{"as_of":"2026-08-11T06:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:257040701e6c0127b7341a5588944556dce5edd86b02623f26dc5d17d9aeee0f","coverage":[{"denominator":17,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":17,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-24T21:26:53.670675Z","state":"measured"},{"denominator":18,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":18,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T13:39:29.511016Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-10T13:39:29.927714Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"cited_work":{"arxiv_id":"1907.06291","doi":null,"metadata_source":"pith","pith_arxiv_id":"1907.06291","snapshot_observed_at":"2026-08-10T13:39:29.927714Z","title":"Measuring the Transferability of Adversarial Examples","venue":"cs.LG","work_id":"7c91d708-e0ca-4798-937d-fca5a66eaa66","year":2019},"citing_paper":{"arxiv_id":"2501.18629","last_updated":"2025-01-27T17:07:00Z","snapshot_observed_at":"2026-08-10T18:26:31.281388Z","submitted_at":"2025-01-27T17:07:00Z","title":"The Relationship Between Network Similarity and Transferability of Adversarial Attacks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T13:39:29.511016Z"},"links":{"cited_paper":"/paper/1907.06291","citing_paper":"/paper/2501.18629"},"observation_digest":"sha256:3a649aa1c5306cd90d42912b78aa9d2a774e1e89b9e18dc43816696e30b281ce","observation_id":"5b497488-5429-4674-87d4-09aa7a119f07","resolution":{"observed_at":"2026-08-10T13:39:29.930963Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1907.06291/citation-record","integrity":"/paper/1907.06291/integrity","json":"/paper/1907.06291/citation-record.json","paper":"/paper/1907.06291"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-07-06T05:07:10.046451Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:bdeb27159da522b391c14b13d40ffc8bc328d0927f1d7977054ba190fcab31fb","observation_id":"dba6a7b7-a9b3-4b1c-8f88-39473116759f","resolution":{"observed_at":"2026-05-24T21:29:57.996511Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1610.02357","last_updated":"2017-04-04T18:40:27Z","snapshot_observed_at":"2026-08-02T03:45:46.211131Z","submitted_at":"2016-10-07T17:51:51Z","title":"Xception: Deep Learning with Depthwise Separable Convolutions","version":3},"cited_work":{"arxiv_id":"1610.02357","doi":"10.48550/arxiv.1610.02357","metadata_source":"pith","pith_arxiv_id":"1610.02357","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Xception: Deep Learning with Depthwise Separable Convolutions","venue":"cs.CV","work_id":"5e38a2cc-82da-4330-875e-a77799981f0b","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1610.02357","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:888b7d6d6ab56748b84ffe6654e68195a27b7d22e8e32402a1afbbe9ef1518b4","observation_id":"7eae53db-344c-487f-b59c-f293495657f7","resolution":{"observed_at":"2026-05-24T21:29:57.976807Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.05296","last_updated":"2019-02-04T06:03:22Z","snapshot_observed_at":"2026-08-10T08:46:28.017860Z","submitted_at":"2018-04-15T02:33:08Z","title":"Adversarial Attacks Against Medical Deep Learning Systems","version":3},"cited_work":{"arxiv_id":"1804.05296","doi":null,"metadata_source":"pith","pith_arxiv_id":"1804.05296","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial Attacks Against Medical Deep Learning Systems","venue":"cs.CR","work_id":"44bd0dac-cb0f-49e1-a0ff-e601fe049398","year":2018},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1804.05296","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:1547b6388b1816d22a8e6d5fa73e7e4220fffbeb805429e90557ee56c633b923","observation_id":"355c8901-f124-4507-9efd-6eea63aac39d","resolution":{"observed_at":"2026-05-24T21:29:57.955681Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1512.03385","last_updated":"2015-12-10T19:51:55Z","snapshot_observed_at":"2026-07-06T04:39:28.429064Z","submitted_at":"2015-12-10T19:51:55Z","title":"Deep Residual Learning for Image Recognition","version":1},"cited_work":{"arxiv_id":"1512.03385","doi":"10.48550/arxiv.1512.03385","metadata_source":"pith","pith_arxiv_id":"1512.03385","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Deep Residual Learning for Image Recognition","venue":"cs.CV","work_id":"ae9e5671-23e8-4853-82a4-699b5b8dd639","year":2015},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1512.03385","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:d997c6ea62847c4b3d75eabef9c667a0f4ce3b581ac2d94f0a309080e2581fa2","observation_id":"29072e6c-778a-4494-b0c1-91297212fb79","resolution":{"observed_at":"2026-05-24T21:29:58.006569Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-02T01:38:25.811068+00:00","source":"crossref_status_cache"},{"observed_at":"2026-08-02T01:38:25.811068+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1502.03167","last_updated":"2015-03-02T20:44:12Z","snapshot_observed_at":"2026-07-06T04:08:54.419941Z","submitted_at":"2015-02-11T01:44:18Z","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","version":3},"cited_work":{"arxiv_id":"1502.03167","doi":"10.48550/arxiv.1502.03167","metadata_source":"pith","pith_arxiv_id":"1502.03167","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Batch