{"as_of":"2026-08-15T11:18:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:928ae50e1e922d8a1e2e54955f207f4579a30806c90b3edb2c1c1793fad17d00","coverage":[{"denominator":51,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":51,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T15:03:46.865380Z","state":"measured"},{"denominator":51,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":51,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.02658/citation-record","integrity":"/paper/1908.02658/integrity","json":"/paper/1908.02658/citation-record.json","paper":"/paper/1908.02658"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.976036Z","title":"Image denoising and inpainting with deep neural networks,","venue":null,"work_id":"f0955200-05e6-485f-a4e0-e2a0e11b28b1","year":2012},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.496823Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:54ed0779a3bc085695161031b3b24c49a01779f20d3488392d721b898755dbca","observation_id":"4dd05b81-4a02-46bc-926b-f1fc7dd85bd6","resolution":{"observed_at":"2026-08-14T15:03:47.981766Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.955308Z","title":"Context encoders: Feature learning by inpainting,","venue":null,"work_id":"f4ef4e1f-e3bf-4bca-82ff-657b6da36b9c","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.503949Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:45ea237e7abe7776c58b928730de2475831d73e8aca63020d52ee238f3045065","observation_id":"e93ae069-e902-4651-986b-1cef68561dde","resolution":{"observed_at":"2026-08-14T15:03:47.961557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.936986Z","title":"A unified architecture for natural language processing: Deep neural networks with multitask learning,","venue":null,"work_id":"fb67ccb9-235b-460c-b5b8-e7fc5053f0f2","year":2008},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.512096Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:725adef76e50a76fc3b1891d4e8c655a8479a1e851e06e3b2c02138a6af35727","observation_id":"2f0c57b0-4d36-4871-b406-3daabaa3eaa8","resolution":{"observed_at":"2026-08-14T15:03:47.943522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.918358Z","title":"Deep neural networks for acoustic modeling in speech recognition,","venue":null,"work_id":"012170e3-917b-4102-a93c-4aa7d03274e3","year":2012},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.519957Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:8bad6a752a01fff54818ee25d6041e2882d8ad5b6770e490e02563831207fc93","observation_id":"f29dc466-82ba-45e5-b602-c60bb33b0ebc","resolution":{"observed_at":"2026-08-14T15:03:47.924557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T15:03:46.526949Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.526949Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:6bfd8fc08dc80251a213797b682db04130bd18e7a5bac864d5750ac5433c9e8d","observation_id":"526ba6e0-0087-4fbf-9a7f-92ca9a3dd617","resolution":{"observed_at":"2026-08-14T15:03:46.526949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.533980Z","title":"Univer- sal adversarial perturbations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.533980Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:8d9d16a56f8e9f5746cc5ce4df122b866af0ae41b49b705ef5548b4fdf4863d5","observation_id":"fc98155f-07e5-46b6-8fae-4c57a7fa51fa","resolution":{"observed_at":"2026-08-14T15:03:46.533980Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-14T20:45:49.587140Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-08-14T15:03:46.545496Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.545496Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:e5170e27a2d3186f1b7a7950693e939b284ee14aff88eb45c907eb56324a7033","observation_id":"e5cc5032-8154-4942-8efc-c0f890935c9d","resolution":{"observed_at":"2026-08-14T15:03:46.545496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.553575Z","title":"Adversarial examples for semantic segmentation and object detection,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.553575Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d58c5e9c3a66f6b23bd69f9c09329d77903b9d5211ff61bbf6cba3be2953427c","observation_id":"71693732-9dcc-4916-989e-91f0f4a53ebe","resolution":{"observed_at":"2026-08-14T15:03:46.553575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.876051Z","title":"Audio adversarial examples: Targeted attacks on speech-to-text,","venue":null,"work_id":"899b2241-af63-4d97-84d1-5b4a4ca103c7","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.565193Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ec0f9c9fdef8a87f431fceabbacd4f832bd88c2052d436dded6f299b4a4feb85","observation_id":"eaca42b8-3fcf-4f00-ae3c-5521a98278bb","resolution":{"observed_at":"2026-08-14T15:03:47.882116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.00554","last_updated":"2018-01-02T05:24:30Z","snapshot_observed_at":"2026-08-14T19:58:41.864726Z","submitted_at":"2018-01-02T05:24:30Z","title":"Did