{"as_of":"2026-08-04T12:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:1e8c976311d3643714f2dbf3b874fa8ba54c052b56b9391b9812bd38b2c0d23c","coverage":[{"denominator":0,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-04T06:34:03.388597+00:00","state":"measured"},{"denominator":47,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T09:44:14.418002Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-10T15:27:20.185046Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"1906.10671","last_updated":"2019-06-25T17:09:43Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2019-06-25T17:09:43Z","title":"Explaining Deep Learning Models with Constrained Adversarial Examples","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-25T16:19:36.651776Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/1906.10671"},"observation_digest":"sha256:ca31b4edd6e921d3e80b3e40d279431ecdc0ff795b2c7c6c8a43d4b3b2a12f59","observation_id":"4a002197-e249-42f3-98ff-53f8e69c494d","resolution":{"observed_at":"2026-05-25T16:21:02.023718Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:6e94e451b7cd976a3e0755ba121fb89195d3e70fec92e45694a328bb99bb9877","observation_id":"490c5630-4470-43e2-a9e1-4c3988d4edb4","resolution":{"observed_at":"2026-05-25T20:01:11.256286Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"1907.01996","last_updated":"2019-07-03T15:40:05Z","snapshot_observed_at":"2026-07-06T08:04:53.804209Z","submitted_at":"2019-07-03T15:40:05Z","title":"Robust Synthesis of Adversarial Visual Examples Using a Deep Image Prior","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-25T10:25:47.135556Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/1907.01996"},"observation_digest":"sha256:ed79bd75f0ee3c568eae82b24b9749b64c63e34debf2a00b9792b22c90759ff8","observation_id":"8f424ea7-ab57-4c40-831c-513371a314e9","resolution":{"observed_at":"2026-05-25T10:26:52.993715Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2409.07609","last_updated":"2026-07-21T12:24:53Z","snapshot_observed_at":"2026-08-04T02:09:32.375092Z","submitted_at":"2024-09-11T20:43:59Z","title":"Survival of the Cheapest: Cost-Aware Hardware Adaptation for Adversarial Robustness","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-23T21:14:38.949892Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2409.07609"},"observation_digest":"sha256:bfbc289aaa14410e4ca054cc9abdbc0e467111ec67524b4103c5ff2e397c0ff0","observation_id":"36c2f1fb-7f1f-4710-8e5b-8ce2df817d79","resolution":{"observed_at":"2026-05-23T21:15:49.375518Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2412.14113","last_updated":"2026-05-14T17:15:02Z","snapshot_observed_at":"2026-07-06T20:09:28.763595Z","submitted_at":"2024-12-18T17:58:58Z","title":"Adversarial Hubness in Multi-Modal Retrieval","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-23T06:39:36.039613Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2412.14113"},"observation_digest":"sha256:021bbc3cd5510fc7fc5f9588b6a350f6de90f88ea667673b591bca82bae23e4f","observation_id":"7aa42775-963d-46f7-9cf7-1f4541865c14","resolution":{"observed_at":"2026-05-23T06:42:39.748175Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2505.06335","last_updated":"2026-04-21T09:43:38Z","snapshot_observed_at":"2026-07-06T21:21:38.809054Z","submitted_at":"2025-05-09T17:27:17Z","title":"Remote Rowhammer Attack using Adversarial Observations on Federated Learning Clients","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-22T15:22:59.827762Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.06335"},"observation_digest":"sha256:7ff79c0e528643a36e3ce33998aa10de3b41e7c50015fb264b4b4a2079b6cb61","observation_id":"3b3ef7d2-843b-473b-a91b-f033c95ae55c","resolution":{"observed_at":"2026-05-22T15:24:57.783947Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-04T09:44:14.418002Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2510.14025","last_updated":"2026-05-31T12:35:23Z","snapshot_observed_at":"2026-08-04T09:44:13.844553Z","submitted_at":"2025-10-15T19:05:59Z","title":"NAPPure: