{"as_of":"2026-08-16T19:05:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:dafa98d175442ad5efa43ecd4b49d5ce9c749b9cf2743092c42ad880430a06ca","coverage":[{"denominator":10,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":10,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:44:43.081462Z","state":"measured"},{"denominator":11,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":11,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-27T01:38:39.015952Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-03T20:08:56.070149Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"cited_work":{"arxiv_id":"1908.06566","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"1908.06566","snapshot_observed_at":"2026-07-03T20:08:56.070149Z","title":null,"venue":null,"work_id":"78e28ef5-3dbb-4383-8a28-175d0bb0d178","year":2019},"citing_paper":{"arxiv_id":"2606.17540","last_updated":"2026-06-16T05:38:26Z","snapshot_observed_at":"2026-08-15T22:41:04.860667Z","submitted_at":"2026-06-16T05:38:26Z","title":"TaFD: Threat-Aware Frequency Decoupling for Adversarial Robustness against Heterogeneous Attacks","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-06-27T01:38:39.015952Z"},"links":{"cited_paper":"/paper/1908.06566","citing_paper":"/paper/2606.17540"},"observation_digest":"sha256:e3d2b9ebfc2d3078a8eda877b242f1e27268bfd8f411b199b343becc7601376c","observation_id":"155f69ec-7242-4896-89f2-3454bed1403d","resolution":{"observed_at":"2026-07-03T20:08:56.071986Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/1908.06566/citation-record","integrity":"/paper/1908.06566/integrity","json":"/paper/1908.06566/citation-record.json","paper":"/paper/1908.06566"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.211260Z","title":"Ijcai-2019 alibaba adversarial ai challenge","venue":null,"work_id":"14f2014f-eca3-4809-a8d5-a9030c696f30","year":2019},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.046002Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:5408315224bbb8fa9cd0fe90303d5c54a3a0b43767e78bf33556a887c1c25bab","observation_id":"b5f7ebba-ade3-4759-a58f-62997f19ea48","resolution":{"observed_at":"2026-08-14T12:44:43.215449Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.200002Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"582d9ead-ddf1-4665-b23f-b65747e7da0b","year":2018},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.050832Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:cbc06962c9d2cfc8d481bb881e83ffafda02665c3b64b1f5881a7cbc02970ea2","observation_id":"6ddfbfeb-ea7b-4e69-b16d-a8803e9a7bee","resolution":{"observed_at":"2026-08-14T12:44:43.204017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.189204Z","title":"Keeping the bad guys out: Protecting and vaccinating deep learning with jpeg compression","venue":null,"work_id":"0fe50820-051f-47ed-9c34-28cedee5206a","year":2017},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.054640Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:1d516c4e197194545e5846e574270209efa8a07eb6922335f867c9cbfe698781","observation_id":"88244ad0-87c0-4fa6-83cc-c6d82bca8ef0","resolution":{"observed_at":"2026-08-14T12:44:43.193044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.177108Z","title":"Imagenet-trained cnns are biased towards texture; increasing shape bias improves accuracy and robustness","venue":null,"work_id":"cc7ae48e-4b7e-4cf0-8dd6-bda03a0311c5","year":2019},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.058491Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:4dafa0d104fc11c294a31415acfcf346b7053349576ae801ba2cf173494e32cb","observation_id":"922be6b4-10b6-4c2d-9c6e-671949ba1221","resolution":{"observed_at":"2026-08-14T12:44:43.181065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.164908Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"3f170fb8-c33f-4d72-8c54-e2ced4b6dcfc","year":2015},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.062254Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:6efe2f75f0491bf368a6b7aba40a2a416d02c2ad891240d3ba9dd5ab33386081","observation_id":"51c1a07f-0798-48ae-a94e-d00b29052e59","resolution":{"observed_at":"2026-08-14T12:44:43.168968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.153706Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"a39f85d0-eb6e-4d9a-a2df-5d2ba82ebb90","year":2018},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.066291Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:5ae09a256704ef47a4ae80a1e5ecc66316d5d49c2110139a0ccfbb9ca1065a31","observation_id":"dc8e1bea-0948-4b67-9b60-87308b4070e3","resolution":{"observed_at":"2026-08-14T12:44:43.157606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.142324Z","title":"Intriguing properties of neural networks","venue":null,"work_id":"b1bc9571-78dd-468d-85f1-c4d98b5387c5","year":2014},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.070290Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:2a5e08389d86ddafdc032eff8668b5bdeaa1719eda56a8a2b693a07413a61694","observation_id":"678da8d3-f011-4f09-b596-2321249070ca","resolution":{"observed_at":"2026-08-14T12:44:43.145972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.129649Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks","venue":null,"work_id":"d908f7b5-83bc-43bc-bd31-e2892b61376f","year":2018},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.073771Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:87172dc392ffd4d58a179ff8d2dbf6870dc27fc4a3397753dec3d5cc0c781efe","observation_id":"2a689d60-04b8-4d18-84ec-769d0e5623b0","resolution":{"observed_at":"2026-08-14T12:44:43.133592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.116746Z","title":"Theoretically principled trade-off between robustness and accuracy","venue":null,"work_id":"ddf83844-2300-4c8f-b5f6-0f3c54138fcc","year":2019},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.077681Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:3af1358ccae521c009d571043330497e357b2684574f177e66dfc24bd5645e04","observation_id":"72fc61f8-074d-420e-9d7f-80adb43bc12c","resolution":{"observed_at":"2026-08-14T12:44:43.122037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:44:43.081462Z","title":"write newline","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components","version":3},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-14T12:44:43.081462Z"},"links":{"citing_paper":"/paper/1908.06566"},"observation_digest":"sha256:7242f010eec5b1889a633d78a724afa78e794dc160655d1e706a03761c5fa8bf","observation_id":"eb57933b-546e-4dad-a152-2431d6d31a53","resolution":{"observed_at":"2026-08-14T12:44:43.081462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.06566","last_updated":"2019-09-03T09:00:46Z","latest_version":3,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T02:25:05.040524Z","submitted_at":"2019-08-19T02:43:35Z","title":"Adversarial Defense by Suppressing High-frequency Components"},"reference_resolution":{"displayed":10,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":0,"verified_fuzzy":9},"total_outbound_references":10},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 10 of 10 outbound references and 1 inbound Pith citation observation for arXiv:1908.06566."}