Normalization: Accelerating Deep Network Training by Reducing Internal Covariate Shift","venue":"cs.LG","work_id":"05484516-8937-4cdf-9176-7f8329ef0221","year":2015},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1502.03167","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:28d0b32ada7c76cc07e91a8d8457a51429fe0e1c89b20d777e52f0b1cf5e5504","observation_id":"94d8dc47-8639-48e9-a7ee-0986d7dd2e7d","resolution":{"observed_at":"2026-05-24T21:29:57.950418Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-07-13T20:21:08.990281+00:00","source":"crossref_status_cache"},{"observed_at":"2026-07-13T20:21:08.990281+00:00","source":"openalex_status_cache"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":"1607.02533","doi":null,"metadata_source":"pith","pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-07-11T01:07:45.362030Z","title":"Adversarial examples in the physical world","venue":"cs.CV","work_id":"c890967e-b6c2-4aa1-b530-f465c7d8b531","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:e61e921f78ae68ec86b4b0c79dcbec6f04550b85b9685012132e521ccd4079d0","observation_id":"0d3b94e0-2ba0-4c74-b1cd-217de78e68ed","resolution":{"observed_at":"2026-05-24T21:29:57.990904Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6469.69187","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ISBN 3-540- 66722-9","venue":null,"work_id":"aa0f836c-eba2-498d-9bd7-4f1ee627232a","year":null},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:131f09a91745157f54b10a28fcda04f5089084e074adf1ab2eacf140930d9f81","observation_id":"93093bc0-fe99-48f1-90f9-c1f96c4117dc","resolution":{"observed_at":"2026-05-24T21:29:57.966907Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.4400","last_updated":"2014-03-04T05:15:42Z","snapshot_observed_at":"2026-08-02T17:47:13.893077Z","submitted_at":"2013-12-16T15:34:13Z","title":"Network In Network","version":3},"cited_work":{"arxiv_id":"1312.4400","doi":null,"metadata_source":"pith","pith_arxiv_id":"1312.4400","snapshot_observed_at":"2026-07-02T08:06:47.826842Z","title":"Network In Network","venue":"cs.NE","work_id":"d0d875f6-6330-48b0-8f92-300cbfb5d81a","year":2013},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1312.4400","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:8245745811e071af97c695f63cc61287b164a9b1ef594308de163b73383f7b9c","observation_id":"6f64f3b1-dc5a-478c-bd1c-c1aff37ba2ac","resolution":{"observed_at":"2026-05-24T21:29:57.985763Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.01069","last_updated":"2019-11-15T15:05:57Z","snapshot_observed_at":"2026-08-10T13:43:07.043677Z","submitted_at":"2018-07-03T10:25:26Z","title":"Adversarial Robustness Toolbox v1.0.0","version":4},"cited_work":{"arxiv_id":"1807.01069","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1807.01069","snapshot_observed_at":"2026-07-04T07:09:38.818399Z","title":"Papernot, N., McDaniel, P","venue":null,"work_id":"31221c2e-8db6-43d3-9f86-b054846ea442","year":2018},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1807.01069","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:795371235e81490b84913196dd5ca501f56142e0ada704df73b2e22479d1dc58","observation_id":"f5ea9337-a985-4565-8914-c733db3353a7","resolution":{"observed_at":"2026-05-24T21:29:57.928299Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1511.04508","last_updated":"2016-03-14T13:08:09Z","snapshot_observed_at":"2026-08-04T04:27:20.640318Z","submitted_at":"2015-11-14T04:51:04Z","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","version":2},"cited_work":{"arxiv_id":"1511.04508","doi":null,"metadata_source":"pith","pith_arxiv_id":"1511.04508","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Distillation as a Defense to Adversarial Perturbations against Deep Neural Networks","venue":"cs.CR","work_id":"7236dfe2-2720-4476-9462-cd0b63f0e9b6","year":2015},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1511.04508","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:a0cd1375f8bc027cd2008b6520a2e9234c0efd930fc149a584c13555d049c7ab","observation_id":"5314feab-37c8-4d4e-b21b-d72c5f7d22a9","resolution":{"observed_at":"2026-05-24T21:29:57.938585Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1606.03498","last_updated":"2016-06-10T22:53:35Z","snapshot_observed_at":"2026-07-06T04:59:35.089671Z","submitted_at":"2016-06-10T22:53:35Z","title":"Improved Techniques for Training GANs","version":1},"cited_work":{"arxiv_id":"1606.03498","doi":"10.48550/arxiv.1606.03498","metadata_source":"pith","pith_arxiv_id":"1606.03498","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Improved Techniques for Training GANs","venue":"cs.LG","work_id":"dfc09c9b-e1b2-4d18-8405-6d4ee87a2dd6","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1606.03498","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:e5504d78f4bdc026e9df4463d370df37340304709dce89d41b1bba01678c5095","observation_id":"5b144a29-ea92-4145-85c8-40b0493b9b0f","resolution":{"observed_at":"2026-05-24T21:29:58.001785Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1808.01688","last_updated":"2019-03-04T00:35:26Z","snapshot_observed_at":"2026-07-06T06:54:07.751220Z","submitted_at":"2018-08-05T21:43:01Z","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","version":2},"cited_work":{"arxiv_id":"1808.01688","doi":null,"metadata_source":"pith","pith_arxiv_id":"1808.01688","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Is