{"as_of":"2026-08-15T23:47:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b939ea3444fb75528faa884ec7a7abd90dfe819310a044e6aa56ff33c49aa7bf","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T15:11:10.285502Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.01667/citation-record","integrity":"/paper/1908.01667/integrity","json":"/paper/1908.01667/citation-record.json","paper":"/paper/1908.01667"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1804.07729","last_updated":"2019-01-11T15:42:59Z","snapshot_observed_at":"2026-08-14T19:23:46.234752Z","submitted_at":"2018-04-20T17:11:06Z","title":"ADef: an Iterative Algorithm to Construct Adversarial Deformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.07729","snapshot_observed_at":"2026-08-14T15:11:10.047192Z","title":"Alberti, and Tandri Gauksson","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.047192Z"},"links":{"cited_paper":"/paper/1804.07729","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d519ca0e8498db899d744fccb3326236766ce246ff2c05c22b9f9afc84f5af91","observation_id":"4b7f1e67-931d-471b-a793-78e160baa9ed","resolution":{"observed_at":"2026-08-14T15:11:10.047192Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.076576Z","title":null,"venue":null,"work_id":"55cc3971-7af3-4f32-8c61-b32bb2f703c8","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.054876Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:b2d8ea22c8b1cdb30fd1b7ed40ecba4f266abca5e3b63f707d7cfd259b58a398","observation_id":"5750e7ec-e539-40de-ba29-b3a47957fee8","resolution":{"observed_at":"2026-08-14T15:11:11.081612Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00861","last_updated":"2019-03-05T00:28:48Z","snapshot_observed_at":"2026-08-15T19:52:05.516451Z","submitted_at":"2018-10-01T17:57:02Z","title":"ProxQuant: Quantized Neural Networks via Proximal Operators","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00861","snapshot_observed_at":"2026-08-14T15:11:10.061786Z","title":"Proxquant: Quant ized neural networks via proximal operators","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.061786Z"},"links":{"cited_paper":"/paper/1810.00861","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4d306b543ffab660fba9abf71a74280acab211796e1c2854957786a32944b1d0","observation_id":"1eea2bd1-726b-4087-bf16-345fdfeef0f9","resolution":{"observed_at":"2026-08-14T15:11:10.061786Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.059847Z","title":"Fast newton-type methods for total variation regularization","venue":null,"work_id":"b4945173-f136-4651-a14c-a3ac486685f7","year":2011},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.070087Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4ba27e95cedf80bdba9c812f3b667cbcb8339d4400c670e03e0502cb91394663","observation_id":"b9284f16-585c-47e7-9566-4e3cf6c559e9","resolution":{"observed_at":"2026-08-14T15:11:11.065389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.040225Z","title":"Modular proximal optimiz ation for multidimensional total-variation regularizati on","venue":null,"work_id":"106436f6-85f6-4e46-97bf-3ed94f8a9476","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.075332Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d42afa40266e0c2ea6b32e4226e1f214c81508f6aca4d81412a40d2359859e9d","observation_id":"68c63aa2-a919-42a1-a0c4-6942ad47f6fa","resolution":{"observed_at":"2026-08-14T15:11:11.047326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:11.005685Z","title":"First-order methods in optimization","venue":null,"work_id":"7df76c17-f738-4f66-b665-ca91de377c25","year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.080638Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:1fcc5c20b0b1a77e2e4d978959d6a2e9733e4b8ccf7845f7a97384d500153310","observation_id":"ce75ad9e-be4c-480c-9c69-0d589b661ea7","resolution":{"observed_at":"2026-08-14T15:11:11.012243Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-08-14T20:04:31.854470Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-14T15:11:10.086949Z","title":"Dec ision-based adversarial attacks: Reliable attacks agains t black-box machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.086949Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:63b62c500bb5a4d8b1cf41dbea5a3f9c11c691f05d805b00d1903cef66248b7f","observation_id":"64d8ae57-ac4b-41c2-ac25-df84d8b1142b","resolution":{"observed_at":"2026-08-14T15:11:10.086949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-08-15T15:16:56.180227Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-08-14T15:11:10.092554Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.092554Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ae2b3f42d8c9e13179b259199a1f70f1703b8c00505758de5ce50895e7fc8a27","observation_id":"27e46986-c939-45fc-a711-5f06ba7154d1","resolution":{"observed_at":"2026-08-14T15:11:10.092554Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.02144","last_updated":"2020-04-28T01:20:45Z","snapshot_observed_at":"2026-08-14T16:52:11.462840Z","submitted_at":"2019-04-03T17:59:33Z","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.02144","snapshot_observed_at":"2026-08-14T15:11:10.098774Z","title":null,"venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.098774Z"},"links":{"cited_paper":"/paper/1904.02144","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:f637cb6830856697f4e14681825c0ea8fe489ad0ae9d4f822d8aa9d57c995983","observation_id":"f7bcb01f-8674-4ad3-bc29-b128b165038b","resolution":{"observed_at":"2026-08-14T15:11:10.098774Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.01427","last_updated":"2019-12-01T22:15:08Z","snapshot_observed_at":"2026-08-14T19:07:33.890747Z","submitted_at":"2018-06-04T23:29:05Z","title":"Analysis of DAWNBench, a Time-to-Accuracy Machine Learning Performance Benchmark","version":2},"cited_work":{"arxiv_id":"1806.01427","doi":null,"metadata_source":"pith","pith_arxiv_id":"1806.01427","snapshot_observed_at":"2026-08-14T15:11:10.652477Z","title":"Analysis of DAWNBench, a Time-to-Accuracy Machine Learning Performance Benchmark","venue":"cs.LG","work_id":"171f1005-b74d-4fef-89d7-0863f01b8bba","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.103894Z"},"links":{"cited_paper":"/paper/1806.01427","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:abb32b9884cfe74b4c9f1ba552309039c7a55b36d7847eebd83b15ebc75062af","observation_id":"90005105-290d-417b-9e27-67abd7c231e9","resolution":{"observed_at":"2026-08-14T15:11:10.659012Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.988341Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"da27f90c-75ec-4610-b3f2-ed155f21f16f","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.110327Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:54fc02d0c2fdb63bdf9635267c5d5815db083b137810e09032ae1d08cd8158d9","observation_id":"f656fe73-aa9b-4002-906c-0d22c40cae45","resolution":{"observed_at":"2026-08-14T15:11:10.994011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.968884Z","title":"Efficient projections onto the l1-ball for learning in high dimensions","venue":null,"work_id":"26f40a6c-f8e4-4e0c-83ce-b7de51c15a6c","year":2008},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.123060Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:f8dfb775930cec70785437c053df4db2319399272fc649ea433e5a7e87129259","observation_id":"e3b2c65e-f019-42c7-a029-7588f84a2c2e","resolution":{"observed_at":"2026-08-14T15:11:10.975088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-08-14T20:44:49.961329Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-08-14T15:11:10.128891Z","title":"Robust physical-world attacks on deep learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.128891Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d38050bb02103df0d752477ad6145d2a0749c7e7966a56138e9ab2ab27d319ee","observation_id":"a2b84e6a-5ab2-473c-83b7-900297118eaf","resolution":{"observed_at":"2026-08-14T15:11:10.128891Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.11468","last_updated":"2019-10-04T14:12:34Z","snapshot_observed_at":"2026-08-14T16:25:38.655504Z","submitted_at":"2019-05-27T19:40:52Z","title":"Scaleable input gradient regularization for adversarial robustness","version":2},"cited_work":{"arxiv_id":"1905.11468","doi":null,"metadata_source":"pith","pith_arxiv_id":"1905.11468","snapshot_observed_at":"2026-08-14T15:11:10.608209Z","title":"Scaleable input gradient regularization for adversarial robustness","venue":"stat.ML","work_id":"cbda64b2-cd02-4bf9-8b9c-52dca4282aa2","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.134603Z"},"links":{"cited_paper":"/paper/1905.11468","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:4161828ec89709ba34a5f35521e87ff1552001138d3af6b729f462164fa3dc13","observation_id":"84fd65f5-5430-45dd-91bf-09a15b3dd95c","resolution":{"observed_at":"2026-08-14T15:11:10.613702Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.947627Z","title":"Ob erman","venue":null,"work_id":"f5573a24-c7ec-46c0-a1c4-fbc7843e19f4","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.140769Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:2316103851bdb12c8112c9ba3410a0fd4e871b9a3808e7e2d3e30ae2a6b5b80e","observation_id":"e1781a80-1366-4478-84cf-fcdc0f7f769b","resolution":{"observed_at":"2026-08-14T15:11:10.953946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T15:11:10.146560Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.146560Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:32f0cef43ef19d9b312d1587bf9ab99111004767e603674d1061bb792c3fd25c","observation_id":"cb48b2ae-b9ae-434e-8939-55a5af0906c2","resolution":{"observed_at":"2026-08-14T15:11:10.146560Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.929975Z","title":"I