Adversarial Purification for Robust Image Classification under Non-Additive Perturbations","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T09:44:14.418002Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2510.14025"},"observation_digest":"sha256:108d6c940835c4675987c446df05f7ef487a0b5981d254e1ba6919dfcb4009bd","observation_id":"12b90906-9fc5-4683-aaf2-f6a3006a3ec7","resolution":{"observed_at":"2026-08-04T09:44:14.418002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2511.09829","last_updated":"2026-04-10T00:04:27Z","snapshot_observed_at":"2026-07-06T22:35:41.533403Z","submitted_at":"2025-11-13T00:23:15Z","title":"Thermally Activated Dual-Modal Adversarial Clothing against AI Surveillance Systems","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-17T23:03:55.674652Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2511.09829"},"observation_digest":"sha256:431fb2f5c7698864d6163317a37e686b011ed1ea23924041cf1fef8b27767c3f","observation_id":"c384b848-dbe7-4ed8-9247-afb4a612191e","resolution":{"observed_at":"2026-05-17T23:05:25.346650Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-03T18:37:51.315993Z","title":"Adver- sarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2512.04554","last_updated":"2026-06-24T14:56:13Z","snapshot_observed_at":"2026-08-03T18:37:50.386536Z","submitted_at":"2025-12-04T08:15:57Z","title":"Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T18:37:51.315993Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2512.04554"},"observation_digest":"sha256:82d9659e8df18daddc20bc03e0650aeb1d20d581c06493bcd604063910d3085b","observation_id":"ed5b5170-4fcb-469e-a9f4-cc3d7f5b9d16","resolution":{"observed_at":"2026-08-03T18:37:51.315993Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-03T17:32:12.815967Z","title":"Adversarial patch.arXiv preprint arXiv:1712.09665, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2512.11899","last_updated":"2026-07-21T16:21:35Z","snapshot_observed_at":"2026-08-03T23:38:42.360154Z","submitted_at":"2025-12-10T08:34:28Z","title":"Read or Ignore? A Unified Benchmark for Typographic-Attack Robustness and Text Recognition in Vision-Language Models","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T17:32:12.815967Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2512.11899"},"observation_digest":"sha256:be4a91c98cca3df0990966644f9f781f58d2abd33bfdc1d3b40a040cdeff5690","observation_id":"21d4de9c-bfb2-4554-9f91-cb98fd1187ee","resolution":{"observed_at":"2026-08-03T17:32:12.815967Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.02457","last_updated":"2026-04-02T18:41:29Z","snapshot_observed_at":"2026-08-02T22:29:43.103258Z","submitted_at":"2026-04-02T18:41:29Z","title":"Street-Legal Physical-World Adversarial Rim for License Plates","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-13T21:19:05.599647Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.02457"},"observation_digest":"sha256:dc076600c1a104859af4277cff125cbf2e3c61059109421fa9c24051492028ad","observation_id":"90873781-75a9-4de3-bb99-9b958440c90e","resolution":{"observed_at":"2026-05-13T21:23:17.246775Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.06865","last_updated":"2026-04-08T09:26:03Z","snapshot_observed_at":"2026-07-31T23:29:05.641982Z","submitted_at":"2026-04-08T09:26:03Z","title":"Physical Adversarial Attacks on AI Surveillance Systems:Detection, Tracking, and Visible--Infrared Evasion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T19:17:19.868567Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.06865"},"observation_digest":"sha256:52467f5a16afb3ad01dc35c41d1e31f3c9420a9cdf4d75db3cca6940bc8c0701","observation_id":"ad61e042-b456-4c5d-9ba9-6ae783e111f4","resolution":{"observed_at":"2026-05-10T23:10:53.483700Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.12418","last_updated":"2026-04-14T08:06:09Z","snapshot_observed_at":"2026-07-06T23:00:37.144068Z","submitted_at":"2026-04-14T08:06:09Z","title":"RACF: A Resilient Autonomous Car Framework with