{"as_of":"2026-08-15T01:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:acd9684a400b1d25ea5198f3fe918a811126a1603e1160ae53add2ad985ef36c","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-25T12:35:57.354399Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T15:18:04.056680Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-11T00:16:15.729268Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.00374","snapshot_observed_at":"2026-08-12T15:18:04.056680Z","title":"Fooling a real car with adversarial traffic signs,","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2411.14424","last_updated":"2024-11-21T18:56:33Z","snapshot_observed_at":"2026-08-14T10:08:32.757977Z","submitted_at":"2024-11-21T18:56:33Z","title":"Learning Fair Robustness via Domain Mixup","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T15:18:04.056680Z"},"links":{"cited_paper":"/paper/1907.00374","citing_paper":"/paper/2411.14424"},"observation_digest":"sha256:c43c9d32312520125e7edb49e1470702393f97dca82ba13c3a6fdfd615e59563","observation_id":"ab8633e3-a99b-4a04-ba70-9d3bd4458943","resolution":{"observed_at":"2026-08-12T15:18:04.056680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"cited_work":{"arxiv_id":"1907.00374","doi":"10.48550/arxiv.1907.00374","metadata_source":"pith","pith_arxiv_id":"1907.00374","snapshot_observed_at":"2026-08-11T00:16:15.729268Z","title":"Fooling a Real Car with Adversarial Traffic Signs","venue":"cs.CR","work_id":"89a5b385-0c67-49d8-a26d-a701d76c0fae","year":2019},"citing_paper":{"arxiv_id":"2501.04527","last_updated":"2025-01-08T14:19:03Z","snapshot_observed_at":"2026-08-14T14:47:35.930413Z","submitted_at":"2025-01-08T14:19:03Z","title":"Towards Fair Class-wise Robustness: Class Optimal Distribution Adversarial Training","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T21:36:57.854698Z"},"links":{"cited_paper":"/paper/1907.00374","citing_paper":"/paper/2501.04527"},"observation_digest":"sha256:bd0e8d97afee7b96657095715614c5ad72b22ef3a5164902304072bb04928151","observation_id":"edd5f0df-0016-4ca2-bb56-5b3efeea8025","resolution":{"observed_at":"2026-08-10T21:36:58.238971Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1907.00374/citation-record","integrity":"/paper/1907.00374/integrity","json":"/paper/1907.00374/citation-record.json","paper":"/paper/1907.00374"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.imavis.2003.10.003","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Lane detection and tracking using B -Snake","venue":"Image and Vision Computing","work_id":"08ca8438-79a1-4c07-b391-fb2e26b46c7b","year":2004},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:1c41b6e5e948fce93d42d45712b18481aaca629e7aefc73c6430d9fb7a009915","observation_id":"b3b8f01e-feee-4a1d-a46b-314cd03c25c3","resolution":{"observed_at":"2026-05-25T12:36:57.627038Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2007.908582","doi":"10.1109/tits.2007.908582","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":null,"venue":"IEEE Transactions on Intelligent Transportation Systems","work_id":"d6dc04a6-0d9b-4726-a27f-2c7efdaf3e90","year":2008},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:a5b0f867fb6cb83a6b983f77c9923fac79447a91b33d1af6a81e4fa6c72d019f","observation_id":"4fa04e2d-161c-4f40-9411-a8043624463e","resolution":{"observed_at":"2026-05-25T12:36:57.618049Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2018.280570","doi":"10.1109/tcsvt.2018.2805704","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ultra -Low Complexity Block-Based Lane Detection and Departure Warning System","venue":"IEEE Transactions on Circuits and Systems for Video Technology","work_id":"c88725b8-2859-4601-8854-63bed171f4da","year":2019},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:4d465ad1e93f97a4069baabaf1d1d65270fdf61c04ba093220065fe8d4abe342","observation_id":"e23cb589-4981-49b5-83da-b46bb43ebbf2","resolution":{"observed_at":"2026-05-25T12:36:57.623472Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2009.516429","doi":"10.1109/ivs.2009.5164298","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Towards reliable traffic sign recognition","venue":null,"work_id":"ac2fedc7-993e-4680-a360-eaa7e57cf666","year":2009},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:ce7146f85f11ab82da5d56108304f996956339d46df516a48cd4326f58b00e2e","observation_id":"70ff1448-58f7-4f97-91e9-4d093355a01a","resolution":{"observed_at":"2026-05-25T12:36:57.602636Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2012.220942","doi":"10.1109/tits.2012.2209421","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Vision -based traffic sign detection and analysis for intelligent driver assistan ce systems: Perspectives and survey","venue":"IEEE Transactions on Intelligent Transportation Systems","work_id":"609abc42-f4af-4c67-bee2-45c347cfeb7f","year":2012},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:8abfc0d2ae9a538225f815a83e178699ef10c3ea8ca3199d51c7dfa51bd693e1","observation_id":"f3aa3a91-3fa9-4d54-a998-dc4a453232b0","resolution":{"observed_at":"2026-05-25T12:36:57.528758Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.neunet.2012.02.016","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"doi: 10.1016/j.neunet.2012.02.016","venue":"Neural Networks","work_id":"1d19d810-db9b-4283-935b-acd59fe0c050","year":2012},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:03ccf8ce10d697b178bee10524f81d9fa419a1f8b5eb575aab654a4db7564948","observation_id":"c671a509-ff3f-4d44-a64c-4aa67a2e516c","resolution":{"observed_at":"2026-05-25T12:36:57.539877Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2011.603358","doi":"10.1109/ijcnn.2011.6033589","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Traffic sign recognition with multi -scale convolutional networks","venue":null,"work_id":"5737af5c-3829-4c4d-a153-2ed511f7e612","year":2011},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:d26bcbc1facdef9b12b80f74597c280ebecffdc849e9612a17b2b2d269bd63ef","observation_id":"143933ab-1907-48de-8a49-4f369a797e41","resolution":{"observed_at":"2026-05-25T12:36:57.596919Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2015.735409","doi":"10.1109/iros.2015.7354095","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Obstacle detection for self -driving cars using only monocular cameras and wheel odometry","venue":null,"work_id":"19bfbb63-00c3-4935-9932-76315076bb57","year":2015},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:23337d6d670053a02f2e21479aba41919f16a4d864aa5d8a96382920dde01484","observation_id":"50c3ff1d-9e92-4c83-901b-fb1db7f44258","resolution":{"observed_at":"2026-05-25T12:36:57.572118Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2017.799584","doi":"10.1109/ivs.2017.7995849","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Detecting unexpected obstacles for self-driving cars: Fusing deep learning and geometric modeling","venue":null,"work_id":"4bead5da-2136-451c-babb-5a8758a87345","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:fdfb98f0ab055fcfb5f151d55a6ab4616656341b3e7e095747d68029807de044","observation_id":"28f2362b-8fd8-454d-89a4-c1da67e28256","resolution":{"observed_at":"2026-05-25T12:36:57.590037Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-12388-8_19","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Enabling pedestrian safety using computer vision techniques: A case study of the 2018 uber inc","venue":"Lecture notes in networks and systems","work_id":"c513ef9a-afb4-48bd-b1a3-ffd3748b4f99","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:58edc7571933abda60250de9d0d6b4ff8f2dcba6447f803165f56d702a85abb4","observation_id":"42bb1a09-6b68-44bb-88f7-1b935d78986a","resolution":{"observed_at":"2026-05-25T12:36:57.544123Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2016.256210","doi":"10.1109/lcomm.2016.2562106","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Energy -Efficient Resource Allocation for LTE -A Networks","venue":"IEEE Communications Letters","work_id":"40980f98-b3da-4a1a-99a7-42e1a57e5b4c","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:6fc7c2a924ede9c2d6bba24a886c47076ba593483e3431e197c320fcde028e1a","observation_id":"e6d8693f-549c-4422-8a7f-d03d87be69c4","resolution":{"observed_at":"2026-05-25T12:36:57.507673Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2016.257106","doi":"10.1109/tiv.2016.2571067","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Looking at Humans in the Age of Self -Driving a nd Highly Automated Vehicles","venue":"IEEE Transactions on Intelligent Vehicles","work_id":"3c45cb54-ded7-4712-a8cb-b5625ca0e64b","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:24d6d1f5b97de7aaa1d5a7ce813365426f30b6e69b6e52ead657d6b1ec4618c6","observation_id":"10d3f3fb-8037-464d-93e4-6d0b69259d10","resolution":{"observed_at":"2026-05-25T12:36:57.550155Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2011.594056","doi":"10.1109/ivs.2011.5940562","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Towards