7","resolution":{"observed_at":"2026-08-11T04:16:45.134561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.138121Z","title":"Adversarial t-shirt! evading person detectors in a physical world,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.138121Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:4a3ec97066cf933ac34da2fc44a234949ad45058f0a3bf02e878ef1e4e5e5ad7","observation_id":"d39362be-6fd8-4df1-8ddd-b94f8530c977","resolution":{"observed_at":"2026-08-11T04:16:45.138121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.141429Z","title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.141429Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:681be0aad47976d5015091b05a8c0aa2b1692e9824d053376bfe78290ad85146","observation_id":"52aa873a-9117-4f5e-bc6d-5bb119d4d05f","resolution":{"observed_at":"2026-08-11T04:16:45.141429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.144522Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.144522Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:2cad5f9a09cbd3697f1799d4b513d3dc42bd7dd6a9628cd16abd58bb2d2bb4a6","observation_id":"34f9fc8c-d10d-47da-89c2-17593ea806c3","resolution":{"observed_at":"2026-08-11T04:16:45.144522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.148202Z","title":"Generative adversarial nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.148202Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:c4277dd3ca3945074805d665ceee292421de42d561f23305cf69204d3e89c463","observation_id":"39bbad2d-d833-4363-ba11-10bb65d646ba","resolution":{"observed_at":"2026-08-11T04:16:45.148202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.151425Z","title":"Tnt attacks! universal naturalistic adversarial patches against deep neural network systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.151425Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:df1cdcb06113176487bbe09dd824674c8a2d95d9ac85e6f40adc0e11d8d88e46","observation_id":"12b8f5c7-0531-4457-92ca-88bdf7f7e1a8","resolution":{"observed_at":"2026-08-11T04:16:45.151425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-15T17:21:06.879755Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-11T04:16:45.154556Z","title":"Distillation-enhanced physical adversarial attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.154556Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:cb521a1368a229dd848f3175473eb583660a3246352212423581c4a8724a29e4","observation_id":"17bd6729-fdbd-4e57-affd-43439bec9869","resolution":{"observed_at":"2026-08-11T04:16:45.154556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.158510Z","title":"Adversarial camouflage: Hiding physical-world attacks with natural styles,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.158510Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:91a6065c94e1541676abf061498b4d4b7ece673d3bdf8549de87e878672c4676","observation_id":"083dbb43-9548-4de8-9dfe-84f523b0b5e6","resolution":{"observed_at":"2026-08-11T04:16:45.158510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.161802Z","title":"Wasserstein generative adver- sarial networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.161802Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:e5aeb655be07b1e8f7d61e9e817314a69c9944a6dd91c4772d1bafcd61389183","observation_id":"3854df9d-0230-4a1f-88d1-8d3369fa01a8","resolution":{"observed_at":"2026-08-11T04:16:45.161802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.164995Z","title":"Generating natural adversarial remote sensing images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.164995Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:49f3b79c3ac9f793940c5af26e57c09ef78478b12f82bd7a7f674711849b8b2a","observation_id":"04969073-c867-4a4f-b10a-76202cddab32","resolution":{"observed_at":"2026-08-11T04:16:45.164995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.168395Z","title":"Universal adversarial examples in remote sensing: Methodology and benchmark,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.168395Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:56a648738f3ce8e3519dd0d7020bbc1ab63baa58e258216d476bc1fbdfa09b57","observation_id":"8c018a4d-575f-4154-927a-19aa23384743","resolution":{"observed_at":"2026-08-11T04:16:45.168395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.171555Z","title":"Dempaa: Deployable multi-mini-patch adversarial attack for remote sensing image classification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.171555Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:60bf90e1cd6a4b827a11773f3072dbd2f87d7674d4050e43392c6bf67fee7f5f","observation_id":"171a374f-31b2-4964-8b34-fd525d0101a7","resolution":{"observed_at":"2026-08-11T04:16:45.171555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.174743Z","title":"Adversarial patch attack on multi-scale object detection for uav remote sensing images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.174743Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:f976aa038ddb2ee69450cbb6177c00e2e60a6976d3f5621442527466d7e95a72","observation_id":"b79c5fc1-98d4-4a77-969c-2b533756a37a","resolution":{"observed_at":"2026-08-11T04:16:45.174743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.177725Z","title":"Benchmarking adversarial patch against aerial detection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.177725Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:7fb94574ecea185677b2ae02a0085d0608821687f5e3650a245a6b7f1b2de3b3","observation_id":"0bea6e22-eb02-4376-8ffe-b3899ed47307","resolution":{"observed_at":"2026-08-11T04:16:45.177725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.180836Z","title":"Threatening patch attacks on object detection in optical remote sensing images,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.180836Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:e57f11c1770ca797e3e9e86f1e5398278c3881fc79d25222a3b5359850607436","observation_id":"55d61d2e-82c8-46a1-b12c-670979ae3a11","resolution":{"observed_at":"2026-08-11T04:16:45.180836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.184082Z","title":"Object detection in optical remote sensing images: A survey and a new benchmark,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.184082Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:7c2c17a278c106e8d3a8986ae6d1ba6e63b880828331a4f11d56b9cbba14b09b","observation_id":"14bc2fcf-3c0a-4055-84f7-3beaa2877bb3","resolution":{"observed_at":"2026-08-11T04:16:45.184082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.230855Z","title":"Fooling aerial detectors by background attack via dual-adversarial-induced error identification,","venue":null,"work_id":"47ee9f3f-82ad-4918-b726-e6e3b034356a","year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.187332Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:76c811a8abd53f2e39f30f5afecd6b03e8c8e097193cbe162725222c432cef4b","observation_id":"808d6845-53a3-4480-9b65-e1854b96a066","resolution":{"observed_at":"2026-08-11T04:16:45.236661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-18T03:00:21.110535Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":1},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2608.04559."}