Object Distance Correction","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T15:46:46.475645Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.12418"},"observation_digest":"sha256:91dc8912761bddf6bbcbc2185a327ddce4cdca7c08f1aa48285ffed0f34cd030","observation_id":"49a8d5c6-8c85-4d75-9f7c-b702a6ddb4ef","resolution":{"observed_at":"2026-05-11T09:51:01.019761Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-07-06T23:08:56.419589Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T12:27:14.499810Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.22552"},"observation_digest":"sha256:c301944e2f295d6dcfb3359ced06c17cfdc980ae4123f78e6d527ee2652281ee","observation_id":"d91a7ac4-881f-4ab7-a47b-0f00d4a0a2f9","resolution":{"observed_at":"2026-05-11T19:16:07.979703Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.23105","last_updated":"2026-04-25T02:00:01Z","snapshot_observed_at":"2026-08-02T21:29:37.320382Z","submitted_at":"2026-04-25T02:00:01Z","title":"Transferable Physical-World Adversarial Patches Against Object Detection in Autonomous Driving","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T08:32:18.670096Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.23105"},"observation_digest":"sha256:6259d867a69dcb3f06c75e7e99aea13ef91e232b45803aaa974923009edefb23","observation_id":"0390151b-4b1c-44dd-85b5-665812d22f69","resolution":{"observed_at":"2026-05-11T20:36:08.986629Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2604.27414","last_updated":"2026-04-30T04:33:38Z","snapshot_observed_at":"2026-08-02T12:04:09.137766Z","submitted_at":"2026-04-30T04:33:38Z","title":"Understanding Adversarial Transferability in Vision-Language Models for Autonomous Driving: A Cross-Architecture Analysis","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-07T09:44:49.589390Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2604.27414"},"observation_digest":"sha256:71784e386295227d5c4d0391a39a3e7afbfe626dd0199baa6283b5b278c9dbd8","observation_id":"862f6fb2-99a9-44f3-a06f-75126edf0205","resolution":{"observed_at":"2026-05-12T09:41:26.879539Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2605.01950","last_updated":"2026-05-03T16:19:45Z","snapshot_observed_at":"2026-07-06T23:15:07.159340Z","submitted_at":"2026-05-03T16:19:45Z","title":"TRAP: Tail-aware Ranking Attack for World-Model Planning","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T15:15:45.407680Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2605.01950"},"observation_digest":"sha256:d6d8c84bcf5642a28f828a24d3816f5e8f5c8cd25e4ed267862b80b9dbc129ab","observation_id":"4c852624-642a-428f-8e5a-cf575210f21a","resolution":{"observed_at":"2026-05-11T10:56:05.074239Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2605.19309","last_updated":"2026-06-04T03:21:49Z","snapshot_observed_at":"2026-07-06T23:30:02.207108Z","submitted_at":"2026-05-19T03:44:09Z","title":"How Do Document Parsers Break? Auditing Structural Vulnerability in Document Intelligence","version":1},"reference_index":32,"source":"arxiv_source","source_observed_at":"2026-05-20T06:03:06.347245Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2605.19309"},"observation_digest":"sha256:210d07550f6c1ce5a0000fa77933dfef521de84de2b62c18a14e603f55d8eea1","observation_id":"4d682df2-e8ca-4a91-9fa8-0850a948797e","resolution":{"observed_at":"2026-05-20T06:03:23.004080Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2605.27689","last_updated":"2026-05-26T21:09:12Z","snapshot_observed_at":"2026-08-03T14:58:04.620322Z","submitted_at":"2026-05-26T21:09:12Z","title":"Test-Time Collective Action: Proxy-Based Perturbations for Correcting Algorithmic Harms","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-29T18:38:45.574574Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2605.27689"},"observation_digest":"sha256:f87b55163db86dec5ed436e899bf51e424668389ea6d8edcfcf968d1c9c7e3e4","observation_id":"77cc322d-6dab-46d1-bd4f-7a3e51abcd72","resolution":{"observed_at":"2026-06-29T18:43:50.651404Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.00159","last_updated":"2026-05-29T07:52:45Z","snapshot_observed_at":"2026-08-03T05:12:39.423546Z","submitted_at":"2026-05-29T07:52:45Z","title":"Digital-to-Physical