fully autonomous driving: Systems and algorithms","venue":null,"work_id":"71adb7ff-e000-4c13-a9f3-0279ae2ee0f1","year":2011},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:862e1445a7b6f7b45eb8e1164b3bce5c5ce690ac702574e2baed5db09ef8ef91","observation_id":"933fb03b-d144-4485-9164-bd2d8bc62666","resolution":{"observed_at":"2026-05-25T12:36:57.608719Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.01164","last_updated":"2018-09-12T15:57:23Z","snapshot_observed_at":"2026-08-14T19:40:00.112956Z","submitted_at":"2018-03-03T13:46:40Z","title":"The History Began from AlexNet: A Comprehensive Survey on Deep Learning Approaches","version":2},"cited_work":{"arxiv_id":"1803.01164","doi":"10.48550/arxiv.1803.01164","metadata_source":"pith","pith_arxiv_id":"1803.01164","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"The History Began from AlexNet: A Comprehensive Survey on Deep Learning Approaches","venue":"cs.CV","work_id":"0eb20234-760d-4bf1-a774-4c3ad0618576","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1803.01164","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:05db59bb6221c58490f56a9eff3d4d02838c521b9d9acff888bc430d332a61db","observation_id":"f5c1037a-385e-4249-89ba-d0b027de1dc6","resolution":{"observed_at":"2026-05-25T12:36:57.761073Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":"1312.6199","doi":"10.48550/arxiv.1312.6199","metadata_source":"pith","pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Intriguing properties of neural networks","venue":"cs.CV","work_id":"7bcd9f41-780c-4b4b-9a08-830d4177cdd8","year":2013},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:fe6822638a228d36bab67c02b55363caeffc609adfb50e42960ad088b685e768","observation_id":"bf81adb6-facb-402a-9cc4-277404d531f6","resolution":{"observed_at":"2026-05-25T12:36:57.774984Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2018.280738","doi":"10.1109/access.2018.2807385","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey","venue":"IEEE Access","work_id":"0ce8412d-2ee2-451b-bcca-731d726c98d4","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:85729d9cb232e39c8a28aa5e16fb5e2723c520fe9e93afaebfb2d84336043342","observation_id":"7d3ea564-4d4f-4ecd-ba78-14408f302867","resolution":{"observed_at":"2026-05-25T12:36:57.561452Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp.2017.49","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":null,"work_id":"636dd13d-d032-44e8-bb66-b24a1332ab46","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:462dcb4fed25a2e4b770242fb4fb3429413fc061846f2de6046bdef4e3b6720c","observation_id":"2d33b93a-c88a-4646-ba0e-4fc89fb8aa10","resolution":{"observed_at":"2026-05-25T12:36:57.516800Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-05-25T06:54:02.521646+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-25T06:54:02.521646+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/cvpr.2017.17","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Universal adversarial per turbations","venue":null,"work_id":"e7a4f9ef-bb46-476c-9fc5-a4301f5e6167","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:c7f0be81ea0e8c3a268a09bac8768fd4c1f9f8e90454480869510ee519a95b4b","observation_id":"26e871e8-388a-411b-a283-9b1f5651a71b","resolution":{"observed_at":"2026-05-25T12:36:57.521251Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-15T19:51:27.911015+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-15T19:51:27.911015+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/cvpr.2016.282","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"DeepFool: A Simple and Accurate Method to Fool Deep Neural Networks","venue":null,"work_id":"c6c410bf-02f1-4dc1-89af-e8987f589345","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:d99dc298ede242e6419834eeb1ee2f3a852e134f7fb69a4b7cfc752d85f9ca46","observation_id":"3b97006d-0d07-4877-a25e-ce332f4323a6","resolution":{"observed_at":"2026-05-25T12:36:57.565588Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.05373","last_updated":"2017-07-17T19:11:08Z","snapshot_observed_at":"2026-08-14T20:47:05.887494Z","submitted_at":"2017-07-17T19:11:08Z","title":"Houdini: Fooling Deep Structured Prediction Models","version":1},"cited_work":{"arxiv_id":"1707.05373","doi":null,"metadata_source":"pith","pith_arxiv_id":"1707.05373","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Houdini: Fooling Deep Structured Prediction