{"as_of":"2026-08-21T06:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:abca3f5fd9f5d466cef7d4803859854afc392de9bf3e2385dfe495ee1a73d7ae","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":27,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":27,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T12:30:12.861686Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-05-25T01:56:32.560598Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"1907.05274","last_updated":"2019-07-06T04:53:49Z","snapshot_observed_at":"2026-08-18T10:21:06.613042Z","submitted_at":"2019-07-06T04:53:49Z","title":"Affine Disentangled GAN for Interpretable and Robust AV Perception","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-25T01:55:24.976737Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1907.05274"},"observation_digest":"sha256:7fac1d6689b840914e17ea676449c72d479053c07be1ef6131b762ba843631b7","observation_id":"7c6dc9f1-337d-450b-976f-98d13c187494","resolution":{"observed_at":"2026-05-25T01:56:32.563139Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"1907.05587","last_updated":"2019-07-12T06:12:18Z","snapshot_observed_at":"2026-08-13T00:57:55.508683Z","submitted_at":"2019-07-12T06:12:18Z","title":"Stateful Detection of Black-Box Adversarial Attacks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-24T22:48:00.367828Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1907.05587"},"observation_digest":"sha256:5a661f873f60e53b7345a8d1baedbadeda0d46dfe71adda30ba1b780f37784d8","observation_id":"c317ce83-dc64-439c-9f38-96ef446fa9f7","resolution":{"observed_at":"2026-05-24T22:50:03.114573Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"1907.05718","last_updated":"2019-07-11T06:28:25Z","snapshot_observed_at":"2026-08-15T22:52:19.038194Z","submitted_at":"2019-07-11T06:28:25Z","title":"Why Blocking Targeted Adversarial Perturbations Impairs the Ability to Learn","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-24T23:10:47.724766Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1907.05718"},"observation_digest":"sha256:6b211f40d2c5a75f5b572bb6ea8646046e5b07c502e1b38f4467672ab1ebc587","observation_id":"d8e9c506-78cf-4785-99b1-afbb31a38e3e","resolution":{"observed_at":"2026-05-24T23:15:03.495987Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-16T18:59:10.698869Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:7068181aac6506e53368e21a6d5d33f1ee6d727de49a66a3823c44b1cf0b83ce","observation_id":"dba6a7b7-a9b3-4b1c-8f88-39473116759f","resolution":{"observed_at":"2026-05-24T21:29:57.996511Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-14T15:11:10.092554Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-16T16:32:32.393762Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.092554Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:22bd20deaac2e9f99ffffdd2e086dbfefd2abeabb80408ae528e1da5cb2f4ba4","observation_id":"27e46986-c939-45fc-a711-5f06ba7154d1","resolution":{"observed_at":"2026-08-14T15:11:10.092554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-14T14:55:16.656794Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02256","last_updated":"2020-05-16T20:39:13Z","snapshot_observed_at":"2026-08-17T22:27:18.287495Z","submitted_at":"2019-08-06T16:55:47Z","title":"BlurNet: Defense by Filtering the Feature Maps","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T14:55:16.656794Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1908.02256"},"observation_digest":"sha256:bfe917c2205e050608637437a97cf79b349a2504556816ecf8824bd00df34b9d","observation_id":"94ba226c-2252-4021-9332-e197553b8f60","resolution":{"observed_at":"2026-08-14T14:55:16.656794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-12T14:46:12.309521Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.14946","last_updated":"2024-11-22T13:57:56Z","snapshot_observed_at":"2026-08-17T20:53:19.083386Z","submitted_at":"2024-11-22T13:57:56Z","title":"Reliable Evaluation of Attribution Maps in CNNs: A Perturbation-Based Approach","version":1},"reference_index":44,"source":"arxiv_source","source_observed_at":"2026-08-12T14:46:12.309521Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2411.14946"},"observation_digest":"sha256:52d3f22642b35d029e356cb86a739dea41cd5b5737e8a57b0af7479a8a5a6a6d","observation_id":"5ffc6531-e2bf-4b11-819c-a7128df421d9","resolution":{"observed_at":"2026-08-12T14:46:12.309521Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-11T15:52:26.468603Z","title":"Towards Evaluating the Robustness of Neural Networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.10597","last_updated":"2025-02-10T21:53:37Z","snapshot_observed_at":"2026-08-12T04:53:04.483357Z","submitted_at":"2024-12-13T22:53:16Z","title":"Err on the Side of Texture: Texture Bias on Real Data","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T15:52:26.468603Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2412.10597"},"observation_digest":"sha256:65d8093ac5f64cfdc1f2e5d50e88f726bec2b72a047a8ef56909078dfc62d70e","observation_id":"91f74a3d-40f8-47dd-bcf9-5a2b45878f17","resolution":{"observed_at":"2026-08-11T15:52:26.468603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-11T15:01:54.368896Z","title":"Towards Evaluating the Robustness of Neural Networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.11384","last_updated":"2024-12-16T02:27:54Z","snapshot_observed_at":"2026-08-17T22:30:52.383031Z","submitted_at":"2024-12-16T02:27:54Z","title":"A Comprehensive Review of Adversarial Attacks on Machine Learning","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T15:01:54.368896Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2412.11384"},"observation_digest":"sha256:7078683ce9fbd4802976c0f21727a733817cdad51e018ca3e3b4ddbd5ec618d4","observation_id":"1f28775a-c5a0-4938-a24a-2383d56d6e0b","resolution":{"observed_at":"2026-08-11T15:01:54.368896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-11T14:26:45.090068Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.12000","last_updated":"2025-05-23T13:58:57Z","snapshot_observed_at":"2026-08-20T07:04:20.821356Z","submitted_at":"2024-12-16T17:28:25Z","title":"CP-Guard: Malicious Agent Detection and Defense in Collaborative Bird's Eye View Perception","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-11T14:26:45.090068Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2412.12000"},"observation_digest":"sha256:64dfe3e80a2efe05bbced213e90fa45812b629527474a89c1cc8fd3a33eb050c","observation_id":"ad48b854-9e53-4206-a480-579fa5810be2","resolution":{"observed_at":"2026-08-11T14:26:45.090068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-11T13:15:05.197313Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.13376","last_updated":"2024-12-17T23:23:25Z","snapshot_observed_at":"2026-08-16T21:19:41.446421Z","submitted_at":"2024-12-17T23:23:25Z","title":"Targeted View-Invariant Adversarial Perturbations for 3D Object Recognition","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-11T13:15:05.197313Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2412.13376"},"observation_digest":"sha256:f97b29fe9225842c074b414cb71bf0d35f2d2eca313816ca833fdf2e70f7cc0b","observation_id":"efd8292f-c2c3-4c34-b8c2-c3f0bd975988","resolution":{"observed_at":"2026-08-11T13:15:05.197313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-10T22:40:29.176636Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.01025","last_updated":"2025-01-12T04:43:46Z","snapshot_observed_at":"2026-08-20T00:35:11.608600Z","submitted_at":"2025-01-02T03:15:25Z","title":"Towards Adversarially Robust Deep Metric Learning","version":2},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-10T22:40:29.176636Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2501.01025"},"observation_digest":"sha256:d56eeba6dc427f6c7a1689d54681573fb8048fc926029cca73b4da224ae1e5b0","observation_id":"023c7f7d-0349-4015-9a32-650bbe16b050","resolution":{"observed_at":"2026-08-10T22:40:29.176636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-16T12:30:12.861686Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2504.12806","last_updated":"2025-05-07T09:01:00Z","snapshot_observed_at":"2026-08-18T20:08:46.861770Z","submitted_at":"2025-04-17T10:12:38Z","title":"A Numerical Gradient Inversion Attack in Variational Quantum Neural-Networks","version":2},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-16T12:30:12.861686Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2504.12806"},"observation_digest":"sha256:e8b13850f7b66cb421712ad37e5d11f8279752d2a64cb09fb81b29c1891dc7c2","observation_id":"7e7f1ff9-d5cb-4f79-a289-f191482cdee6","resolution":{"observed_at":"2026-08-16T12:30:12.861686Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-07T13:33:41.403271Z","title":"org/abs/1608.04644","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.21414","last_updated":"2025-05-27T16:41:23Z","snapshot_observed_at":"2026-08-17T23:56:57.491677Z","submitted_at":"2025-05-27T16:41:23Z","title":"A Framework for Adversarial Analysis of Decision Support Systems Prior to