Transfer of Adversarial Patches for Aerial Vehicle Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-06-28T23:07:11.925592Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.00159"},"observation_digest":"sha256:3cdc512006a85b7bfe3bf9da5807268dd2ed011c2fae834777f164b2db537211","observation_id":"286e0256-1954-4c08-a387-9221cbe33bc1","resolution":{"observed_at":"2026-06-29T00:12:50.662556Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.10371","last_updated":"2026-06-09T03:31:09Z","snapshot_observed_at":"2026-07-06T23:49:37.345711Z","submitted_at":"2026-06-09T03:31:09Z","title":"Test-time Adversarial Takeover: A Real-time Hijacking Interface against Robotic Diffusion Policies","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-06-27T13:04:32.423616Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.10371"},"observation_digest":"sha256:edaa53956e0b256a3cdb468e23fe4a842743d0008ea348276706a1fbe64457f2","observation_id":"3cf73470-9f69-42ae-88e2-02298b5476da","resolution":{"observed_at":"2026-07-03T05:47:41.601860Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.10904","last_updated":"2026-07-16T08:23:49Z","snapshot_observed_at":"2026-08-02T11:56:57.731913Z","submitted_at":"2026-06-09T14:13:54Z","title":"Auditing Inference-Time Defense Evaluation for Multimodal Large Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-06-27T12:44:15.097414Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.10904"},"observation_digest":"sha256:e8e99b2b5f393453d43ddb0976732be7371da8f6388b2a2bb914877e1e45c512","observation_id":"5d61b564-943d-4a45-b3fe-362f29cf2d73","resolution":{"observed_at":"2026-07-03T06:17:42.478352Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-15T10:53:29.444919Z","title":"In: NeurIPS Workshop on Machine Learning and Computer Security (2017), arXiv:1712.09665","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.10904","last_updated":"2026-07-16T08:23:49Z","snapshot_observed_at":"2026-08-02T11:56:57.731913Z","submitted_at":"2026-06-09T14:13:54Z","title":"Auditing Inference-Time Defense Evaluation for Multimodal Large Language Models","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-15T10:53:29.444919Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.10904"},"observation_digest":"sha256:b8b17316ad4ec5e56608c703d706bf873d455b79311c7182a675954000d02072","observation_id":"bc8b33a5-7d2f-4da1-9d3a-a447397de100","resolution":{"observed_at":"2026-07-15T10:53:29.444919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-02T11:56:58.439089Z","title":"In: NeurIPS Workshop on Machine Learning and Computer Security (2017), arXiv:1712.09665","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2606.10904","last_updated":"2026-07-16T08:23:49Z","snapshot_observed_at":"2026-08-02T11:56:57.731913Z","submitted_at":"2026-06-09T14:13:54Z","title":"Auditing Inference-Time Defense Evaluation for Multimodal Large Language Models","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T11:56:58.439089Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.10904"},"observation_digest":"sha256:6903c80ff18511f4a3ff912d85302032e9fb6f77674020b5d10fab5e0a0124e3","observation_id":"33f3938c-ebd0-48d3-9303-c0f046208f84","resolution":{"observed_at":"2026-08-02T11:56:58.439089Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.12655","last_updated":"2026-06-10T20:27:06Z","snapshot_observed_at":"2026-08-03T13:56:34.318249Z","submitted_at":"2026-06-10T20:27:06Z","title":"Amnesia: A Stealthy Replay Attack on Continual Learning Dreams","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-06-27T09:02:44.548488Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.12655"},"observation_digest":"sha256:bf61011477baf1276503b00d2ca351bfaeac5ff7505eda8e46bbbbb410dbb172","observation_id":"23342aa3-94de-4879-867f-39e4faf80844","resolution":{"observed_at":"2026-07-03T12:18:06.650879Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.18318","last_updated":"2026-06-16T13:38:15Z","snapshot_observed_at":"2026-08-03T10:13:55.509587Z","submitted_at":"2026-06-16T13:38:15Z","title":"Budget-Aware