{"as_of":"2026-08-16T18:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:e1824476d4c3e2689a2bf1971e181a4d184a3d6b7525164e3105eb9b41cabf12","coverage":[{"denominator":30,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T13:22:56.449031Z","state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.05195/citation-record","integrity":"/paper/1908.05195/integrity","json":"/paper/1908.05195/citation-record.json","paper":"/paper/1908.05195"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.862962Z","title":"Arnab, O","venue":null,"work_id":"55577f7e-5a88-40a7-8187-7ecba02dc3b1","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.326557Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:45ac73bcabb34fdace2adea22ac3f21affe0a2e6e23b2c09a0fff4168c92604c","observation_id":"12b7391c-12da-4820-a983-f75da3a06d5b","resolution":{"observed_at":"2026-08-14T13:22:56.867597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.849814Z","title":"Carlini and D","venue":null,"work_id":"0ac27bed-d397-4d85-a968-9ebd47b4964a","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.331122Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:f75fdee93b8e50f575f6984feacd7b8718f6571191bab3ff19847f5a8d76cbbc","observation_id":"63279bbe-1a28-4015-b5a1-9239474a2314","resolution":{"observed_at":"2026-08-14T13:22:56.854053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.335049Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.335049Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:40e640b5720a4d5f09fb10d802a0f8bc7e51e42eae248cec6b28f5fa3fff6988","observation_id":"bdd79444-90f0-41be-891c-604f01ffb478","resolution":{"observed_at":"2026-08-14T13:22:56.335049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.822670Z","title":null,"venue":null,"work_id":"2f9a305d-8288-4360-a083-bfa66e3f29ec","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.338974Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:4ce9ae8c08fa18ee7ac9f3754bb57394882634c27491592ec88c507590954898","observation_id":"3c5fbb0e-9d7d-4ef8-a711-23b4d875fe87","resolution":{"observed_at":"2026-08-14T13:22:56.826712Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.810652Z","title":"Cisse, P","venue":null,"work_id":"8b8abbe9-936c-4323-b587-3e47ea21eee9","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.342865Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:6950e12b7965e10cd6be5507f03ca8e7152210f7da73c438a9cf014bfd6bf85d","observation_id":"0e529449-0a43-4c36-9314-0fbc1d351f11","resolution":{"observed_at":"2026-08-14T13:22:56.814769Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.798080Z","title":"Elsayed, D","venue":null,"work_id":"ea648bd7-93a1-49d1-bf05-893bcf91290c","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.347508Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:cfdb716471ed2b24a471819c5de6cf21abec0e452529a61bab426491c7a4ff58","observation_id":"1537cae9-6128-4f0a-8eb4-2d4a3283ac9b","resolution":{"observed_at":"2026-08-14T13:22:56.802655Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.785645Z","title":"Everingham, L","venue":null,"work_id":"c9b16b41-add8-4467-ac85-48daa0c229b1","year":2010},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.351601Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:f6f936651aae31d09f570c16da3a6a742792f2f9a68dc3b1e2e71f6152f08772","observation_id":"d28d7bc3-b028-4adc-806e-f3b9adb624fd","resolution":{"observed_at":"2026-08-14T13:22:56.789324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.773385Z","title":"Eykholt, I","venue":null,"work_id":"739a8463-b111-4fce-bb8f-dbc6f90cf56d","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.355308Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:29f05e1d0c5ffc1937dcda3d148aa9be5e17e979fa0fa0177d5717772851c367","observation_id":"29b9b4e6-6f33-47a5-b748-75c508ea1852","resolution":{"observed_at":"2026-08-14T13:22:56.777228Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.761115Z","title":"Eykholt, I","venue":null,"work_id":"ab4232e3-cf46-4dad-8a1c-0a870b714798","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.359311Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:1a48366cb9434511d5461c47588d5dabd0b8b3bff146273f344ec997aee37175","observation_id":"cfc5bc23-c5fd-4fc5-a07e-fac7adb5cb50","resolution":{"observed_at":"2026-08-14T13:22:56.765368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.05296","last_updated":"2019-02-04T06:03:22Z","snapshot_observed_at":"2026-08-14T19:25:55.930853Z","submitted_at":"2018-04-15T02:33:08Z","title":"Adversarial Attacks Against Medical Deep Learning