Deployment","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:33:41.403271Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2505.21414"},"observation_digest":"sha256:4de83b784b5b817fc3548f91d5a0963b96bfbaa3da5afaaa47443808404b3eb4","observation_id":"4b9745d8-4989-4440-bad2-2651be9f528a","resolution":{"observed_at":"2026-08-07T13:33:41.403271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-07T10:37:11.399156Z","title":"Anna Chistyakova, Anastasia Antsiferova, Maksim Khrebtov, Sergey Lavrushkin, Konstantin Arkhipenko, Dmitriy Vatolin, and Denis Turdakov","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.04951","last_updated":"2025-06-05T12:24:38Z","snapshot_observed_at":"2026-08-14T14:14:30.916283Z","submitted_at":"2025-06-05T12:24:38Z","title":"Robustness as Architecture: Designing IQA Models to Withstand Adversarial Perturbations","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.399156Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2506.04951"},"observation_digest":"sha256:890601d208c062f08acd8a816822679ae5c82c6613a3e2e9c07df98235188e65","observation_id":"dcc03eda-692d-4b7a-b9b4-60c93f295392","resolution":{"observed_at":"2026-08-07T10:37:11.399156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-06T12:14:57.219950Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.21992","last_updated":"2025-07-29T16:43:54Z","snapshot_observed_at":"2026-08-18T15:51:27.973427Z","submitted_at":"2025-07-29T16:43:54Z","title":"Teach Me to Trick: Exploring Adversarial Transferability via Knowledge Distillation","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-06T12:14:57.219950Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2507.21992"},"observation_digest":"sha256:a05e5c90720f6b436e457fa5dd2429cee29e512adc7823a6e5434d7191a3d304","observation_id":"c8bc226d-acb1-4c1a-8b0b-d8b11f8ced72","resolution":{"observed_at":"2026-08-06T12:14:57.219950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-06T11:12:40.819408Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.23010","last_updated":"2025-07-30T18:19:11Z","snapshot_observed_at":"2026-08-16T03:55:07.393547Z","submitted_at":"2025-07-30T18:19:11Z","title":"Investigating the Invertibility of Multimodal Latent Spaces: Limitations of Optimization-Based Methods","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T11:12:40.819408Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2507.23010"},"observation_digest":"sha256:12243c6ec7afd2efe314ee15d090722bf2e934c5ed058260662a22f3bca19f0d","observation_id":"702430e7-ddde-4a7f-9978-ba6f357107e2","resolution":{"observed_at":"2026-08-06T11:12:40.819408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-05T16:56:07.470698Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2508.17456","last_updated":"2025-09-13T23:06:06Z","snapshot_observed_at":"2026-08-14T10:46:45.526142Z","submitted_at":"2025-08-24T17:19:53Z","title":"Adversarial Examples Are Not Bugs, They Are Superposition","version":2},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-05T16:56:07.470698Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2508.17456"},"observation_digest":"sha256:4847eeb8313055f3f2e8b83a706ac3c19f5b81fc3739eaf273ebedca536d816b","observation_id":"2a8cb003-69ce-4f67-b6b4-0b8d3b430be9","resolution":{"observed_at":"2026-08-05T16:56:07.470698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2604.08405","last_updated":"2026-07-30T09:16:54Z","snapshot_observed_at":"2026-08-15T03:54:46.243030Z","submitted_at":"2026-04-09T16:03:24Z","title":"SyncBreaker:Stage-Aware Multimodal Adversarial Attacks on Audio-Driven Talking Head Generation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T17:30:36.462567Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2604.08405"},"observation_digest":"sha256:9a10569dddd2f4e8da596d2858c47072722296ab06146c6284d3b2e09f780d15","observation_id":"4ae7b7a7-e422-4ce1-bea9-04c679648037","resolution":{"observed_at":"2026-05-11T06:41:26.756514Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-02T16:38:16.016110Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2604.08405","last_updated":"2026-07-30T09:16:54Z","snapshot_observed_at":"2026-08-15T03:54:46.243030Z","submitted_at":"2026-04-09T16:03:24Z","title":"SyncBreaker:Stage-Aware Multimodal Adversarial Attacks on Audio-Driven Talking Head