Adaptive Adversarial Patches for Black-Box Object Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-06-27T01:42:05.022736Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.18318"},"observation_digest":"sha256:1fa31c83a3ba5a305b7d3b6c1f61a7803f3da6fd0f17233430f82a8dcc0c3ac3","observation_id":"ea62e5e4-4ea1-46ec-a457-c542393fa33c","resolution":{"observed_at":"2026-07-03T20:08:55.705700Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.25734","last_updated":"2026-06-24T12:00:10Z","snapshot_observed_at":"2026-07-07T00:00:12.737052Z","submitted_at":"2026-06-24T12:00:10Z","title":"Shoot the Honey, Cloak the Player: Towards Zero-Runtime-Overhead Proactive Defense and Detection for Visual Game Cheating","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-06-25T20:08:40.744606Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.25734"},"observation_digest":"sha256:c7fa0aece4de839ab184dd502ebaccfed39fefe47ab9e6f6d440a39782d446a0","observation_id":"fbd16f38-a1ec-43b5-b0ef-26d85c38421a","resolution":{"observed_at":"2026-07-04T20:30:07.167829Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.27079","last_updated":"2026-06-27T13:41:35Z","snapshot_observed_at":"2026-08-03T01:52:34.562831Z","submitted_at":"2026-06-25T14:19:36Z","title":"ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-26T05:10:09.186699Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.27079"},"observation_digest":"sha256:feba3ab46035bd49e33bd5e19e91e3a7edefbe854e3fbb8fd5b9f6c2ee6c110e","observation_id":"d63463b0-f4fd-40a8-888d-3554449b8127","resolution":{"observed_at":"2026-07-04T13:29:51.758792Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.27079","last_updated":"2026-06-27T13:41:35Z","snapshot_observed_at":"2026-08-03T01:52:34.562831Z","submitted_at":"2026-06-25T14:19:36Z","title":"ForesightSafety-VLA: A Unified Diagnostic Safety Benchmark for Vision-Language-Action Models","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-06-30T09:51:54.464950Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.27079"},"observation_digest":"sha256:177db719f4551fedba36d5db02707e4c36781057d71b5bf35dacf415d39042a0","observation_id":"fe7b98ac-2ef1-418f-9a46-0e707ad43524","resolution":{"observed_at":"2026-06-30T09:54:34.867160Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.28416","last_updated":"2026-06-25T12:03:02Z","snapshot_observed_at":"2026-08-04T11:45:09.722274Z","submitted_at":"2026-06-25T12:03:02Z","title":"AEGIS: A Semantic GAN and Evidential Learning Frameworkfor Robust Adversarial Detection in Vision Sensors","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-06-30T01:25:24.363681Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.28416"},"observation_digest":"sha256:05a388eb042fa8e60ab452fe3328ec70ab26c6087241e874139d6d0d0664c10a","observation_id":"8b6616db-44aa-408e-bd3a-e57936fb8206","resolution":{"observed_at":"2026-07-01T15:25:48.591507Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2606.30807","last_updated":"2026-06-29T18:32:29Z","snapshot_observed_at":"2026-08-02T15:02:50.322784Z","submitted_at":"2026-06-29T18:32:29Z","title":"Off the Rails: Hijacking the Scoring Head in Generative End-to-End Driving Planners with Safety-Violating Adversarial Perturbations","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-01T01:32:45.896103Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2606.30807"},"observation_digest":"sha256:d7a6b260f59f7d4d5b71c0977599e9bf4125c63b1000f99eca9dab92db1c2141","observation_id":"aa1cdd94-2e40-4014-b7f4-364edd3627dc","resolution":{"observed_at":"2026-07-01T12:55:44.544476Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-11T04:21:53.495986Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.05649","last_updated":"2026-07-06T21:25:41Z","snapshot_observed_at":"2026-08-01T15:35:46.610503Z","submitted_at":"2026-07-06T21:25:41Z","title":"REVIVE: