{"as_of":"2026-08-16T12:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b9e3e338e2eb41a09dfcdf257bb1f930ee197b9587fa983c68759d6c085fc5a5","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T13:25:39.045656Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.05185/citation-record","integrity":"/paper/1908.05185/integrity","json":"/paper/1908.05185/citation-record.json","paper":"/paper/1908.05185"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1703.09387","last_updated":"2017-03-28T03:24:33Z","snapshot_observed_at":"2026-08-14T21:09:42.918858Z","submitted_at":"2017-03-28T03:24:33Z","title":"Adversarial Transformation Networks: Learning to Generate Adversarial Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.09387","snapshot_observed_at":"2026-08-14T13:25:38.925376Z","title":"Adversarial transformation networks: Learning to generate adversarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.925376Z"},"links":{"cited_paper":"/paper/1703.09387","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:98f97b34d174acda6c2384786f99f3349e14fad9a37cffcae4522c4bad257d36","observation_id":"6e84d196-48dd-4715-9ca2-f2e8f3bf14a0","resolution":{"observed_at":"2026-08-14T13:25:38.925376Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.929720Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.929720Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:20da028c52f78bb4cd76c519ba944de032c63f0f5d03c3f21321301121880e2c","observation_id":"5b92481d-c564-4f48-b0f0-01abaa57e5b4","resolution":{"observed_at":"2026-08-14T13:25:38.929720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.02900","last_updated":"2017-05-08T14:55:32Z","snapshot_observed_at":"2026-08-14T21:02:09.542332Z","submitted_at":"2017-05-08T14:55:32Z","title":"Keeping the Bad Guys Out: Protecting and Vaccinating Deep Learning with JPEG Compression","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.02900","snapshot_observed_at":"2026-08-14T13:25:38.933230Z","title":"Kounavis, and Duen Horng Chau","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.933230Z"},"links":{"cited_paper":"/paper/1705.02900","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:dcb4613ab6048f1dad70f75eb12ae7fa9bd7eccd2bb2eb56e732fc257938e20c","observation_id":"783e60e0-64c4-44a0-b3cd-ecbd9e0e620d","resolution":{"observed_at":"2026-08-14T13:25:38.933230Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.937128Z","title":"Imagenet: A large-scale hierarchical im- age database","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.937128Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4dbfef0aa70ca984c831d9c04feabd3def852e9263a0c2a1a971e1b285834c41","observation_id":"e1c44a48-7f7c-469f-9b90-a1c13e845f26","resolution":{"observed_at":"2026-08-14T13:25:38.937128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.06081","last_updated":"2018-03-22T12:46:44Z","snapshot_observed_at":"2026-08-15T08:36:59.613655Z","submitted_at":"2017-10-17T04:03:04Z","title":"Boosting Adversarial Attacks with Momentum","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.06081","snapshot_observed_at":"2026-08-14T13:25:38.945227Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.945227Z"},"links":{"cited_paper":"/paper/1710.06081","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:f4e20c0fa0a8b39070ce4c5f4ea432dcec7897efd6902dc976b9b9f0ac5a655a","observation_id":"d483d60c-c906-4659-8c59-8faa5a604dbb","resolution":{"observed_at":"2026-08-14T13:25:38.945227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.367828Z","title":"Practical methods of optimization","venue":null,"work_id":"fef11614-1fdd-4371-8198-328e83f1dd6b","year":2013},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.949014Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4a503bd26e2090d79425d80f1484039cabc0fdfa787ac380c06d79f026e42aaa","observation_id":"75776313-a353-4757-8fdf-f7ecada9e501","resolution":{"observed_at":"2026-08-14T13:25:39.371280Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.03122","last_updated":"2017-07-25T01:40:57Z","snapshot_observed_at":"2026-08-14T21:02:01.058213Z","submitted_at":"2017-05-08T23:25:30Z","title":"Convolutional Sequence to Sequence Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.03122","snapshot_observed_at":"2026-08-14T13:25:38.952585Z","title":"Convolutional sequence to sequence learning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.952585Z"},"links":{"cited_paper":"/paper/1705.03122","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:43f9251e69701e23be6dde10aa39c3465a64050ae469acd83fa5c881351e2927","observation_id":"7901f2bd-ca2f-4b16-8cfd-c6cb037d3f6d","resolution":{"observed_at":"2026-08-14T13:25:38.952585Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.955958Z","title":"Fast