you hear that? Adversarial Examples Against Automatic Speech Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.00554","snapshot_observed_at":"2026-08-14T15:03:46.570378Z","title":"Did you hear that? adver- sarial examples against automatic speech recognition,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.570378Z"},"links":{"cited_paper":"/paper/1801.00554","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:3c0dec27df92e29454da2d0cdbe21e7ff8f8a1edaf2e753443747b20683b4eb5","observation_id":"740291a0-5ea8-4d57-a46b-da69ba87a51e","resolution":{"observed_at":"2026-08-14T15:03:46.570378Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.06751","last_updated":"2018-05-24T16:43:45Z","snapshot_observed_at":"2026-08-14T20:02:19.969689Z","submitted_at":"2017-12-19T02:15:19Z","title":"HotFlip: White-Box Adversarial Examples for Text Classification","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.06751","snapshot_observed_at":"2026-08-14T15:03:46.582216Z","title":"Hotflip: White-box adver- sarial examples for text classification,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.582216Z"},"links":{"cited_paper":"/paper/1712.06751","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ae9eabf666d03050f46412c27717e79e1ec23cb596e982a25894895a4b5631db","observation_id":"ae4e5e30-7853-455b-93be-71cba0102763","resolution":{"observed_at":"2026-08-14T15:03:46.582216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.589726Z","title":"Threat of adversarial attacks on deep learning in computer vision: A survey,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.589726Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:1c50d3da4476e19c47014625478d154d9b6e2b34601915066397599ecb65a6f6","observation_id":"40e38f4b-0e2c-4d02-ace6-56ec61545c99","resolution":{"observed_at":"2026-08-14T15:03:46.589726Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T15:03:46.603083Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.603083Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:00d5b367798eb063cb20e5bf0a5d185753521e28a6c74677649aaae1a15f591d","observation_id":"9daaae66-cca7-4208-a3bf-c17a9705ad6a","resolution":{"observed_at":"2026-08-14T15:03:46.603083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.610775Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.610775Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:5e6a45a8b7495f14ae7f18fd856cd2736c10920070b8591707fae9c27db77fcc","observation_id":"cbfc635c-8209-44b9-8677-733db753cbc9","resolution":{"observed_at":"2026-08-14T15:03:46.610775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T15:03:46.616417Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.616417Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:53bfc55bcf7e47ac96d59be71ab7e995c64c5015f6aefc2b555ff77d9db3c899","observation_id":"72ad3b74-e15a-425b-a68f-5936b065cf3e","resolution":{"observed_at":"2026-08-14T15:03:46.616417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1608.07690","last_updated":"2016-08-27T10:44:54Z","snapshot_observed_at":"2026-08-14T21:42:33.717238Z","submitted_at":"2016-08-27T10:44:54Z","title":"A Boundary Tilting Persepective on the Phenomenon of Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1608.07690","snapshot_observed_at":"2026-08-14T15:03:46.622852Z","title":"A boundary tilting persepective on the phenomenon of adversarial examples,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.622852Z"},"links":{"cited_paper":"/paper/1608.07690","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:7827832c784818eeaaf4ba26c673796a906b7d68e52db48c1aa8e6540f80d4bc","observation_id":"07ea3842-83b8-462a-b1fa-dda0682665af","resolution":{"observed_at":"2026-08-14T15:03:46.622852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.5068","last_updated":"2015-04-09T21:43:29Z","snapshot_observed_at":"2026-08-14T23:07:55.262291Z","submitted_at":"2014-12-11T23:03:49Z","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.5068","snapshot_observed_at":"2026-08-14T15:03:46.629357Z","title":"Towards deep neural network architectures robust to adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.629357Z"},"links":{"cited_paper":"/paper/1412.5068","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:af1957854bbb36f6a438ccba3791f0c15b09b449b0304e72885a6a9b585f893b","observation_id":"596fb11b-07d0-419f-ad82-9261bb311dbc","resolution":{"observed_at":"2026-08-14T15:03:46.629357Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.827264Z","title":"Exploring the space of adversarial