Models","venue":"stat.ML","work_id":"8d5378ae-3100-4c99-ba61-0c2c6e3a2bb4","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1707.05373","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:4f80e42e8c94bd385fb4f6bf590bbf273993df061869d9278f5644a6ebe42970","observation_id":"fb0e061b-f54e-4089-a7a3-85b810dd48dd","resolution":{"observed_at":"2026-05-25T12:36:57.832340Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Exploring the Space of Black-box Attacks on Deep Neural Networks","venue":null,"work_id":"d2713f8e-5a48-4b91-a77b-7e20f333cbbc","year":null},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:250d0d165dc59fbd4c8c4e6947d08042c33a9fa28e595665e49977d08725574e","observation_id":"7cec7157-d4f4-411e-b95c-54d742485c42","resolution":{"observed_at":"2026-05-25T12:36:58.251541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09491","last_updated":"2017-12-27T04:39:02Z","snapshot_observed_at":"2026-08-14T19:59:55.520619Z","submitted_at":"2017-12-27T04:39:02Z","title":"Exploring the Space of Black-box Attacks on Deep Neural Networks","version":1},"cited_work":{"arxiv_id":"1712.09491","doi":null,"metadata_source":"pith","pith_arxiv_id":"1712.09491","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Exploring the Space of Black-box Attacks on Deep Neural Networks","venue":"cs.LG","work_id":"e3225465-9abf-46cf-be60-f4338bed8240","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1712.09491","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:5a9718069f86244a4fa92b74a57bb2708e7529169f83f40d6b59feac143e1cfc","observation_id":"f2cf7244-7174-4e5e-8f6f-7c3ae3403364","resolution":{"observed_at":"2026-05-25T12:36:57.770648Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-14T21:56:04.408017Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":"1605.07277","doi":null,"metadata_source":"pith","pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-07-10T20:07:33.433424Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","venue":"cs.CR","work_id":"99873b2b-3bd9-4521-9025-ca2d25bab2c7","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:f14c563c115697300a0abfb8c6f82511b86908c50f6df55a4c5f2f553f23491f","observation_id":"866217d9-9530-4d43-a82c-fb4625a60a21","resolution":{"observed_at":"2026-05-25T12:36:57.751335Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03453","last_updated":"2017-05-23T18:14:30Z","snapshot_observed_at":"2026-08-14T21:07:11.955347Z","submitted_at":"2017-04-11T17:59:12Z","title":"The Space of Transferable Adversarial Examples","version":2},"cited_work":{"arxiv_id":"1704.03453","doi":null,"metadata_source":"pith","pith_arxiv_id":"1704.03453","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The Space of Transferable Adversarial Examples","venue":"stat.ML","work_id":"178c76d7-e76a-44a0-bc5b-5692e305cfe2","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1704.03453","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:d43e61eed74fdb2519494584d78d11314baeabd1272b8b1e572fae274cbf5c2b","observation_id":"e2e9f89d-bc27-46f8-85bb-33ef076c20ac","resolution":{"observed_at":"2026-05-25T12:36:57.800146Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","venue":null,"work_id":"e03543ad-93ed-4393-a877-d253ddab0236","year":null},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:6f41af0345ed3200535982b499bcfbd6c8d879fd2e8d4605b58d4ee6f734f475","observation_id":"d57d25ad-caf4-4b04-92b0-b3e128b86a8f","resolution":{"observed_at":"2026-05-25T12:36:58.247009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-14T21:31:19.477872Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":"1611.02770","doi":null,"metadata_source":"pith","pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-07-04T15:09:54.585609Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","venue":"cs.LG","work_id":"3f7acc19-a4b7-4adf-a25d-3dfdb30ef80f","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:1de5d1d37cf3779f129725d072e74614cc857dad10a1ee532004ccfebbb9b342","observation_id":"d5b3eb2f-5e18-46e0-b607-070746361e74","resolution":{"observed_at":"2026-05-25T12:36:57.755749Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2018.00099","doi":"10.1109/cvpr.2018.00099","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"On the Robustness of Semantic Segmentation Models to Adversarial