r-cnn","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.955958Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:6ed3806a1fd9cfdb006dc8beb1bc8eb23a03c57d2e12b4f50c16f35d5367cfee","observation_id":"490d4bb3-53f2-42f1-ac99-914e2d95da2d","resolution":{"observed_at":"2026-08-14T13:25:38.955958Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.351545Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"bf541b37-07cb-4d64-88da-61dc6e46767e","year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.958949Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:2473dcfb053b1353d5e8d696c773879d69120c487487e953b03813040b29fff8","observation_id":"fe96f7bd-af7e-41a4-8e39-64c02dcce0e0","resolution":{"observed_at":"2026-08-14T13:25:39.355510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T13:25:38.962004Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.962004Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:02559780a938e73faab56f031d9e220389ff98ee4cc09c9003e944f97b09056c","observation_id":"2d54c6f2-ec43-414e-a0af-ea6035e89edc","resolution":{"observed_at":"2026-08-14T13:25:38.962004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.5068","last_updated":"2015-04-09T21:43:29Z","snapshot_observed_at":"2026-08-14T23:07:55.262291Z","submitted_at":"2014-12-11T23:03:49Z","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.5068","snapshot_observed_at":"2026-08-14T13:25:38.965466Z","title":"Towards Deep Neural Net- work Architectures Robust to Adversarial Examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.965466Z"},"links":{"cited_paper":"/paper/1412.5068","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:7bfbba110f5ab040341cbf08cbe4ce4b98baf5aff62cad77f0258729f2ac0934","observation_id":"fb76b47b-8c60-4fdf-9f7c-211232b06d07","resolution":{"observed_at":"2026-08-14T13:25:38.965466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.969116Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.969116Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:ca902e5136d0373d9d1f37b79bfca52b65e9b653829d9247081ad7afd4a4cd81","observation_id":"c2632847-23bd-4e16-8209-01bc7f51b67b","resolution":{"observed_at":"2026-08-14T13:25:38.969116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1709.01507","last_updated":"2019-05-16T05:32:17Z","snapshot_observed_at":"2026-08-14T20:35:56.526796Z","submitted_at":"2017-09-05T17:42:13Z","title":"Squeeze-and-Excitation Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1709.01507","snapshot_observed_at":"2026-08-14T13:25:38.972238Z","title":"Squeeze-and-excitation net- works","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.972238Z"},"links":{"cited_paper":"/paper/1709.01507","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:b88f2a21e3bba0d030bdb111502fa7d66a1d07f210f8d2eb6a90c8ee9976835e","observation_id":"c996e140-7957-4c03-a95c-e12175c607db","resolution":{"observed_at":"2026-08-14T13:25:38.972238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6980","last_updated":"2017-01-30T01:27:54Z","snapshot_observed_at":"2026-08-14T18:51:16.666127Z","submitted_at":"2014-12-22T13:54:29Z","title":"Adam: A Method for Stochastic Optimization","version":9},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6980","snapshot_observed_at":"2026-08-14T13:25:38.976440Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.976440Z"},"links":{"cited_paper":"/paper/1412.6980","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8ce67598d2f350bcbacf4b89e468771fddd5f5de06bbb21e7b55e7b8e1be1ca0","observation_id":"ec894a65-7502-4bc8-8780-ce25890a9207","resolution":{"observed_at":"2026-08-14T13:25:38.976440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.979578Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.979578Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:231117619669895ce4003a4896b46406af03856d84c59ecf0203e3143ed8ac8e","observation_id":"b6199f2e-f2af-40b2-9012-ab155592e269","resolution":{"observed_at":"2026-08-14T13:25:38.979578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.982618Z","title":"Imagenet classification with deep convolutional neural net- works","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.982618Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:356a702a78d92d03b780101a3a43b95dfec4afeecd284c13abaab234218de064","observation_id":"c44eb26e-1be8-405c-a221-381d05cee0db","resolution":{"observed_at":"2026-08-14T13:25:38.982618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-08-16T03:14:49.760924Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-14T13:25:38.985552Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.985552Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:8d2106b80d4c2664fc3a93c927e72fea16f80b4a11603a9715354bba823cd88c","observation_id":"750604e3-84d7-45e5-b2f2-b2984d6fad7b","resolution":{"observed_at":"2026-08-14T13:25:38.985552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T13:25:38.988871Z","title":"Ad- versarial Machine Learning at Scale","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.988871Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4de8768676156a0283464f5830073057dbbde69c4ac142b95a3aad8b03a5ff69","observation_id":"0bd86c43-39bc-411b-b886-5d031322056d","resolution":{"observed_at":"2026-08-14T13:25:38.988871Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02976","last_updated":"2018-05-08T06:06:06Z","snapshot_observed_at":"2026-08-14T20:05:37.799786Z","submitted_at":"2017-12-08T08:20:45Z","title":"Defense against Adversarial Attacks