A Multi-Modal Framework for Vandalism Detection and Recovery in Autonomous Vehicles","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-11T04:21:53.495986Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.05649"},"observation_digest":"sha256:51c719686c6fb90ee951a964eecf88b05f0827300e89711097ae2775b61a6c84","observation_id":"aa356664-a1c5-4ab6-bb60-a2a34d80cd4f","resolution":{"observed_at":"2026-07-11T04:21:53.495986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2607.06485","last_updated":"2026-07-07T16:46:46Z","snapshot_observed_at":"2026-08-02T14:05:01.562193Z","submitted_at":"2026-07-07T16:46:46Z","title":"AirflowAttack: Thermal-Airflow Adversarial Perturbations against Infrared Remote-Sensing Vision-Language Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-08T04:29:57.545703Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.06485"},"observation_digest":"sha256:0429ee1edf419264cdb8cf944f840b7862ef8d066ececa3f4f215408b14a59ab","observation_id":"cf69877d-3628-4184-9ce1-952f0e4f1025","resolution":{"observed_at":"2026-07-08T04:34:31.204585Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2607.07288","last_updated":"2026-07-08T11:28:15Z","snapshot_observed_at":"2026-08-02T14:18:28.186572Z","submitted_at":"2026-07-08T11:28:15Z","title":"InfraQR: Edge-Placed QR-Inspired Structured Patch Attacks on Infrared Vision-Language Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-09T15:23:02.114828Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.07288"},"observation_digest":"sha256:ecbea39316205146ba206f1e049bbaaa95c23fd4c34571aba617ec2911e62343","observation_id":"8bda6f97-8c6d-481d-83c6-b9bc769fae24","resolution":{"observed_at":"2026-07-09T15:26:18.505623Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-10T15:27:20.185046Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"2607.07922","last_updated":"2026-07-08T21:08:57Z","snapshot_observed_at":"2026-08-02T08:07:28.395004Z","submitted_at":"2026-07-08T21:08:57Z","title":"Adversarial Decoys: Misdirecting Attention-Based Defenses in ViT","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-10T15:22:10.143336Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.07922"},"observation_digest":"sha256:5fc70ebacb33417d2cdb40fb910e775c43f1f0c09cc9e5fd08e16651f68be60b","observation_id":"d8c7633f-37e3-4426-bb7a-a3917648b4ae","resolution":{"observed_at":"2026-07-10T15:27:20.186151Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-04T06:34:03.388597+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-14T07:19:25.986044Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.11063","last_updated":"2026-07-21T04:50:04Z","snapshot_observed_at":"2026-08-02T07:05:50.076957Z","submitted_at":"2026-07-13T04:03:32Z","title":"AdvNav: Behavior-Guided Black-Box Adversarial Attacks on Vision-Language Navigation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-14T07:19:25.986044Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.11063"},"observation_digest":"sha256:8608f8ec9dca23b142c7b57b6d9d28cc772087ff97f0a302c3c382cd95778ec1","observation_id":"09d99f44-ea39-4cf8-b9d0-41af8bd8802b","resolution":{"observed_at":"2026-07-14T07:19:25.986044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-02T07:05:52.200310Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.11063","last_updated":"2026-07-21T04:50:04Z","snapshot_observed_at":"2026-08-02T07:05:50.076957Z","submitted_at":"2026-07-13T04:03:32Z","title":"AdvNav: Behavior-Guided Black-Box Adversarial Attacks on Vision-Language Navigation","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-02T07:05:52.200310Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.11063"},"observation_digest":"sha256:f72e65f7933184bb4d750d32c9f5a805b1c514247daaf6c1aee15a46b2213e0b","observation_id":"d6c5ae0f-8cb1-470b-b710-9a3afa2a6f50","resolution":{"observed_at":"2026-08-02T07:05:52.200310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T23:54:05.961213Z","title":"Brown, Dandelion