images,","venue":null,"work_id":"54b5ba40-5521-41f6-bffb-3bb6af699f4b","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.636804Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:bfdce32c6f6531bcdc2f078069eec2c8a4404584cbbc7911dd3a5b1e886d673d","observation_id":"6e0842fa-4de8-49a8-81d0-8fad2a6ec8ad","resolution":{"observed_at":"2026-08-14T15:03:47.836347Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1711.02846","last_updated":"2017-11-08T06:54:49Z","snapshot_observed_at":"2026-08-14T20:15:48.477088Z","submitted_at":"2017-11-08T06:54:49Z","title":"Intriguing Properties of Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.02846","snapshot_observed_at":"2026-08-14T15:03:46.644451Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.644451Z"},"links":{"cited_paper":"/paper/1711.02846","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:c12b152c1abd9690e86be8c7c82358af7633298d9dd6c16669a73b2b962c61c7","observation_id":"0df42a72-f77d-4d4c-a5fb-c1dc108f74f3","resolution":{"observed_at":"2026-08-14T15:03:46.644451Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.807572Z","title":"Adver- sarially robust generalization requires more data,","venue":null,"work_id":"7b6a275e-43dd-42d1-b7b9-a4ebb48e89d3","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.651258Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:994447865a397da9f750a298c7a716ffdf6d0358aa164a7c0d582663048d98ba","observation_id":"c897984c-430f-431d-81d1-47086abb0cd4","resolution":{"observed_at":"2026-08-14T15:03:47.813664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.10204","last_updated":"2018-05-25T15:39:06Z","snapshot_observed_at":"2026-08-14T19:11:05.167467Z","submitted_at":"2018-05-25T15:39:06Z","title":"Adversarial examples from computational constraints","version":1},"cited_work":{"arxiv_id":"1805.10204","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.10204","snapshot_observed_at":"2026-08-14T15:03:47.198255Z","title":"Adversarial examples from computational constraints","venue":"stat.ML","work_id":"c2a6e087-3ba9-49ee-9661-09b554ef10c1","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.658442Z"},"links":{"cited_paper":"/paper/1805.10204","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:9a1fe86912f371d9cbf8a47419a11da62565397c08fdf8cf722edba33416d441","observation_id":"2c1eccf7-8d14-41dd-986d-b613acb0ff11","resolution":{"observed_at":"2026-08-14T15:03:47.206476Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.02175","last_updated":"2019-08-12T14:36:10Z","snapshot_observed_at":"2026-08-14T16:36:33.861447Z","submitted_at":"2019-05-06T17:45:05Z","title":"Adversarial Examples Are Not Bugs, They Are Features","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.02175","snapshot_observed_at":"2026-08-14T15:03:46.667194Z","title":"Adversarial examples are not bugs, they are features,","venue":null,"work_id":null,"year":1905},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.667194Z"},"links":{"cited_paper":"/paper/1905.02175","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ac85918584b2c3b532b2c6530537079a4d15087033d3a391a5f72edfa8a376a5","observation_id":"19356489-4b5d-4c3f-bd3b-f09ae74ebbd7","resolution":{"observed_at":"2026-08-14T15:03:46.667194Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.789116Z","title":"Disentangling adversarial robust- ness and generalization,","venue":null,"work_id":"94c4eba4-f2ac-4b1e-b33f-ca196664ed43","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.675163Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d6d66c1dba15f1692ba5d144972f385c21e7f10a783fb61b27b4d3ccbfa0bae0","observation_id":"d1566e90-f577-4d0a-aacf-984d66dbc72a","resolution":{"observed_at":"2026-08-14T15:03:47.795094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-14T21:49:09.424265Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T15:03:46.681071Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.681071Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:3275480990ae3e4c7ba6b12256a63bfede9de0580ad4bc84e7ba039daed47601","observation_id":"13ec7ec7-3ece-437c-9121-1a8a448be04f","resolution":{"observed_at":"2026-08-14T15:03:46.681071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.691218Z","title":"Deepfool: a simple and accurate method to fool deep neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.691218Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:da1845f2b5951226c459253d66a56019ae2fcf49ce38f7940892cfd5a7a2fc13","observation_id":"a46f3a2a-7437-4085-a12c-6e89cb5baaa6","resolution":{"observed_at":"2026-08-14T15:03:46.691218Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.698199Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.698199Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:ccec6f09e9ffe7b9c7099431b10d4f18ddb1b5b250a5802b592ddf4b049118a8","observation_id":"52b5d33d-3d2e-4888-ba5e-54831f19f17c","resolution":{"observed_at":"2026-08-14T15:03:46.698199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.704948Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.704948Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:aecf8d42e5ddd3ad6f6f1703d70a907d258ce5704ffcc1e6e206bde4b354b054","observation_id":"a55d2ed3-87bd-4ee8-b4da-4056fd611585","resolution":{"observed_at":"2026-08-14T15:03:46.704948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.710455Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.710455Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d2c3acbd425ffc1668350d49166d9c4fad3a3af7c2b1e7a5a03a7b3fe59313f1","observation_id":"2c954a21-4b40-40fd-ac52-defd5596fae4","resolution":{"observed_at":"2026-08-14T15:03:46.710455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.719318Z","title":"Ead: elastic- net attacks to deep neural networks via adversarial examples,","venue":null,"work_id":"86624c24-cdce-45fe-9de6-3f9cc29c514e","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.715370Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:8ab9771a9e5ec0d001e27af5e80c774b4aacc68d0183aac3e7138f49e60d240a","observation_id":"544dfa6f-f896-4714-9fdc-573ad2fea5be","resolution":{"observed_at":"2026-08-14T15:03:47.725790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.699662Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"df8ca41c-8cf8-4dcd-b4dd-cf58d1596748","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.721340Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:c9bcf97b21103156f2006ac9f76c191df8657c5f57c4bfb241ef8b1bc7af1d42","observation_id":"48b37ac3-188d-47d0-83bb-f54481e9febf","resolution":{"observed_at":"2026-08-14T15:03:47.706418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.679360Z","title":"Semantic adversarial examples,","venue":null,"work_id":"6ceefb40-f0b5-4e4e-b1ff-f0c59b0876fb","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.726204Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:b02325d216b8e5ef9969b2d64a551571bd738ec5596a9393f1f9130719dbec46","observation_id":"44f3bfde-8268-45a0-8ad0-3c8e3f6aed8e","resolution":{"observed_at":"2026-08-14T15:03:47.685121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1809.02786","last_updated":"2018-12-22T09:07:32Z","snapshot_observed_at":"2026-08-14T18:31:18.716711Z","submitted_at":"2018-09-08T10:26:50Z","title":"Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1809.02786","doi":null,"metadata_source":"pith","pith_arxiv_id":"1809.02786","snapshot_observed_at":"2026-08-14T15:03:47.125528Z","title":"Structure-Preserving Transformation: Generating Diverse and Transferable Adversarial Examples","venue":"cs.LG","work_id":"a8aaebd8-5901-4851-9e56-c8e8e06cb5e3","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.731084Z"},"links":{"cited_paper":"/paper/1809.02786","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:0c269e1db28782ab98725bcbca0f72895f4e555791d5408beb6d16dad8eb7a7b","observation_id":"e11e16f8-b83f-4c20-ae08-9a52535f84f8","resolution":{"observed_at":"2026-08-14T15:03:47.132104Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.737003Z","title":"Distillation as a defense to adversarial perturbations against deep neural networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.737003Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:e7de01789671afaf82aaf42d3afc1a9f001db9a2f176837d949d8caa7024f085","observation_id":"155a8e3d-564d-47f5-99fb-c69493ce8057","resolution":{"observed_at":"2026-08-14T15:03:46.737003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.643116Z","title":"Ensemble selection from libraries of models,","venue":null,"work_id":"d4d36b17-a8bb-41c2-92b5-a7588e86453f","year":2004},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.742403Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:05083946758575dfa4170abd04e2e74f32da0dc3d8cf9ae7e4610a923e1e261e","observation_id":"d96c4027-7118-462c-9b3c-fc65557c9ab9","resolution":{"observed_at":"2026-08-14T15:03:47.652845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.02654","last_updated":"2017-11-29T22:41:25Z","snapshot_observed_at":"2026-08-14T21:07:35.627706Z","submitted_at":"2017-04-09T20:21:43Z","title":"Enhancing Robustness of Machine Learning Systems via Data Transformations","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.02654","snapshot_observed_at":"2026-08-14T15:03:46.748271Z","title":"Dimensionality reduction as a defense against evasion attacks on machine learning classifiers,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.748271Z"},"links":{"cited_paper":"/paper/1704.02654","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:cb60346bce929f4cbafd57435589bf747e620039e8803cde80881bc0318703a0","observation_id":"2c8f9ad6-90ea-4412-806c-8ecef70e8fd9","resolution":{"observed_at":"2026-08-14T15:03:46.748271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.621616Z","title":"Thermometer