Attacks","venue":null,"work_id":"9084551d-d4fa-4281-a215-d564d63447d3","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:461f89d884450b18f1f8a52b2d529d4994ee1a86591a48ed439e85165d8361bd","observation_id":"e3917bd4-df42-4ab6-96a4-8d1892587cc6","resolution":{"observed_at":"2026-05-25T12:36:57.578550Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.07769","last_updated":"2018-10-05T18:07:23Z","snapshot_observed_at":"2026-08-14T18:49:38.502555Z","submitted_at":"2018-07-20T10:14:27Z","title":"Physical Adversarial Examples for Object Detectors","version":2},"cited_work":{"arxiv_id":"1807.07769","doi":null,"metadata_source":"pith","pith_arxiv_id":"1807.07769","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Physical Adversarial Examples for Object Detectors","venue":"cs.CR","work_id":"004a4577-a96e-4c25-b031-3b2fa06f2789","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1807.07769","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:c5e148bc8b4635e2dabb5c6b0d53e79922af3eb304f71bac81858e3d6aedaef4","observation_id":"8a01a8b5-46d2-4188-a857-dd0a6285f666","resolution":{"observed_at":"2026-05-25T12:36:57.828035Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-14T20:45:49.587140Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1707.07397","doi":null,"metadata_source":"pith","pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-07-03T05:47:41.603083Z","title":"Synthesizing Robust Adversarial Examples","venue":"cs.CV","work_id":"c9de6511-5de4-41b5-9363-dfba7173af7a","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:b9e563a2a8ba7562d35eab5e577166c8e8d387aed99c0b8073fd2d3f08683de6","observation_id":"61332dee-7415-473d-8e02-37e6a7d315a1","resolution":{"observed_at":"2026-05-25T12:36:57.793458Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06430","last_updated":"2018-05-31T20:05:27Z","snapshot_observed_at":"2026-08-14T19:44:46.968870Z","submitted_at":"2018-02-18T19:39:28Z","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","version":3},"cited_work":{"arxiv_id":"1802.06430","doi":null,"metadata_source":"pith","pith_arxiv_id":"1802.06430","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","venue":"cs.CR","work_id":"3a321aeb-80d5-478e-ac8c-05690dc6b88a","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1802.06430","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:a325c82a7db45600a7cee64b13d607692baf2dcc9ca5d702d4a600566260a297","observation_id":"0e777d5b-530f-4726-8fee-e07be08a94fc","resolution":{"observed_at":"2026-05-25T12:36:57.824018Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1412.6572","doi":"10.48550/arxiv.1412.6572","metadata_source":"pith","pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Explaining and Harnessing Adversarial Examples","venue":"stat.ML","work_id":"2cedf8f6-7539-4c49-8136-f42a20487146","year":2014},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:bad22e1373876a33e77106e3fcdb1e8bb707f293b22c9abc3541f1777431c7db","observation_id":"ccca8cfe-d25c-4ed1-bba2-6a6f90ed3616","resolution":{"observed_at":"2026-05-25T12:36:57.804361Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":"1611.01236","doi":null,"metadata_source":"pith","pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-07-04T03:29:29.370395Z","title":"Adversarial Machine Learning at Scale","venue":"cs.CV","work_id":"42a7a06f-98b6-4441-bc08-83c8e9a45283","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:064284e27aacdeba954057976bef856be57cac05e3546586f12a60c9e4f26d5a","observation_id":"bd116884-3f75-4b9b-93cf-5ce3ebd484e7","resolution":{"observed_at":"2026-05-25T12:36:57.783519Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03976","last_updated":"2018-06-27T04:52:47Z","snapshot_observed_at":"2026-08-14T21:06:57.212832Z","submitted_at":"2017-04-13T02:45:27Z","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","version":2},"cited_work":{"arxiv_id":"1704.03976","doi":null,"metadata_source":"pith","pith_arxiv_id":"1704.03976","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Virtual Adversarial Training: A Regularization Method for Supervised and Semi-Supervised Learning","venue":"stat.ML","work_id":"5ec06cd6-64fb-4243-8f3c-98738b83f9da","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1704.03976","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:f55e1bda471bc7d5fd2075cc4dbbb2bf943eb9af688bf3b449dfadbe3ef97a52","observation_id":"a5b6a5e4-d646-4568-88ed-465ae1fa464b","resolution":{"observed_at":"2026-05-25T12:36:57.815266Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.03034","last_updated":"2016-01-16T01:44:18Z","snapshot_observed_at":"2026-08-14T22:24:06.829927Z","submitted_at":"2015-11-10T09:44:33Z","title":"Learning