Mané, Aurko Roy, Martín Abadi, and Justin Gilmer","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.15207","last_updated":"2026-07-16T17:04:15Z","snapshot_observed_at":"2026-08-03T09:31:53.037518Z","submitted_at":"2026-07-16T17:04:15Z","title":"BadWAM: When World-Action Models Dream Right but Act Wrong","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T23:54:05.961213Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.15207"},"observation_digest":"sha256:8c258327941a7fd495bb52a08cc04ced55aac4b07522b5ec42c9fd0bfcbf23d7","observation_id":"7a830f30-96b2-401c-a680-5513329b97a4","resolution":{"observed_at":"2026-08-01T23:54:05.961213Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T21:04:37.940216Z","title":"arXiv preprint arXiv:1712.09665 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.16414","last_updated":"2026-07-17T18:05:47Z","snapshot_observed_at":"2026-08-01T21:04:37.305788Z","submitted_at":"2026-07-17T18:05:47Z","title":"Signal-based Model Access Risk Analysis for AI System Operations Security","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T21:04:37.940216Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.16414"},"observation_digest":"sha256:e483908bf3f9bb8f97759c3bc46526303d3a0abd951960926ed00684739651c1","observation_id":"d9653c2c-bf6c-4b8a-b1c2-f8f8a3e5d8cf","resolution":{"observed_at":"2026-08-01T21:04:37.940216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T12:16:00.983728Z","title":"Adversarial patch","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.19617","last_updated":"2026-07-21T22:54:37Z","snapshot_observed_at":"2026-08-03T09:40:29.675698Z","submitted_at":"2026-07-21T22:54:37Z","title":"EGRNet: A Lightweight Semantic Segmentation Network with Edge-Gated Refinement and Adversarial Sensing","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-01T12:16:00.983728Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.19617"},"observation_digest":"sha256:44f03909cf6192f1843fd91063363275eb976291d90bf28f6e9b7791d61fd8eb","observation_id":"2b6a5a79-c765-4543-a2f5-fb6aa9a9ed9b","resolution":{"observed_at":"2026-08-01T12:16:00.983728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T12:04:22.203566Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.19683","last_updated":"2026-07-22T02:33:56Z","snapshot_observed_at":"2026-08-03T17:57:08.824724Z","submitted_at":"2026-07-22T02:33:56Z","title":"GhostPrompt: Cross-Image Adversarial Prompt for Vision-Language Models","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-01T12:04:22.203566Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.19683"},"observation_digest":"sha256:618f3f3aa3700ffe2920bde2ec739420d2b11ed17689c693cd8fcd2dc686365c","observation_id":"c16ade4f-ab1a-47c3-8c4f-a1071f44d936","resolution":{"observed_at":"2026-08-01T12:04:22.203566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T08:08:37.019430Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.21243","last_updated":"2026-07-23T12:06:02Z","snapshot_observed_at":"2026-08-04T00:32:48.198268Z","submitted_at":"2026-07-23T12:06:02Z","title":"Detectors Learn the Wrong Thing: Shortcut-Resistant Adversarial Training Against Physically Realizable Attacks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T08:08:37.019430Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.21243"},"observation_digest":"sha256:74ed010e801e3967ad9653f91eb403443f914c89332929228f6c93fc39e4eeda","observation_id":"75377226-b53f-4394-a53e-3dc3e30a3039","resolution":{"observed_at":"2026-08-01T08:08:37.019430Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-31T23:55:32.796527Z","title":"arXiv preprint arXiv:1712.09665 , year=","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.23292","last_updated":"2026-07-25T17:03:33Z","snapshot_observed_at":"2026-08-03T01:45:25.342408Z","submitted_at":"2026-07-25T17:03:33Z","title":"Hiding in Plain Sight: An Effective Physical Adversarial Patch Attack against Visual-Infrared Fused Face