{"as_of":"2026-08-16T10:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b261c4fbfdcaf4b182589130f2da2c43c43ed6293565e659cdad2c4bf6a2d1bf","coverage":[{"denominator":45,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":45,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:36:53.007232Z","state":"measured"},{"denominator":45,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":45,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.07000/citation-record","integrity":"/paper/1908.07000/integrity","json":"/paper/1908.07000/citation-record.json","paper":"/paper/1908.07000"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1902.06894","last_updated":"2019-04-03T15:22:51Z","snapshot_observed_at":"2026-08-16T06:02:15.880251Z","submitted_at":"2019-02-19T05:01:23Z","title":"There are No Bit Parts for Sign Bits in Black-Box Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06894","snapshot_observed_at":"2026-08-14T12:36:52.832821Z","title":"There are no bit parts for sign bits in black-box attacks","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.832821Z"},"links":{"cited_paper":"/paper/1902.06894","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:b76926ece82707122c85882c7da44e4c9d234009bf79548bfa77137df403d1a6","observation_id":"c927202f-c157-4e33-a552-378e96263446","resolution":{"observed_at":"2026-08-14T12:36:52.832821Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.542387Z","title":"GenAttack: Practical black-box attacks with gradient-free optimization","venue":null,"work_id":"1d303a43-cd56-4db9-81f4-db06da4e55f4","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.837640Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:50edeb4d12cca06ed5a42694a18f0cd87dd88b1a754500eb0b10f79b85d1a107","observation_id":"d4ea7c74-64a2-42b3-a2f2-1001a9f31e6a","resolution":{"observed_at":"2026-08-14T12:36:53.546145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.531431Z","title":"The shat- tered gradients problem: If resnets are the answer, then what is the question? In International Conference on Machine Learning, 2017","venue":null,"work_id":"70d31852-ca8f-4d7a-b049-ae2b536a0bed","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.841634Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:adf1c277b6132e0f0899d7006465945665094bab32c1e4ebca12929d2c5ddeed","observation_id":"e109382f-3116-4860-84c7-31f9588a92c2","resolution":{"observed_at":"2026-08-14T12:36:53.535285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.519965Z","title":"Exploring the space of black-box attacks on deep neural networks","venue":null,"work_id":"2ceaf34b-17ec-4d0b-a6ce-112563b28b7b","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.845470Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:27a1f490a71455dbf4c8441703a947606a4d88e218d7433927f71943976f0f2c","observation_id":"3bd64939-78aa-45e9-999c-8f006b177c8a","resolution":{"observed_at":"2026-08-14T12:36:53.523996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.507670Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","venue":null,"work_id":"58c1ab32-b169-49d4-84f1-e848dad1b25f","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.849379Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:94d338220baf981d7ff1876256c74fa69ccead533c5539584c0783996a85b4af","observation_id":"dc7fdef3-f343-406d-8e94-af075ac0fda6","resolution":{"observed_at":"2026-08-14T12:36:53.512298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1812.09803","last_updated":"2019-05-05T13:05:16Z","snapshot_observed_at":"2026-08-14T17:39:02.454835Z","submitted_at":"2018-12-24T00:48:31Z","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1812.09803","snapshot_observed_at":"2026-08-14T12:36:52.853734Z","title":"Guessing smart: Biased sampling for e fficient black-box adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.853734Z"},"links":{"cited_paper":"/paper/1812.09803","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:d0975fcca0952558ecdc2a372ff5362c47f4b22d0e5fd5618c938302d1f00cbb","observation_id":"f04b93b6-81e1-448e-b8d5-5aedf3beaafa","resolution":{"observed_at":"2026-08-14T12:36:52.853734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.496046Z","title":"Prototypical examples in deep learning: Metrics, characteristics, and utility","venue":null,"work_id":"d5fa86a0-1243-4e4b-93c4-7516b96219d1","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.857930Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:dcad19befe0fedb4386115c892e5cd2df369886e267a71650757d80beaa59145","observation_id":"fc6fd853-eb9d-44e5-9f2e-5b0677674755","resolution":{"observed_at":"2026-08-14T12:36:53.500086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.861583Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.861583Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:7e0f632061e5a3a2ae4e9fd50c0f7fe6b6e57e5ec393b79c0d8f9ad97dad0232","observation_id":"d2fd696c-816f-4239-a2b7-0f11c6337a96","resolution":{"observed_at":"2026-08-14T12:36:52.861583Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.02144","last_updated":"2020-04-28T01:20:45Z","snapshot_observed_at":"2026-08-14T16:52:11.462840Z","submitted_at":"2019-04-03T17:59:33Z","title":"HopSkipJumpAttack: A Query-Efficient Decision-Based Attack","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.02144","snapshot_observed_at":"2026-08-14T12:36:52.865399Z","title":"Boundary at- tack++: Query-efficient decision-based adversarial