with a Strong Adversary","version":6},"cited_work":{"arxiv_id":"1511.03034","doi":null,"metadata_source":"pith","pith_arxiv_id":"1511.03034","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Learning with a Strong Adversary","venue":"cs.LG","work_id":"5d3fe9ca-12c5-4fa8-9fdf-0502a3517139","year":2015},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1511.03034","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:b56dfaa0e93b57e17159b52276d1d08a235ef0ec674126f07f4de864e065ad21","observation_id":"5606a7e5-80f7-4f8c-90b0-5e01ba77337e","resolution":{"observed_at":"2026-05-25T12:36:57.764911Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1016/j.neucom.2018.04.027","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Understanding Adversarial Training: Increasing Local Stability of Neural Nets through Robust Optimization","venue":"Neurocomputing","work_id":"78e9a465-a8dd-4414-b437-3e017d651df0","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:bd7ec59fd40a85414228d1e4a84991e94ae2d5b51a0e95d37622e234538096c1","observation_id":"99f99213-cc03-48b9-811f-a3dc6298d3c3","resolution":{"observed_at":"2026-05-25T12:36:57.612330Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":"1705.07204","doi":"10.48550/arxiv.1705.07204","metadata_source":"arxiv_reference","pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Ensemble Adversarial Training: Attacks and Defenses","venue":"arXiv (Cornell University)","work_id":"4413e6f2-14c8-4676-b759-21878dff7ef4","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:d9d72b67bd42cc3fce03098144588670a0d87daeb0b57fc5211a18d194448470","observation_id":"4e23e29b-9774-4a26-b6b8-1feb8b8234c0","resolution":{"observed_at":"2026-05-25T12:36:57.742702Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp.2016.41","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks","venue":null,"work_id":"bf2a3836-8328-4f6b-983d-d167ae4d5bbd","year":2016},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:7c912da8efb6228d42ffc21d2fb9479250294d1bd7d8f4b76ef9d5d28a2ffbe3","observation_id":"e58e4d20-ff31-4032-beef-13c143bc6ec0","resolution":{"observed_at":"2026-05-25T12:36:57.582967Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":"1706.06083","doi":"10.48550/arxiv.1706.06083","metadata_source":"pith","pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","venue":"stat.ML","work_id":"b20a57fa-4b7d-40ec-8b6a-ce48234630de","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:e77ad3e0b4f82b4e306d7e44310a97b0f8d5353c5b3ecd94f7bf0bb74b94ca5f","observation_id":"bb5d84bd-0c60-4059-85a1-bcc21f19f18e","resolution":{"observed_at":"2026-05-25T12:36:57.787582Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8572.314044","doi":"10.1145/3128572.3140442","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Adversarial Examples Are Not Easily Detected","venue":null,"work_id":"33da68d1-6d34-4d18-94b5-fb9b0cd941e2","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:58e96696d535e39f50e9bdfc9e3496f0953d1fded784fbbf383d187095bc25b0","observation_id":"5966a8d0-d674-4307-9dfd-1b4b4ba34534","resolution":{"observed_at":"2026-05-25T12:36:57.535597Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.06292","last_updated":"2016-01-19T18:15:28Z","snapshot_observed_at":"2026-08-14T22:22:11.522970Z","submitted_at":"2015-11-19T18:35:07Z","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1511.06292","doi":null,"metadata_source":"pith","pith_arxiv_id":"1511.06292","snapshot_observed_at":"2026-07-09T12:56:14.846502Z","title":"Foveation-based Mechanisms Alleviate Adversarial Examples","venue":"cs.LG","work_id":"1897e39e-b836-4c88-89a5-c01823ba4009","year":2015},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1511.06292","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:87b454eda2bd1406b6f04c40cf74151b2044fd606999c5f990b06c1d118a9649","observation_id":"717fd24f-2b54-431c-87c3-9f1b9ceffeb2","resolution":{"observed_at":"2026-05-25T12:36:57.737908Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.03501","last_updated":"2017-07-12T00:09:50Z","snapshot_observed_at":"2026-08-14T20:48:15.341276Z","submitted_at":"2017-07-12T00:09:50Z","title":"NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles","version":1},"cited_work":{"arxiv_id":"1707.03501","doi":null,"metadata_source":"pith","pith_arxiv_id":"1707.03501","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"NO Need to Worry about Adversarial Examples in Object Detection