encoding: One hot way to resist adversarial examples,","venue":null,"work_id":"12b1b19d-6130-4052-bba5-a9ac737f22f9","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.755439Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:9238d2a88d095bbd613fbdf0c5118dfa6a96e0e2350dcb1246a1b88d3cfa8409","observation_id":"aed0a8b9-3664-47f0-92d8-4c43e78e7618","resolution":{"observed_at":"2026-08-14T15:03:47.628122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.06605","last_updated":"2018-05-18T00:20:52Z","snapshot_observed_at":"2026-08-14T19:14:23.647086Z","submitted_at":"2018-05-17T05:38:55Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.06605","snapshot_observed_at":"2026-08-14T15:03:46.760997Z","title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.760997Z"},"links":{"cited_paper":"/paper/1805.06605","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:bdd31f0066b2f6da0b4a6712a6dcfbbb6938ba7f70d84e1010f0ab0194f75b9b","observation_id":"126517ce-fd97-41c7-a5a4-cf662462746f","resolution":{"observed_at":"2026-08-14T15:03:46.760997Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.595935Z","title":"Comdefend: An efficient image compression model to defend adversarial examples,","venue":null,"work_id":"f50e52f4-997c-45f6-add8-afcc666f27d2","year":2019},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.768245Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:cf10cbc990f8b5537fee86b18ff14975332a944b66e3079aef0c3668b589796a","observation_id":"0a818c1e-987c-437f-820b-379f5cd53b50","resolution":{"observed_at":"2026-08-14T15:03:47.602052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06806","last_updated":"2019-04-25T22:32:22Z","snapshot_observed_at":"2026-08-14T19:44:25.812087Z","submitted_at":"2018-02-19T19:01:56Z","title":"Divide, Denoise, and Defend against Adversarial Attacks","version":2},"cited_work":{"arxiv_id":"1802.06806","doi":null,"metadata_source":"pith","pith_arxiv_id":"1802.06806","snapshot_observed_at":"2026-08-14T15:03:47.036457Z","title":"Divide, Denoise, and Defend against Adversarial Attacks","venue":"cs.CV","work_id":"a71eec46-e85e-4250-a050-e4ca75513614","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.774504Z"},"links":{"cited_paper":"/paper/1802.06806","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:74b66ae68fae762d716ed9134868f0b21dfc530f3cbc8cfd11b11d7010103b04","observation_id":"9587b16c-764b-4310-a503-b7c04ddd9f19","resolution":{"observed_at":"2026-08-14T15:03:47.046951Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.780958Z","title":"Image blind denoising with generative adversarial network based noise modeling,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.780958Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:bf7c569bd51bec1e6429ffa679c948f70eee4099d5848637550e24718fdb4212","observation_id":"c0824c01-abfc-4bf1-8a95-895da7d9cab9","resolution":{"observed_at":"2026-08-14T15:03:46.780958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.553316Z","title":"Deflecting adversarial attacks with pixel deflection,","venue":null,"work_id":"fdd4dce3-5396-47ba-bef0-bd3ab75d6495","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.786256Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:1984172a686ed2d7aaab2bfe77b761c0ec5da31348bf3d1ec2a8946cc75b2641","observation_id":"4543717b-dd00-429a-8963-77a368193936","resolution":{"observed_at":"2026-08-14T15:03:47.559767Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.00410","last_updated":"2017-11-15T23:31:59Z","snapshot_observed_at":"2026-08-14T21:14:04.215100Z","submitted_at":"2017-03-01T17:43:10Z","title":"Detecting Adversarial Samples from Artifacts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.00410","snapshot_observed_at":"2026-08-14T15:03:46.792404Z","title":"Detecting adversarial samples from artifacts,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.792404Z"},"links":{"cited_paper":"/paper/1703.00410","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:822f07624444e05b3eec7013c72c163851d0797f5c40c39bdda317ccf7717cab","observation_id":"5c0738cc-8b47-4328-bcaf-ca52cd5fb91a","resolution":{"observed_at":"2026-08-14T15:03:46.792404Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1702.06280","last_updated":"2017-10-17T11:12:44Z","snapshot_observed_at":"2026-08-14T21:15:34.436979Z","submitted_at":"2017-02-21T07:03:11Z","title":"On the (Statistical) Detection of Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.06280","snapshot_observed_at":"2026-08-14T15:03:46.802243Z","title":"On the (statistical) detection of adversarial