Using High-Level Representation Guided Denoiser","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02976","snapshot_observed_at":"2026-08-14T13:25:38.992249Z","title":"Defense against Adversarial At- tacks Using High-Level Representation Guided Denoiser","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.992249Z"},"links":{"cited_paper":"/paper/1712.02976","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:bf016ca0f77e4eaafaf299b04e39038298c983c9941c4a99206f984a8df6c681","observation_id":"623011f2-8b7c-4e03-a0a5-82d66dd604b4","resolution":{"observed_at":"2026-08-14T13:25:38.992249Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.323537Z","title":"Feature pyramid networks for object detection","venue":null,"work_id":"1e438c58-f8b0-4f5e-8559-cf73fa7a289c","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.995623Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:79bbd24ec61a3dca5b023a9672cbfe6f5b67a977ee8e6ccf7adfa5ccbf5ecfec","observation_id":"4f97b6a6-6841-4f7e-8547-ba636dcd9439","resolution":{"observed_at":"2026-08-14T13:25:39.327301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.313269Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"5afa2ce9-dccf-4742-ac73-5a5a81e7c4de","year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.998765Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:f337f221ca323716bff227ec8477683c6e27495227b3dd10d968773f85e5b738","observation_id":"91a7bfd9-7e42-4a02-baa0-57f49fa5fcd4","resolution":{"observed_at":"2026-08-14T13:25:39.317001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.001787Z","title":"Rectified linear units im- prove restricted boltzmann machines","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.001787Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:718f866c91f78906b0a1a7a46ed224d3236fa210398b341a238a0b27f8533d1f","observation_id":"e9bd7efc-e219-4d71-8453-2982821b3675","resolution":{"observed_at":"2026-08-14T13:25:39.001787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.296879Z","title":"Deep neural networks are easily fooled: High confidence predictions for unrecognizable images","venue":null,"work_id":"da774bf8-7468-4af5-a3a8-d6ccd2e2f96d","year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.005060Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:3633b4d24b68dbdabebf9df40111f05abd0f8871566d90220b4da597054a295e","observation_id":"bdf27ead-270d-46d8-9d6e-df3058bd0397","resolution":{"observed_at":"2026-08-14T13:25:39.300408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.287036Z","title":"Osadchy, J","venue":null,"work_id":"d443aaec-e9ea-4ffe-b655-aea5c6635e44","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.008069Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:c3308847e7e267be7c2923977e88b81aea77b1a86590d991a8fe3f1831c3116d","observation_id":"f27a79b5-b208-4f2b-81d0-7a6518156e48","resolution":{"observed_at":"2026-08-14T13:25:39.290295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1602.02697","last_updated":"2017-03-19T14:50:18Z","snapshot_observed_at":"2026-08-14T22:11:11.917352Z","submitted_at":"2016-02-08T19:12:25Z","title":"Practical Black-Box Attacks against Machine Learning","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1602.02697","snapshot_observed_at":"2026-08-14T13:25:39.010983Z","title":"Berkay Celik, and Ananthram Swami","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.010983Z"},"links":{"cited_paper":"/paper/1602.02697","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:5e1986197f09341599f733bf0fa85bace824860ee53f5177606ea2606765da78","observation_id":"ae2c000e-3f91-48db-9b3d-db36e82f8d9e","resolution":{"observed_at":"2026-08-14T13:25:39.010983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.276234Z","title":"Practi- cal black-box attacks against machine learning","venue":null,"work_id":"165a5dc9-8672-4434-90a3-232559e4482d","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.014255Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4d32715f92e591fe84b67e6bc6cb5725b94dbb6126d8f9fd813c299ad2d1375d","observation_id":"81120976-eaeb-4910-9456-dbcca2e50fa8","resolution":{"observed_at":"2026-08-14T13:25:39.280217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.03814","last_updated":"2016-11-11T18:57:15Z","snapshot_observed_at":"2026-08-14T21:30:49.644267Z","submitted_at":"2016-11-11T18:57:15Z","title":"Towards the Science of Security and Privacy in Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.03814","snapshot_observed_at":"2026-08-14T13:25:39.017478Z","title":"Towards the Science of Security and Privacy in Machine Learning","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.017478Z"},"links":{"cited_paper":"/paper/1611.03814","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:e95d1c1574db3611bc1440903a7141f3b463b5cb2568d191e3af6025b0e9cf31","observation_id":"129234a1-422c-4177-beb3-a054a1e07010","resolution":{"observed_at":"2026-08-14T13:25:39.017478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02328","last_updated":"2018-07-06T06:50:03Z","snapshot_observed_at":"2026-08-14T20:06:11.188860Z","submitted_at":"2017-12-06T18:52:12Z","title":"Generative