Robustness the Cost of Accuracy? -- A Comprehensive Study on the Robustness of 18 Deep Image Classification Models","venue":"cs.CV","work_id":"30b100de-34bf-4726-ad2a-7b2372443c00","year":2018},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1808.01688","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:63957024a3712d3e7d008851441a09dd80c9e1a5431e56a932535c76efc9c695","observation_id":"67941ab3-72f0-4b3d-8ed8-5da5f379be25","resolution":{"observed_at":"2026-05-24T21:29:57.961463Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-09T04:06:10.432152Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":"1710.08864","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"CoRR abs/1710.08864 (2017), http://arxiv.org/abs/1710.08864","venue":null,"work_id":"71c2298c-c0e4-4457-8c21-1f5cce3ece54","year":2017},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:0689a709b5feaca6a2e6709ec7d12d2f34040263acd9361ea565aef1911a8b92","observation_id":"ed6e61e7-0b8c-4a98-8041-0a4028647375","resolution":{"observed_at":"2026-05-24T21:29:57.933911Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.4842","last_updated":"2014-09-17T01:03:11Z","snapshot_observed_at":"2026-08-10T12:32:10.061920Z","submitted_at":"2014-09-17T01:03:11Z","title":"Going Deeper with Convolutions","version":1},"cited_work":{"arxiv_id":"1409.4842","doi":"10.48550/arxiv.1409.4842","metadata_source":"pith","pith_arxiv_id":"1409.4842","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Going Deeper with Convolutions","venue":"cs.CV","work_id":"bfbafb27-ff94-46ae-98e9-35389fe858b6","year":2014},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1409.4842","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:f8b269d6cf9e4aa30174cbec6183c2ea0de3453f185ac3a0fc41df0ee78930f2","observation_id":"d9cafcea-973f-4627-984b-5be9ce834d74","resolution":{"observed_at":"2026-05-24T21:29:57.946159Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1512.00567","last_updated":"2015-12-11T20:27:50Z","snapshot_observed_at":"2026-08-06T16:02:58.892200Z","submitted_at":"2015-12-02T03:44:38Z","title":"Rethinking the Inception Architecture for Computer Vision","version":3},"cited_work":{"arxiv_id":"1512.00567","doi":"10.48550/arxiv.1512.00567","metadata_source":"pith","pith_arxiv_id":"1512.00567","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Rethinking the Inception Architecture for Computer Vision","venue":"cs.CV","work_id":"f519aa2e-7c8a-41ee-a7b7-f04a07e4fdab","year":2015},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1512.00567","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:b2966356f96bf30032cb11d4062170a3801a7963e814b443ec6a0f9918fcf7bd","observation_id":"0ffe6d8e-4b75-411b-86bb-b9e08b90f701","resolution":{"observed_at":"2026-05-24T21:29:57.981198Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1602.07261","last_updated":"2016-08-23T16:42:29Z","snapshot_observed_at":"2026-07-06T04:47:06.608643Z","submitted_at":"2016-02-23T18:44:39Z","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","version":2},"cited_work":{"arxiv_id":"1602.07261","doi":"10.48550/arxiv.1602.07261","metadata_source":"pith","pith_arxiv_id":"1602.07261","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learning","venue":"cs.CV","work_id":"3933dddd-4e9e-4763-a816-7ab61d9d1402","year":2016},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"cited_paper":"/paper/1602.07261","citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:5a09bf28e8461ade650881930ede4d9eac371eada64ed2c16f23ac9e5ab85e8a","observation_id":"e03d2200-f6c6-46c5-bdf7-daf395d4b50d","resolution":{"observed_at":"2026-05-24T21:29:57.972298Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2003.819861","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T13:47:05.725412Z","title":"Bovik, Hamid R","venue":null,"work_id":"a9ba8a9e-c00a-45ff-9d73-a0ae0919d283","year":2004},"citing_paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-24T21:26:53.670675Z"},"links":{"citing_paper":"/paper/1907.06291"},"observation_digest":"sha256:d0fcf0008fcef6c89189fb9ced4b5fe3b9fda30e9cab7e1afd156f01d6cfc9c9","observation_id":"fe5343ec-f217-4b37-ac51-64825ca98511","resolution":{"observed_at":"2026-05-24T21:29:57.699068Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1907.06291","last_updated":"2019-07-14T22:20:58Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-05T22:23:54.509343Z","submitted_at":"2019-07-14T22:20:58Z","title":"Measuring the Transferability of Adversarial Examples"},"reference_resolution":{"displayed":17,"state_counts":{"malformed_identifier":0,"metadata_mismatch":9,"parse_uncertain":0,"unresolved":0,"verified_exact":8,"verified_fuzzy":0},"total_outbound_references":17},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 17 of 17 outbound references and 1 inbound Pith citation observation for arXiv:1907.06291."}