dentity mappings in deep residual networks","venue":null,"work_id":"a592b42b-be48-4b8e-a643-f47b94cc17af","year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.152471Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:5d48b5b401a4263e9a533094089ab8c16fcbadc09e2c4d73638e9283f4190aa8","observation_id":"d30a45ae-fee7-40f2-84c4-33da8153ae91","resolution":{"observed_at":"2026-08-14T15:11:10.935140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.899563Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"f2e44d0a-88aa-48cf-bf3d-4d88a630167d","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.164480Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:3e5026b6efbdc567a5680294ae254852989afbd5725bd2b290bc74274d558156","observation_id":"03a2ec74-9aae-44a8-a425-864720409c73","resolution":{"observed_at":"2026-08-14T15:11:10.906656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-14T21:49:09.424265Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T15:11:10.170484Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.170484Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:1880d10a2e508559f45234835ec393e9eebac3e4aa433f0b60ce2721c5a4e12b","observation_id":"febf31f9-10d6-41ce-8e98-ce3eaea53d9a","resolution":{"observed_at":"2026-08-14T15:11:10.170484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.877327Z","title":"Object recognition with gradient-based learning","venue":null,"work_id":"49ef4a60-1dc5-4e81-aeb2-41e4e1e7f82d","year":1999},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.177027Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:aa0a94a3d4efdd4703304f0b4896e095f58ea02231bb4b514610179f323c055e","observation_id":"13223208-a851-42a6-bec4-e95f0fdae4d1","resolution":{"observed_at":"2026-08-14T15:11:10.886541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-14T15:11:10.182438Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.182438Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:87a03dfd03587dbe09af51c0ba47e3ab0df9f6f7b018def19684b1b8a3ec417b","observation_id":"3bab4747-3b1a-40e0-9425-018f352e9f8d","resolution":{"observed_at":"2026-08-14T15:11:10.182438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.03488","last_updated":"2017-08-30T11:22:33Z","snapshot_observed_at":"2026-08-14T21:07:10.857677Z","submitted_at":"2017-04-11T18:33:51Z","title":"Learning Proximal Operators: Using Denoising Networks for Regularizing Inverse Imaging Problems","version":2},"cited_work":{"arxiv_id":"1704.03488","doi":null,"metadata_source":"pith","pith_arxiv_id":"1704.03488","snapshot_observed_at":"2026-08-14T15:11:10.524021Z","title":"Learning Proximal Operators: Using Denoising Networks for Regularizing Inverse Imaging Problems","venue":"cs.CV","work_id":"e75dfc8e-235f-4582-9d27-793b63fb6af1","year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.188135Z"},"links":{"cited_paper":"/paper/1704.03488","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:e67203be045b84f65c0b71f45aad5e5f1a7f74d2f20a808ccd6c1337ba099b53","observation_id":"d541dffb-cd87-4008-af2f-40e44d65129a","resolution":{"observed_at":"2026-08-14T15:11:10.531652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1811.02248","last_updated":"2019-05-27T16:33:41Z","snapshot_observed_at":"2026-08-14T18:03:35.474856Z","submitted_at":"2018-11-06T09:30:34Z","title":"SparseFool: a few pixels make a big difference","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.02248","snapshot_observed_at":"2026-08-14T15:11:10.194028Z","title":"Sparsefool: a few pixels make a big difference","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.194028Z"},"links":{"cited_paper":"/paper/1811.02248","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:1ec1978c8a543c1ea0343fac79ab8143d1fd94213907b5e2d880192f54795b65","observation_id":"14950efc-98d9-4ef7-b42c-2a0b20a9f582","resolution":{"observed_at":"2026-08-14T15:11:10.194028Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.04599","last_updated":"2016-07-04T04:49:44Z","snapshot_observed_at":"2026-08-14T22:22:59.030078Z","submitted_at":"2015-11-14T18:50:00Z","title":"DeepFool: a simple and accurate method to fool deep neural networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.04599","snapshot_observed_at":"2026-08-14T15:11:10.200437Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.200437Z"},"links":{"cited_paper":"/paper/1511.04599","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d1819d06b4dd66fd8d63721308392d6168ae3ba9ddfe39745f4868456f8dc10d","observation_id":"676c7de9-a2b9-4561-8382-fdc702697795","resolution":{"observed_at":"2026-08-14T15:11:10.200437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.206508Z","title":"Numerical optimization","venue":null,"work_id":null,"year":2006},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.206508Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:8e8cfd21c6f1d66adb8982830c146684d5ff9ac4f138e151bc6b7fe0cd7a163f","observation_id":"4dbeb01c-24b3-4d26-81f1-cf52456902fa","resolution":{"observed_at":"2026-08-14T15:11:10.206508Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1511.07528","last_updated":"2015-11-24T01:07:08Z","snapshot_observed_at":"2026-08-14T22:21:37.051422Z","submitted_at":"2015-11-24T01:07:08Z","title":"The Limitations of Deep Learning in Adversarial Settings","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1511.07528","snapshot_observed_at":"2026-08-14T15:11:10.212540Z","title":"McDaniel, Somesh Jha, Mat t Fredrikson, Z","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.212540Z"},"links":{"cited_paper":"/paper/1511.07528","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d618f06db43b5aae93d241bbd20c93332684302e86bc89cd00e6075a8e4ee680","observation_id":"81ff1c1f-3dbb-440c-bef4-ccefb2a4971e","resolution":{"observed_at":"2026-08-14T15:11:10.212540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.847589Z","title":"Catalyst for gradient - based nonconvex optimization","venue":null,"work_id":"0b974144-7d34-45d1-9c4e-72aad23f6e9f","year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.218502Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:97d8e5e51f09499a27fde67f58be8be5fcd93e0e5b416dab00108ed78ab12c3b","observation_id":"186e9ca6-cfec-43ec-9118-ef36eac745bc","resolution":{"observed_at":"2026-08-14T15:11:10.852776Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.04131","last_updated":"2018-03-20T10:10:10Z","snapshot_observed_at":"2026-08-14T20:47:52.040006Z","submitted_at":"2017-07-13T13:59:15Z","title":"Foolbox: A Python toolbox to benchmark the robustness of machine learning models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.04131","snapshot_observed_at":"2026-08-14T15:11:10.224132Z","title":"Fo olbox v0.8.0: A python toolbox to benchmark the robust- ness of machine learning models","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.224132Z"},"links":{"cited_paper":"/paper/1707.04131","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ae46d703b077c98f3f390a3528eb7bbd7d843aa75c93b8bbd06758bb112d1e67","observation_id":"7c7e00e9-8750-497c-9c3d-eac7d11b0903","resolution":{"observed_at":"2026-08-14T15:11:10.224132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.830342Z","title":"V ariational analysis, volume 317","venue":null,"work_id":"a74d606a-b9b6-4b52-b932-c7d8be0f699c","year":2009},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.232908Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d008a105ef3742de0c92eb414f708df14a5d59119beab0b49fbb9f8cb7284f26","observation_id":"ac4e6551-06bd-49c6-9cff-b8a9da62198b","resolution":{"observed_at":"2026-08-14T15:11:10.835700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.813813Z","title":"Nonline ar total variation based noise removal algorithms","venue":null,"work_id":"5ae664b5-8640-4abc-96dd-2b9e0a602f02","year":1992},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.243375Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:fe4f63a0c21136dc00bdd6584f08877f6baaf101fd8a7d699aa94d52c9acc3cd","observation_id":"e5a84d40-9835-4357-940e-80cfc48018d3","resolution":{"observed_at":"2026-08-14T15:11:10.819116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.09190","last_updated":"2018-09-20T17:49:14Z","snapshot_observed_at":"2026-08-14T19:12:00.848071Z","submitted_at":"2018-05-23T14:16:22Z","title":"Towards the first adversarially robust neural network model on MNIST","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.09190","snapshot_observed_at":"2026-08-14T15:11:10.248889Z","title":"Robust perception through analysis by synthe- sis","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.248889Z"},"links":{"cited_paper":"/paper/1805.09190","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ea4005f85bfcaf4507a6cb58af8cc33d1d41bb61d6fcc4d3cbe32dd036595c6c","observation_id":"a7ef2c47-bbe7-46a8-8b54-e8a391fa0d39","resolution":{"observed_at":"2026-08-14T15:11:10.248889Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.08864","last_updated":"2019-10-17T07:46:53Z","snapshot_observed_at":"2026-08-14T20:20:45.576551Z","submitted_at":"2017-10-24T16:02:19Z","title":"One