in Autonomous Vehicles","venue":"cs.CV","work_id":"9388c9a9-b651-4c06-bc12-626bf46c8d74","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1707.03501","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:e123095542225ed5421b191983eb0b673793077df30484c891e5bdea666d0da4","observation_id":"a776c135-257b-4d12-b644-b944812a6c9a","resolution":{"observed_at":"2026-05-25T12:36:57.809973Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/cvpr.2017.243","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Densely connected convolutional networks","venue":null,"work_id":"2199d436-33c2-4b30-9d6f-ce9b8904101e","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:aaa424f69832eec39d41835362d8a1a046e062381ce14ae03091c7f212588a6d","observation_id":"4a2674e2-0e06-42ab-9083-9a89905fa6ec","resolution":{"observed_at":"2026-05-25T12:36:57.513029Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-07-11T13:20:28.142461+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-11T13:20:28.142461+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust Physical-World Attacks on Deep Learning Models","venue":null,"work_id":"d63c4f3f-cab6-4e30-b1c4-30929aac881b","year":null},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:6f44b75cdd0b0f94c69a534c6f8539047743bed53f3f6cf13e4267e20d75a28a","observation_id":"16b85ac4-8464-4b52-ad28-7f7476c71d77","resolution":{"observed_at":"2026-05-25T12:36:58.242720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-14T20:44:49.961329Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":"1707.08945","doi":"10.48550/arxiv.1707.08945","metadata_source":"pith","pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Robust Physical-World Attacks on Deep Learning Models","venue":"cs.CR","work_id":"35af1ad0-c1cc-4087-886e-d31fdbac5225","year":2017},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:4ae4952fc592c4790abf5ea55980e8fa1c3c5e25da1e8cd7c6362e9ad5c587a1","observation_id":"728c894e-ec04-42c0-b4ee-a4f4301fca3c","resolution":{"observed_at":"2026-05-25T12:36:57.746855Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-030-10925-7_4","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ShapeShifter: Robust physical adversarial attack on faster R-CNN object detector","venue":"Lecture notes in computer science","work_id":"4237a840-1fdc-466e-8178-a71ebcbc023e","year":2019},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:1da0488bd9ff13839a23c45f5bcd7f5d79110c98d19ea60dfdd35d0d76ab269f","observation_id":"af10a902-9f76-4c07-ad89-e507dfd31fbf","resolution":{"observed_at":"2026-05-25T12:36:57.555263Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.10217","last_updated":"2018-07-25T02:33:41Z","snapshot_observed_at":"2026-08-14T19:41:23.453283Z","submitted_at":"2018-02-28T00:26:44Z","title":"Investigating Human Priors for Playing Video Games","version":3},"cited_work":{"arxiv_id":"1802.10217","doi":"10.48550/arxiv.1802.10217","metadata_source":"pith","pith_arxiv_id":"1802.10217","snapshot_observed_at":"2026-08-05T02:49:54.815029Z","title":"Investigating Human Priors for Playing Video Games","venue":"cs.AI","work_id":"551a84f3-ebec-49fb-93ed-3a3a3fe42cfd","year":2018},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"cited_paper":"/paper/1802.10217","citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:3dd983ae23cc3bb701ceba15c5d673bed74dc7cd03d0a87276a3f0e23f9cdc5c","observation_id":"f3735ea3-3c84-4beb-a682-09881cb28023","resolution":{"observed_at":"2026-05-25T12:36:57.820013Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Experimental Security Research of Tesla Autopilot .; 2019","venue":null,"work_id":"04e2006d-0556-4053-b432-703754018949","year":2019},"citing_paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-25T12:35:57.354399Z"},"links":{"citing_paper":"/paper/1907.00374"},"observation_digest":"sha256:86ae57b9855aaeffe8b46279cd48c8f9750554ecbeb4721bef830218aa61e5a8","observation_id":"2b8aad64-a182-422f-adff-657353350e6d","resolution":{"observed_at":"2026-05-25T12:36:58.238772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1907.00374","last_updated":"2019-06-30T12:42:09Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T03:49:55.489085Z","submitted_at":"2019-06-30T12:42:09Z","title":"Fooling a Real Car with Adversarial Traffic Signs"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":42,"verified_fuzzy":4},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 2 inbound Pith citation observations for arXiv:1907.00374."}