{"as_of":"2026-08-13T11:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:849671893ad873bb12f5fdbfd4be3c9525a97b56deabb84db54f26c2c4243564","coverage":[{"denominator":8,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":8,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-25T20:00:17.336343Z","state":"measured"},{"denominator":17,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":17,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T19:56:55.087716Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-06-29T06:33:11.928325Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-11T19:56:55.087716Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.06215","last_updated":"2024-12-09T05:21:14Z","snapshot_observed_at":"2026-08-11T19:51:32.926051Z","submitted_at":"2024-12-09T05:21:14Z","title":"A Real-Time Defense Against Object Vanishing Adversarial Patch Attacks for Object Detection in Autonomous Vehicles","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T19:56:55.087716Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2412.06215"},"observation_digest":"sha256:48328e42e49ca12c9c713f1b2dab6c587c755dc60bb434d5d13beb0f414c62ff","observation_id":"5286aad8-93a7-4ade-add9-847343a213ba","resolution":{"observed_at":"2026-08-11T19:56:55.087716Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-11T18:26:06.246727Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.07996","last_updated":"2024-12-11T00:38:35Z","snapshot_observed_at":"2026-08-11T18:17:36.078387Z","submitted_at":"2024-12-11T00:38:35Z","title":"Enhancing Remote Adversarial Patch Attacks on Face Detectors with Tiling and Scaling","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T18:26:06.246727Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2412.07996"},"observation_digest":"sha256:0f6c85cdd47901a9e5645d9cfe9a9d2250daa959e4cc845563f6cc08dd6dd88e","observation_id":"669f71e7-c579-499e-bc1e-12eda7fa4fe9","resolution":{"observed_at":"2026-08-11T18:26:06.246727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-10T20:33:10.744310Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T05:48:38.431059Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.744310Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1980cf4b8e9d1eec834de0e704b2ced45dc060361adda9167f0893eea23f98a6","observation_id":"eb659320-9df5-4893-9bf9-f7b698aa5928","resolution":{"observed_at":"2026-08-10T20:33:10.744310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-10T14:08:15.996663Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2501.15653","last_updated":"2025-01-26T19:29:49Z","snapshot_observed_at":"2026-08-10T14:01:58.907730Z","submitted_at":"2025-01-26T19:29:49Z","title":"A Privacy Enhancing Technique to Evade Detection by Street Video Cameras Without Using Adversarial Accessories","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T14:08:15.996663Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2501.15653"},"observation_digest":"sha256:38d0ca7a1c6b4d51ed4ab778a2a5d564b94eae7e1e22ceef5210cf920711e40c","observation_id":"df1d4b01-26e2-4d1a-8277-5725240a05e8","resolution":{"observed_at":"2026-08-10T14:08:15.996663Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T15:07:54.998845Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-09T12:23:19.491196Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.998845Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:c2ee0043e4763a9a4fea6258047da75025f63448aada00ed3081c6926edceab8","observation_id":"fd2d35d2-676e-4e53-9097-6cbf2ad34c53","resolution":{"observed_at":"2026-08-07T15:07:54.998845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T10:37:17.197850Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-10T04:28:20.810327Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.197850Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e77ba750f206b7326fa9aadc3fff135cd9066fe22cdc4a5fa6076e4050f9cd29","observation_id":"60ff88c6-b72c-4886-9c65-c04e9587339f","resolution":{"observed_at":"2026-08-07T10:37:17.197850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":"1906.11897","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-06-29T06:33:11.928325Z","title":"On physical adversarial patches for object detection","venue":"cs.CV","work_id":"88fb3240-408f-4298-9e26-5332d93f4ffd","year":2019},"citing_paper":{"arxiv_id":"2604.22552","last_updated":"2026-04-24T13:45:11Z","snapshot_observed_at":"2026-08-11T16:31:27.973145Z","submitted_at":"2026-04-24T13:45:11Z","title":"Transferable Physical-World Adversarial Patches Against Pedestrian