Detection","version":1},"reference_index":90,"source":"arxiv_source","source_observed_at":"2026-07-31T23:55:32.796527Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.23292"},"observation_digest":"sha256:72e9b3838838231e6c42ecb932d9216565d2c24ee62bafb4fdc685da46766d72","observation_id":"d562d212-3376-4d0b-a594-66341ec62a47","resolution":{"observed_at":"2026-07-31T23:55:32.796527Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T00:48:43.350891Z","title":"Adversarial patch.arXiv preprint arXiv:1712.09665, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.26121","last_updated":"2026-07-28T17:50:44Z","snapshot_observed_at":"2026-08-01T23:17:18.763159Z","submitted_at":"2026-07-28T17:50:44Z","title":"Towards Trustworthy Embodied Intelligence: A Systems Framework and Graded Trustworthiness Levels","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T00:48:43.350891Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.26121"},"observation_digest":"sha256:70b7da7bfec0195319c6008fe8d2c4b7a315bf0f52ad7fa93229a5204880d842","observation_id":"c1a71bb7-acb2-42dd-8887-c665b3f31a44","resolution":{"observed_at":"2026-08-01T00:48:43.350891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-01T11:35:12.595788Z","title":"Adversarial patch.arXiv preprint arXiv:1712.09665, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.26651","last_updated":"2026-07-29T09:12:30Z","snapshot_observed_at":"2026-08-03T12:49:59.385199Z","submitted_at":"2026-07-29T09:12:30Z","title":"Physically Real-time Infrared Attack against Optical Flow Estimation Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T11:35:12.595788Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.26651"},"observation_digest":"sha256:ce9c2b84b587743f9f771e3f472aba92d520a47ea2a47d319688591e9fe93bd5","observation_id":"2d118d5d-ad7d-456f-a619-64f071586017","resolution":{"observed_at":"2026-08-01T11:35:12.595788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-07-31T14:03:35.397158Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.28226","last_updated":"2026-07-30T13:58:33Z","snapshot_observed_at":"2026-08-03T00:06:49.951833Z","submitted_at":"2026-07-30T13:58:33Z","title":"Security of World-Model-Based Embodied AI: A Lifecycle of Threats, Defenses, and Evaluation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-31T14:03:35.397158Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.28226"},"observation_digest":"sha256:c78b23321d9ffd10ec23d1f3097c5b8e9c0c65fe7634282812013a688e15f481","observation_id":"251a3322-d26c-44e7-a868-d51e6fbb69b9","resolution":{"observed_at":"2026-07-31T14:03:35.397158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-03T06:59:37.774574Z","title":"arXiv preprint arXiv:1712.09665 , year =","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.29445","last_updated":"2026-07-31T14:10:57Z","snapshot_observed_at":"2026-08-04T11:45:31.721026Z","submitted_at":"2026-07-31T14:10:57Z","title":"QR-Structured Thermal Triggers for Targeted Semantic Attacks on Infrared Vision-Language Models","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-03T06:59:37.774574Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2607.29445"},"observation_digest":"sha256:de7315d844c540bf15be0b257efce3f508b2979b49911ea8c21848912e840a37","observation_id":"e2fdfba4-bd8c-48e8-a09d-f99d862e8db3","resolution":{"observed_at":"2026-08-03T06:59:37.774574Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1712.09665/citation-record","integrity":"/paper/1712.09665/integrity","json":"/paper/1712.09665/citation-record.json","paper":"/paper/1712.09665"},"outbound":[],"paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch"},"reference_resolution":{"displayed":0,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":0},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-04T06:34:03.388597+00:00","source":"crossref"},{"observed_at":"2026-08-04T06:33:57.428241+00:00","source":"retraction_watch"}],"thesis":"As of 4 August 2026, this Paper Citation Record lists 0 of 0 outbound references and 47 inbound Pith citation observations for arXiv:1712.09665."}