Generation","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T16:38:16.016110Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2604.08405"},"observation_digest":"sha256:8dc4a63c318c51f9a1b9430d7a60e0a8c0f54c6cc1c51ee5fd0fc6f18ac4526a","observation_id":"47b31ef9-ffb9-44e8-be68-bba7d53147c4","resolution":{"observed_at":"2026-08-02T16:38:16.016110Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2604.20704","last_updated":"2026-04-22T15:46:11Z","snapshot_observed_at":"2026-08-14T14:15:51.583704Z","submitted_at":"2026-04-22T15:46:11Z","title":"Auto-ART: Structured Literature Synthesis and Automated Adversarial Robustness Testing","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-10T00:39:43.196010Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2604.20704"},"observation_digest":"sha256:05bbd7eb4c5cb6dc2059d8afd8f2df27738ab6ce704f4caab9947ae8cf29fad9","observation_id":"d377a4aa-8187-4905-ac29-601318b95ffa","resolution":{"observed_at":"2026-05-10T00:39:48.181702Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-08-14T13:47:58.584985Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T12:27:14.499810Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2604.22552"},"observation_digest":"sha256:f5739a4f55de826b22d0d196bb9ad977e0f2405dec1011519b7cb8e4570bf002","observation_id":"5e7fd3b0-d4fa-478f-8c4d-35b7f0e7f90a","resolution":{"observed_at":"2026-05-11T19:16:07.998582Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-08-08T14:20:01.894187Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:96ab8595271c28a3a36843b79784ae7e3622ebb0d2f35afd6f30d397d1919929","observation_id":"07cba9a8-01ee-4f9f-95e2-a2563837a415","resolution":{"observed_at":"2026-05-11T19:01:18.323639Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2605.07470","last_updated":"2026-05-08T09:17:58Z","snapshot_observed_at":"2026-08-14T10:41:27.301278Z","submitted_at":"2026-05-08T09:17:58Z","title":"Uncovering Hidden Systematics in Neural Network Models for High Energy Physics","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-11T02:12:36.594374Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2605.07470"},"observation_digest":"sha256:52ae0a7191c9059103c9c245217d387988e5cf4dd7c4aa34c3e904e89b35e550","observation_id":"2bd20a56-d7b9-45ea-91e3-902ba6f6830a","resolution":{"observed_at":"2026-05-11T03:50:55.999557Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2605.11996","last_updated":"2026-05-12T11:46:25Z","snapshot_observed_at":"2026-08-11T04:14:26.769683Z","submitted_at":"2026-05-12T11:46:25Z","title":"BadSKP: Backdoor Attacks on Knowledge Graph-Enhanced LLMs with Soft Prompts","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-13T05:10:11.345256Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2605.11996"},"observation_digest":"sha256:d814bb7836723248137d69c8659809ab70b6285c06ce6b5535244693fb1b1afc","observation_id":"34945939-0589-4161-9bbf-2e2d2fb5d161","resolution":{"observed_at":"2026-05-13T05:12:17.830359Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-07-12T03:57:46.650349Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.03232","last_updated":"2026-07-03T11:41:42Z","snapshot_observed_at":"2026-08-09T19:14:48.769091Z","submitted_at":"2026-07-03T11:41:42Z","title":"Fast SDP certification of neural networks : towards large multi-class datasets","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-12T03:57:46.650349Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2607.03232"},"observation_digest":"sha256:37190dfdb3846f61314a3322fe8621d5f8ae3934e0d509d521e9f10edaf27116","observation_id":"91a15cd5-9881-487f-a5a1-8b9ee8db3e44","resolution":{"observed_at":"2026-07-12T03:57:46.650349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-07-14T07:06:53.439022Z","title":"URLhttps://arxiv.org/abs/1608.04644v2","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.11095","last_updated":"2026-07-13T05:03:41Z","snapshot_observed_at":"2026-08-17T18:38:56.680311Z","submitted_at":"2026-07-13T05:03:41Z","title":"When cheap gradients fail: the measurement cost of attacking quantum classifiers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-14T07:06:53.439022Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2607.11095"},"observation_digest":"sha256:630bb1899056d557b60525ec33a8f72c1f6eee43bfa598c652a9b3d8b68f927a","observation_id":"e3a7fb5d-fbe4-43d2-8a9d-ffe9eab223f7","resolution":{"observed_at":"2026-07-14T07:06:53.439022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1608.04644/citation-record","integrity":"/paper/1608.04644/integrity","json":"/paper/1608.04644/citation-record.json","paper":"/paper/1608.04644"},"outbound":[],"paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 27 inbound Pith citation observations for arXiv:1608.04644."}