examples,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.802243Z"},"links":{"cited_paper":"/paper/1702.06280","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:c75875dd421bf3b376520a09055a62ffdd38aa1cb90f2c0f1e871adcc98e2163","observation_id":"8de1c042-b226-4ce3-af56-b65575bafe2d","resolution":{"observed_at":"2026-08-14T15:03:46.802243Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02613","last_updated":"2018-03-14T07:24:10Z","snapshot_observed_at":"2026-08-14T19:56:59.076369Z","submitted_at":"2018-01-08T18:54:40Z","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02613","snapshot_observed_at":"2026-08-14T15:03:46.811501Z","title":"Characterizing adversar- 13 ial subspaces using local intrinsic dimensionality,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.811501Z"},"links":{"cited_paper":"/paper/1801.02613","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:d5ac9e58b2c2ff23a340f03e599822701b71b3b04c463e6b53d9a012e2587d87","observation_id":"de192b60-160e-4895-bf0d-beb018382287","resolution":{"observed_at":"2026-08-14T15:03:46.811501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.535737Z","title":"Safetynet: Detecting and rejecting adversarial examples robustly,","venue":null,"work_id":"10118618-95f1-4d23-94c3-54a8861b1a08","year":2017},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.823014Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:27109a99f5f91432c4d147f8af84ce86ff2f226b453e0cdc670346ed4aa67bf3","observation_id":"98bf8a64-d545-40e8-ad09-1ddca572178b","resolution":{"observed_at":"2026-08-14T15:03:47.542215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.514776Z","title":"Detecting adversarial image examples in deep neural networks with adaptive noise reduction,","venue":null,"work_id":"d483d67a-0460-40a9-b24c-7e3ddef44a99","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.829420Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:b275c403e2a72955324a17696033b09d7ef954ff4cc81c86f0cecb0455eda84b","observation_id":"6a23e747-c6d8-4d8f-8dfd-f9d600ef6161","resolution":{"observed_at":"2026-08-14T15:03:47.521388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.496032Z","title":"A simple unified framework for detecting out-of-distribution samples and adversarial attacks,","venue":null,"work_id":"d51a4faa-d7ae-4832-abce-77429f5dc481","year":2018},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.836455Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:7c3f6ed2c3b225b87175695870d04616ffa3263e6127a937cf522a29fa23dc89","observation_id":"1a67eed5-02b4-407a-bc72-d8f5a10da7b2","resolution":{"observed_at":"2026-08-14T15:03:47.501929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.467829Z","title":null,"venue":null,"work_id":"b94e6a92-69cf-45fc-9475-097c706a36a5","year":2016},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.843666Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:c1f8427ada9129a9653e37eba9aa966135b31e1e944be47b7fd271d0be617475","observation_id":"44c2b949-915e-4605-a6ec-bd63bfb5fc62","resolution":{"observed_at":"2026-08-14T15:03:47.477771Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:46.849082Z","title":"Optimization by simulated annealing,","venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.849082Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:38d6522a9a3b04d390450fe993bfa776fc4d0ab828ef97c4de884c15bc08b67c","observation_id":"744734c5-e416-4eb5-a25c-dbbad0cbabd8","resolution":{"observed_at":"2026-08-14T15:03:46.849082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T15:03:47.424061Z","title":null,"venue":null,"work_id":"12f6ad82-7279-41b0-acdd-42e8dddf0297","year":2007},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.858546Z"},"links":{"citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:4b77a0c6199cbbd9e7691c7b5e7dfae4a22f2cbbde350db59da16727131f082f","observation_id":"7110b051-e513-4e6e-8bae-fb8ce7c703df","resolution":{"observed_at":"2026-08-14T15:03:47.434069Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-08-14T21:36:55.675026Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-08-14T15:03:46.865380Z","title":"Technical report on the cleverhans v2.1.0 adversarial examples library,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-14T15:03:46.865380Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/1908.02658"},"observation_digest":"sha256:915c339f7ac7e9751d037173a96d6636f2c7928eb4df140a66d35da2c2d65bb1","observation_id":"32ec1baf-133d-460d-b1cb-e7c7537448d6","resolution":{"observed_at":"2026-08-14T15:03:46.865380Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.02658","last_updated":"2019-08-06T03:48:29Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-15T07:23:54.642032Z","submitted_at":"2019-08-06T03:48:29Z","title":"Random Directional Attack for Fooling Deep Neural Networks"},"reference_resolution":{"displayed":51,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":30,"verified_exact":3,"verified_fuzzy":17},"total_outbound_references":51},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:1908.02658."}