Adversarial Perturbations","version":3},"cited_work":{"arxiv_id":"1712.02328","doi":null,"metadata_source":"pith","pith_arxiv_id":"1712.02328","snapshot_observed_at":"2026-08-14T13:25:39.110266Z","title":"Generative Adversarial Perturbations","venue":"cs.CV","work_id":"367dd0db-9932-45ad-9bf3-952eaff10036","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.020788Z"},"links":{"cited_paper":"/paper/1712.02328","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4da0dab2a33d780c3c712f641b07d82793a4edac331955c36cacc0fbffd857b8","observation_id":"52ca9f99-e6ca-4f68-8cd6-e1bf1caca962","resolution":{"observed_at":"2026-08-14T13:25:39.114839Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.023949Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.023949Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:34258365f451eb233ac0a30a2f9dc6cc5d8d25399bc72fffbc65d53171138e15","observation_id":"a528de64-1f1c-421f-aba3-56965004b60b","resolution":{"observed_at":"2026-08-14T13:25:39.023949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-14T23:20:42.336514Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-14T13:25:39.026992Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.026992Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:ec083346a9bfd62fd636d6ba8af9db212ee5bb4a7c8fbaa8d7024563ee5d356c","observation_id":"8902c7f5-1964-47c0-9c57-a11cdbb8f2e1","resolution":{"observed_at":"2026-08-14T13:25:39.026992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.259420Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":"f8c95ddf-3eb3-4d37-a535-baacdd159521","year":2019},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.030019Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:083c4cafc46113c1389e939402b893534af1215cd81e3a6828e72ebe85e94f6e","observation_id":"500bbe2a-4117-417d-aa8f-6adf65451da9","resolution":{"observed_at":"2026-08-14T13:25:39.263326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T13:25:39.033114Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.033114Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:d6670954c02b2427a21bf24a922af4296e01a8f186f182dad28e6172225ad6a7","observation_id":"5b6c9da9-305f-42d8-8a11-3fc20d7256b1","resolution":{"observed_at":"2026-08-14T13:25:39.033114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.248570Z","title":"Deepface: Closing the gap to human-level perfor- mance in face verification","venue":null,"work_id":"5e38baca-b8bc-4b94-bd01-f2becaeef1f5","year":2014},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.036325Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:1e5f940dc33b2ae5ecf5a85ded3e364237a1f3300db82e8abb08f6eeffed086c","observation_id":"c5b3802c-e804-4aed-8ea3-2d4a4f876e2d","resolution":{"observed_at":"2026-08-14T13:25:39.252897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T13:25:39.039453Z","title":"Ensemble Adversarial Training: Attacks and Defenses","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.039453Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:37dae03ecc08dc7a876d9d9bb43ba7a6a9adc67b287bab59386335faefc377e5","observation_id":"543d0616-8b30-43c8-8e0b-2135525e724c","resolution":{"observed_at":"2026-08-14T13:25:39.039453Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:39.238690Z","title":"Attention is all you need","venue":null,"work_id":"d4b29a48-5a83-4b4b-9bf5-c781dbe65311","year":2017},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.042721Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:85c0e11d872bb7fba50d921c7fef83f1d15adcba81b9bce024fa0caa45fc5d19","observation_id":"a215c8e7-7465-40aa-b0ab-8e0bb2155056","resolution":{"observed_at":"2026-08-14T13:25:39.242103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-14T19:56:59.239473Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-14T13:25:39.045656Z","title":"Generating adversarial examples with adversarial networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:39.045656Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:4f83672df543b2a2a3cab83e1ba8a966574ba42d59c68cee58feb97c38d79a58","observation_id":"41aeddab-aa41-4f71-9dd7-a20b898a2b35","resolution":{"observed_at":"2026-08-14T13:25:39.045656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:25:38.940850Z","title":"IEEE Conference on , pages 248–255","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-14T13:25:38.940850Z"},"links":{"citing_paper":"/paper/1908.05185"},"observation_digest":"sha256:e497e37b3c063dcd2fb59d3349b6c7b4b9345451b030e28ba733388a59be9843","observation_id":"fc3c3e52-0423-403d-90f5-0026e3fffcd8","resolution":{"observed_at":"2026-08-14T13:25:38.940850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.05185","last_updated":"2019-08-14T15:59:21Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-14T14:05:05.459434Z","submitted_at":"2019-08-14T15:59:21Z","title":"Once a MAN: Towards Multi-Target Attack via Learning Multi-Target Adversarial Network Once"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":26,"verified_exact":1,"verified_fuzzy":10},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:1908.05185."}