Systems","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.05296","snapshot_observed_at":"2026-08-14T13:22:56.363578Z","title":null,"venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.363578Z"},"links":{"cited_paper":"/paper/1804.05296","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:22e3f29a8c16eb9eee5dd0d9edd67c47a7bf4dbd1c4d3c2525ad72baf26254f8","observation_id":"abfd2c4c-8145-45fd-8a85-038f1480a197","resolution":{"observed_at":"2026-08-14T13:22:56.363578Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.748326Z","title":"Goodfellow, J","venue":null,"work_id":"c298866b-8de1-440e-a181-02d2e2817d25","year":2015},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.368411Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:b38733c7e6773d4d9d2cdb360f796a0cfdf03bb2b4a2cd73d980a2267ba9066c","observation_id":"4f245247-1526-475c-a7ef-e8da9bf7c3ca","resolution":{"observed_at":"2026-08-14T13:22:56.752183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.734945Z","title":"Hariharan, P","venue":null,"work_id":"09c61487-11bd-4128-90d9-499fa3cb0b27","year":2011},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.372363Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:7e14d3035f607fb6700906b4a9a4b79136d6ff6e04a4831dbb52e52d84962b6e","observation_id":"cbb52d46-fc10-4264-8897-941eaee7c77a","resolution":{"observed_at":"2026-08-14T13:22:56.739479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T13:22:56.376169Z","title":"Kurakin, I","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.376169Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:4ab066c810c344bde4707a575ade7a2082d4cb773645c788be7ea81eddd8d158","observation_id":"3344f88e-9e50-4305-bf9b-fc53fc03dda1","resolution":{"observed_at":"2026-08-14T13:22:56.376169Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.722909Z","title":"Kurakin, I","venue":null,"work_id":"8df6262d-ee4f-4389-9111-b701cab89de3","year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.380577Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:98d5c7c6de2cd7f96df8bdaf147a22a7a9b647478499980b6b2883b63aeed5e0","observation_id":"92a4ff16-d453-45d8-bb54-2e39a2cb71e1","resolution":{"observed_at":"2026-08-14T13:22:56.726838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.711282Z","title":"Meng and H","venue":null,"work_id":"c082ccf6-eec6-4cd5-bd2e-15871f6907c0","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.384111Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:642eb86b6cf0df295a5c9509594e3482eb5ae5f87deb1d9d412b86af217d512a","observation_id":"963b0f8c-e9e1-4cb9-af8e-2ddcdbc093ac","resolution":{"observed_at":"2026-08-14T13:22:56.714913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.699657Z","title":null,"venue":null,"work_id":"ac810117-ef14-4e12-8fd8-4e73476770a9","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.387844Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:8decc76d70c724b2dc655a75ddfe5aa12a4520269ced6a9b45377fb60b837439","observation_id":"d52a575c-bd3a-475a-a972-27f16b4ec7c5","resolution":{"observed_at":"2026-08-14T13:22:56.703020Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.687556Z","title":"Moosavi-Dezfooli, A","venue":null,"work_id":"1f8678c9-9d26-4d4d-be11-fc8598f2ce50","year":2016},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.393028Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:d941811f589898a25ef0ab179c6cf26a92efa0d6312e08729ee4e632538cae9a","observation_id":"9baa33c9-a2c8-44f4-932f-49cd17e46028","resolution":{"observed_at":"2026-08-14T13:22:56.691330Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-14T13:22:56.397569Z","title":"Papernot, P","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.397569Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:51ab1744373a898b1dee103c2d88437c407832fc3b4f81d6e47e8db670adac79","observation_id":"5b8db197-5314-4b47-85c6-15599381f58f","resolution":{"observed_at":"2026-08-14T13:22:56.397569Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.675986Z","title":"Papernot, P","venue":null,"work_id":"ba2887ca-b1a5-41f8-8a1e-adce49a1b633","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.401945Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:54fa4fa6f06097000ec129e3d53a801bf781f91628c5c771a1902e2769f8101d","observation_id":"d560a1b0-5241-474d-a885-d4a002094eee","resolution":{"observed_at":"2026-08-14T13:22:56.679946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.658092Z","title":"Papernot, P","venue":null,"work_id":"1362a6d4-b1c1-4378-b6f4-da452f8ab2a7","year":2016},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.405691Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:a96a871eaeec9f2e5a0023d0bbf25b793d1b0dfeef0065a7e8540e61eb83f232","observation_id":"2e9dc236-4390-4381-908b-449c49793785","resolution":{"observed_at":"2026-08-14T13:22:56.663614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.639649Z","title":"Papernot, P","venue":null,"work_id":"9f6dab0e-6d3a-4be1-a7ad-5f15d52ad890","year":2016},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.410145Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:e53836b2bf81a0b9c8e17fe8b6abb32c27667cff963685aef04340d97588b6b3","observation_id":"45f91f9e-c493-4052-861f-c05a85a2a76f","resolution":{"observed_at":"2026-08-14T13:22:56.643889Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.06605","