Detection Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T12:27:14.499810Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2604.22552"},"observation_digest":"sha256:df04939853939e4427df8067d80ad4ec8a2a0cb37de638608c901af6328176cf","observation_id":"5ce63bc5-b3d9-4e4b-959a-fba0044d5a99","resolution":{"observed_at":"2026-05-11T19:16:08.009623Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":"1906.11897","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-06-29T06:33:11.928325Z","title":"On physical adversarial patches for object detection","venue":"cs.CV","work_id":"88fb3240-408f-4298-9e26-5332d93f4ffd","year":2019},"citing_paper":{"arxiv_id":"2605.30578","last_updated":"2026-05-28T21:11:35Z","snapshot_observed_at":"2026-08-07T04:27:26.805532Z","submitted_at":"2026-05-28T21:11:35Z","title":"AdvScene: Rethinking Adversarial Patch Evaluation Through Scene Robustness","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-06-29T06:31:17.023571Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2605.30578"},"observation_digest":"sha256:a478e84b9e15aa698e0006e529e215d2fe3a59885fa3b45fe2ed37456a20a963","observation_id":"942e9bc9-93c5-40d1-b09a-c45c9f8edb9b","resolution":{"observed_at":"2026-06-29T06:33:11.929428Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-01T11:35:13.473525Z","title":"On physical adversarial patches for object detection.arXiv preprint arXiv:1906.11897, 2019","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2607.26651","last_updated":"2026-07-29T09:12:30Z","snapshot_observed_at":"2026-08-06T03:00:39.734052Z","submitted_at":"2026-07-29T09:12:30Z","title":"Physically Real-time Infrared Attack against Optical Flow Estimation Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T11:35:13.473525Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2607.26651"},"observation_digest":"sha256:9eef8942a9512fd8576c6a4892563281fb819d3d84f0bded4e8332e5bb4ac2c4","observation_id":"aef4649b-e040-41b0-922a-8684bc281419","resolution":{"observed_at":"2026-08-01T11:35:13.473525Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/1906.11897/citation-record","integrity":"/paper/1906.11897/integrity","json":"/paper/1906.11897/citation-record.json","paper":"/paper/1906.11897"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1805.12302","last_updated":"2018-05-31T03:18:32Z","snapshot_observed_at":"2026-08-07T20:27:34.836667Z","submitted_at":"2018-05-31T03:18:32Z","title":"Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization","version":1},"cited_work":{"arxiv_id":"1805.12302","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.12302","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial Attacks on Face Detectors using Neural Net based Constrained Optimization","venue":"cs.CV","work_id":"f2de110b-fe06-4aa5-ae1a-156ce2605c75","year":2018},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1805.12302","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:cb1deb47248e093362a7797a2e53f70502bb07b8e1c6f24ed4c23f234b531a67","observation_id":"a6bac5e4-68d5-4b49-b8d5-b91eb77a582f","resolution":{"observed_at":"2026-05-25T20:01:11.283838Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":"1712.09665","doi":"10.48550/arxiv.1712.09665","metadata_source":"pith","pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial Patch","venue":"cs.CV","work_id":"44dd9d6c-be98-4f7e-a541-319a88febb51","year":2017},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:bfcd27fb5be088002f7c68bc98cd6354d06baa10712b802199b6cbde43d971b4","observation_id":"490c5630-4470-43e2-a9e1-4c3988d4edb4","resolution":{"observed_at":"2026-05-25T20:01:11.256286Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.05810","last_updated":"2019-05-01T03:41:44Z","snapshot_observed_at":"2026-07-06T06:33:42.103625Z","submitted_at":"2018-04-16T17:29:43Z","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","version":3},"cited_work":{"arxiv_id":"1804.05810","doi":null,"metadata_source":"pith","pith_arxiv_id":"1804.05810","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detector","venue":"cs.CV","work_id":"2363887d-7cb3-4995-a7a3-cd85c41a2392","year":2018},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1804.05810","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:8eec073d2da4e03390cadd006d3de7857e913d7bf266433ba6017f661c6eba42","observation_id":"b1b2cfd5-d426-4ba2-bfa9-24db34ed9cd4","resolution":{"observed_at":"2026-05-25T20:01:11.251079Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1405.0312","last_updated":"2015-02-21T01:48:49Z","snapshot_observed_at":"2026-07-06T03:42:37.507458Z","submitted_at":"2014-05-01T21:43:32Z","title":"Microsoft COCO: Common Objects in