pixel attack for fooling deep neural networks","version":7},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.08864","snapshot_observed_at":"2026-08-14T15:11:10.254863Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.254863Z"},"links":{"cited_paper":"/paper/1710.08864","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:ceb59dde1f0623ef070db93d0983e1612aa5e5868f27bc557ec2b0c5c6d0f38a","observation_id":"5e8bd658-5f21-4972-b016-a2bcea420983","resolution":{"observed_at":"2026-08-14T15:11:10.254863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.796221Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"3be3b354-2833-436d-b2a2-9dbad71efdbd","year":2014},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.261685Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:0288d72706ec2a6e50f6cc0eedab6615afb83235dd1894b7d21ae1a87b08fd4f","observation_id":"84ab5c52-ad97-4b8f-8546-ba7a77a931de","resolution":{"observed_at":"2026-08-14T15:11:10.801826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.12152","last_updated":"2019-09-09T08:09:25Z","snapshot_observed_at":"2026-08-15T23:10:28.605867Z","submitted_at":"2018-05-30T18:00:32Z","title":"Robustness May Be at Odds with Accuracy","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.12152","snapshot_observed_at":"2026-08-14T15:11:10.267654Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.267654Z"},"links":{"cited_paper":"/paper/1805.12152","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:666ab849fbea3fa27179b1c370a8f04aa29d7547f70e4f8b8597ed53658a5f0b","observation_id":"bf8e70b1-e60c-4077-be74-bda77de14cec","resolution":{"observed_at":"2026-08-14T15:11:10.267654Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02612","last_updated":"2018-01-09T19:03:32Z","snapshot_observed_at":"2026-08-14T19:56:59.164200Z","submitted_at":"2018-01-08T18:51:59Z","title":"Spatially Transformed Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02612","snapshot_observed_at":"2026-08-14T15:11:10.273895Z","title":"Spatially transformed adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.273895Z"},"links":{"cited_paper":"/paper/1801.02612","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:e47f4559c610e28e1cfedc421378610d3f0ee1a0f847965c1099344318861d63","observation_id":"c1a70d8b-1e4f-4d84-9280-0c499925e5e0","resolution":{"observed_at":"2026-08-14T15:11:10.273895Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.05431","last_updated":"2017-04-11T01:53:41Z","snapshot_observed_at":"2026-08-14T21:30:05.428653Z","submitted_at":"2016-11-16T20:34:42Z","title":"Aggregated Residual Transformations for Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.05431","snapshot_observed_at":"2026-08-14T15:11:10.279425Z","title":"Girshick, Piotr Doll´ ar, Zhuowen T u, and Kaiming He","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.279425Z"},"links":{"cited_paper":"/paper/1611.05431","citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:d12bf966215cce85cbeca7eae0b73f5a3dacc6670831bd21358322fa6848cd2c","observation_id":"307a7f59-9211-4f7e-9bdb-48f564972ca8","resolution":{"observed_at":"2026-08-14T15:11:10.279425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.775010Z","title":"Ad mm attack: An enhanced adversarial attack for deep neural networks with undetectable distortions","venue":null,"work_id":"df55ab6a-2fbf-4556-976b-891c3fe9cb98","year":2019},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.285502Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:1f2c56bf788ae00329e669012538fdf1080cc9178ba8d3824fc9a639daeccf8d","observation_id":"db4cfef8-c6d7-47a6-b988-15cbf7ad1881","resolution":{"observed_at":"2026-08-14T15:11:10.781730Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:11:10.158109Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics","version":2},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-14T15:11:10.158109Z"},"links":{"citing_paper":"/paper/1908.01667"},"observation_digest":"sha256:a69a112ddbee20f5df839c75a60e6a35a4a769f53c5050142ec61b8ecd10cefa","observation_id":"c38870a1-c6e5-4e1a-ad66-6e6e7ccfd098","resolution":{"observed_at":"2026-08-14T15:11:10.158109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.01667","last_updated":"2019-10-08T17:21:21Z","latest_version":2,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T21:26:09.142746Z","submitted_at":"2019-08-05T14:57:01Z","title":"A principled approach for generating adversarial images under non-smooth dissimilarity metrics"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":3,"verified_fuzzy":14},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:1908.01667."}