last_updated":"2018-05-18T00:20:52Z","snapshot_observed_at":"2026-08-15T23:59:07.582902Z","submitted_at":"2018-05-17T05:38:55Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.06605","snapshot_observed_at":"2026-08-14T13:22:56.413865Z","title":"Samangouei, M","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.413865Z"},"links":{"cited_paper":"/paper/1805.06605","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:a20feecccd917838055113a2d7fe677b7c5aab5bb3714f6a4e2149f6c92b6a9b","observation_id":"c2a4809d-bcfe-4f23-9b13-eccc92d52662","resolution":{"observed_at":"2026-08-14T13:22:56.413865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06430","last_updated":"2018-05-31T20:05:27Z","snapshot_observed_at":"2026-08-14T19:44:46.968870Z","submitted_at":"2018-02-18T19:39:28Z","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.06430","snapshot_observed_at":"2026-08-14T13:22:56.418684Z","title":"Sitawarin, A","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.418684Z"},"links":{"cited_paper":"/paper/1802.06430","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:95612ce3025fc31d54986ef7cbbc163b44bff71de5c5fe6ec18362a6bf40cdc5","observation_id":"93f87d20-4ad9-43b0-a6e4-6186b4583e3a","resolution":{"observed_at":"2026-08-14T13:22:56.418684Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.625252Z","title":null,"venue":null,"work_id":"8c6d08c9-fa3c-4e68-bd59-e3e4087151f0","year":2019},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.422716Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:7029ba280818be0bb2a42d5342a7a2e352d7334ebe6c08d342a81b2d408d0bb1","observation_id":"55523dd3-ef9e-46b5-baac-33c791800afa","resolution":{"observed_at":"2026-08-14T13:22:56.629566Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.612051Z","title":"Szegedy, W","venue":null,"work_id":"1545406e-8b10-4374-b30e-bf9739ab83eb","year":2014},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.428153Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:fac88a445a1db26c97af4c8c2f07c3e65ee8c6cc1eb61336e1ecc3fb324a8611","observation_id":"32764155-4281-4052-b301-e97f2ba1d7cd","resolution":{"observed_at":"2026-08-14T13:22:56.616372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.599380Z","title":null,"venue":null,"work_id":"d68bf789-e19f-444e-bcdd-eb0cd003b81c","year":2019},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.432279Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:a4499f084e7d365a83e936a010dd19737e1960bb7490fe7db22f31489db738fb","observation_id":"8144d4c6-16f0-40dd-9279-10603fa5ba7d","resolution":{"observed_at":"2026-08-14T13:22:56.603441Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T13:22:56.436261Z","title":"Tram `er, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.436261Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:0829db321670a8ce95105ef75b075eea6679ae108f4be45303e88add5e08fbd8","observation_id":"e92b32fc-fa8a-4bbf-ab68-e4d469684795","resolution":{"observed_at":"2026-08-14T13:22:56.436261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.586439Z","title":"Vincent, H","venue":null,"work_id":"2109e9dc-9788-48ee-8780-59d0d6885a34","year":2010},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.440613Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:e661882db688cef2929e89b83f9b588e6a6bd1fe291f0ae367be69b709940a42","observation_id":"3e42e788-0f45-42ce-b586-07b65c7355d1","resolution":{"observed_at":"2026-08-14T13:22:56.590367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.574125Z","title":null,"venue":null,"work_id":"adbcf868-55dd-494d-82cc-1bb354bdff59","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.444567Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:50848829b91709f7c9a892529d1f7137649f33624148d5e3b8f37e0767ea0ab9","observation_id":"8f0da519-63b7-4b3c-8d75-119f1c1c5f81","resolution":{"observed_at":"2026-08-14T13:22:56.578471Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T13:22:56.557595Z","title":null,"venue":null,"work_id":"db500594-07b2-4be6-9d86-36fee569cb16","year":2017},"citing_paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T13:22:56.449031Z"},"links":{"citing_paper":"/paper/1908.05195"},"observation_digest":"sha256:214486077cc46426befddbfb4fbf2f7d04d90fa5ebec3da136fb2cafab7a56a0","observation_id":"9b3bb1d8-9bbc-4f92-81e7-55a6b5209957","resolution":{"observed_at":"2026-08-14T13:22:56.564302Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.05195","last_updated":"2020-04-07T07:01:28Z","latest_version":4,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T10:45:28.606645Z","submitted_at":"2019-08-14T16:13:00Z","title":"DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation"},"reference_resolution":{"displayed":30,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":13,"verified_exact":0,"verified_fuzzy":17},"total_outbound_references":30},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 0 inbound Pith citation observations for arXiv:1908.05195."}