Context","version":3},"cited_work":{"arxiv_id":"1405.0312","doi":"10.48550/arxiv.1405.0312","metadata_source":"pith","pith_arxiv_id":"1405.0312","snapshot_observed_at":"2026-07-10T21:37:42.099108Z","title":"Microsoft COCO: Common Objects in Context","venue":"cs.CV","work_id":"384118d4-9bc9-444c-abfa-3125ee3ca314","year":2014},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1405.0312","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:947e509b927451cfc2545482c4ebd649b8f4cec3973af68fb91a8a92393584da","observation_id":"0299f8e5-5649-4fe3-900d-68ea38ec34d4","resolution":{"observed_at":"2026-05-25T20:01:11.289841Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-01T11:08:07.595689+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-01T11:08:07.595689+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.02299","last_updated":"2019-04-23T16:44:32Z","snapshot_observed_at":"2026-07-06T06:43:22.227602Z","submitted_at":"2018-06-05T17:04:37Z","title":"DPatch: An Adversarial Patch Attack on Object Detectors","version":4},"cited_work":{"arxiv_id":"1806.02299","doi":"10.48550/arxiv.1806.02299","metadata_source":"pith","pith_arxiv_id":"1806.02299","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DPatch: An Adversarial Patch Attack on Object Detectors","venue":"cs.CV","work_id":"e6211bf4-47f4-4106-a9bc-02924aec0ec2","year":2018},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1806.02299","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:2ecca67dfd7dabc5467dba0bba2a8abd9dab1f6f4eb06b95fd00214d5ce5d6f8","observation_id":"05ed3cc2-5b03-400e-b8c1-d922c2961ae3","resolution":{"observed_at":"2026-05-25T20:01:11.261369Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-06T11:09:16.409556Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":"1804.02767","doi":"10.48550/arxiv.1804.02767","metadata_source":"pith","pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"YOLOv3: An Incremental Improvement","venue":"cs.CV","work_id":"d737b3cc-9bd1-43d6-8310-c91e64b510f7","year":2018},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:4442660b1541538265aa882ac22f26240c7ef6bf1e4f2eaa72cee851e75581e4","observation_id":"8b440425-514c-4f5d-b94c-2e8e24d280e0","resolution":{"observed_at":"2026-05-25T20:01:11.240255Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-07-12T23:51:10.097273+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-12T23:51:10.097273+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.00349","last_updated":"2019-04-04T01:14:44Z","snapshot_observed_at":"2026-08-03T13:41:02.368918Z","submitted_at":"2017-12-31T20:17:45Z","title":"A General Framework for Adversarial Examples with Objectives","version":2},"cited_work":{"arxiv_id":"1801.00349","doi":null,"metadata_source":"pith","pith_arxiv_id":"1801.00349","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A General Framework for Adversarial Examples with Objectives","venue":"cs.CV","work_id":"059f35e1-e890-4ec5-a843-fe1835729fa0","year":2017},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1801.00349","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:df4fc40593df013da0fd34a1af22dc3963b0bb74daa1905b806795a6be6f757e","observation_id":"d11e6a62-67a5-4a0c-ae6c-4bb0a73637d2","resolution":{"observed_at":"2026-05-25T20:01:11.236054Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.08653","last_updated":"2019-04-18T09:46:03Z","snapshot_observed_at":"2026-08-10T11:58:05.761235Z","submitted_at":"2019-04-18T09:46:03Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","version":1},"cited_work":{"arxiv_id":"1904.08653","doi":null,"metadata_source":"pith","pith_arxiv_id":"1904.08653","snapshot_observed_at":"2026-07-03T05:47:41.603590Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection","venue":"cs.CV","work_id":"ea8184e5-efe6-4c7d-abb2-a8a9adeaa5d9","year":2019},"citing_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-25T20:00:17.336343Z"},"links":{"cited_paper":"/paper/1904.08653","citing_paper":"/paper/1906.11897"},"observation_digest":"sha256:e8425bb4cf7dad9c2b4abb085cf90b290d1c2f0d843fc0a7d384f95a93ba8c7a","observation_id":"05150443-f511-4329-b7bc-2e8110137d7a","resolution":{"observed_at":"2026-05-25T20:01:11.245912Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection"},"reference_resolution":{"displayed":8,"state_counts":{"malformed_identifier":0,"metadata_mismatch":6,"parse_uncertain":0,"unresolved":0,"verified_exact":2,"verified_fuzzy":0},"total_outbound_references":8},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 8 of 8 outbound references and 9 inbound Pith citation observations for arXiv:1906.11897."}