at- tack","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.865399Z"},"links":{"cited_paper":"/paper/1904.02144","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ccce591a21b9e53d8880203de2bdfb9ec7c01a985396ce2719001be599ad1956","observation_id":"9ed18ac7-1138-4ac8-973b-97ddc3540e03","resolution":{"observed_at":"2026-08-14T12:36:52.865399Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.477647Z","title":"ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models","venue":null,"work_id":"8055851f-7400-4e9f-9af5-c59cc2fb397e","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.869429Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:5250fa846b91185ed7c671a86ecce47b8531c67ba9f86ff4ee4834cc28eebfaf","observation_id":"d6fd34bd-dc6e-4741-898e-7e2d4393e16b","resolution":{"observed_at":"2026-08-14T12:36:53.481637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1907.05587","last_updated":"2019-07-12T06:12:18Z","snapshot_observed_at":"2026-08-13T00:57:55.508683Z","submitted_at":"2019-07-12T06:12:18Z","title":"Stateful Detection of Black-Box Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.05587","snapshot_observed_at":"2026-08-14T12:36:52.872996Z","title":"Stateful detection of black-box adversarial attacks","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.872996Z"},"links":{"cited_paper":"/paper/1907.05587","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:afd184d07af52d8e7b693b001223456043e411ecf3501dd313002fb00d038953","observation_id":"01cb798a-bf6b-49b7-972f-d280b6dc6689","resolution":{"observed_at":"2026-08-14T12:36:52.872996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.465444Z","title":"Query-efficient hard- label black-box attack: An optimization-based approach","venue":null,"work_id":"5557d2dc-aaac-468f-851a-e62a9deb1138","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.877114Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:157a0b28fa2925b117998803c9aebf6c3c1a5f633262bf39123d837dbbed02d5","observation_id":"1ad0d5e2-2ac9-4c73-be6b-b247ea88428e","resolution":{"observed_at":"2026-08-14T12:36:53.469840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.06919","last_updated":"2020-07-26T14:00:51Z","snapshot_observed_at":"2026-08-14T16:14:41.161467Z","submitted_at":"2019-06-17T09:40:32Z","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","version":3},"cited_work":{"arxiv_id":"1906.06919","doi":null,"metadata_source":"pith","pith_arxiv_id":"1906.06919","snapshot_observed_at":"2026-08-14T12:36:53.062297Z","title":"Improving Black-box Adversarial Attacks with a Transfer-based Prior","venue":"cs.LG","work_id":"efd3a54d-9add-4248-a54f-5a69c03e3a74","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.880865Z"},"links":{"cited_paper":"/paper/1906.06919","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ab533ba3a3d48ec43d6d0138366fbe139d23cc74fbf494a82b0a85a0680a722c","observation_id":"32d6c308-f560-4999-9f62-bd3d29239e50","resolution":{"observed_at":"2026-08-14T12:36:53.068868Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.453191Z","title":null,"venue":null,"work_id":"f728ac1c-30e2-49c1-b426-bd98e5f3479b","year":2009},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.885280Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:70685d845e8aa62ffd9f591243d08c077c8e1670a1b5e3239488f9489f22d0de","observation_id":"4fe6dc5f-e6e0-49fe-baba-351fddeae7b6","resolution":{"observed_at":"2026-08-14T12:36:53.457165Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.441869Z","title":"Boosting adver- sarial attacks with momentum","venue":null,"work_id":"72a4c18d-da5e-4467-b344-897da1f8cba4","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.888860Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:bacd45d9ac9ad9e7ec2a94e12b5cf9887677202998611c7582b5678799d203c6","observation_id":"42f09885-e64e-4ea6-a775-b8bf0ffb0e06","resolution":{"observed_at":"2026-08-14T12:36:53.445876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.430711Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"ebbbc7a3-cd1e-48ad-8df3-02f8bb196dbd","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.892665Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c267d77bddf705927f8f1b180155af887d2a9a723d36954e1ee19e3a49f428df","observation_id":"a97d8c20-bbf2-4c69-b000-496a2e92426e","resolution":{"observed_at":"2026-08-14T12:36:53.434611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.419221Z","title":"Explaining and harnessing adversarial exam- ples","venue":null,"work_id":"a4047235-f1ce-4b98-9b9a-f10065009014","year":2015},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.896727Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:baaf90fd81106e30826ef267e325eb3fb0aa15572072ad8b0040568a23a03a0b","observation_id":"086487d9-3d2a-4a45-963d-eadb0b61805f","resolution":{"observed_at":"2026-08-14T12:36:53.423102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.407987Z","title":"Simple black-box adversarial attacks","venue":null,"work_id":"a2745363-469f-4ad6-b2b0-a79bfce5acee","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.900496Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:318e52c08818589d038e18de06ddbac2ff65933569d597f3649ce462411ba3cf","observation_id":"f287cbf4-871d-49a5-813d-a4ea45c96756","resolution":{"observed_at":"2026-08-14T12:36:53.411820Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.904422Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.904422Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:63c7ab22b9b846a3d4107b1efaca1c498e35ee1686058be10ab2e93aa0b6d552","observation_id":"326f844e-c81f-4ff3-92ec-738384920d05","resolution":{"observed_at":"2026-08-14T12:36:52.904422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.389939Z","title":"Densely connected convolutional networks","venue":null,"work_id":"e2c44fcd-8c1b-4f50-828e-8f74e3ce640e","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.908118Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c9f19760144c0235e94b87db2d87edbd36ab09512aa2f3ee89aebd5c6d6afe67","observation_id":"dcf56910-4f0e-4834-9c7d-06c41d5c8eb7","resolution":{"observed_at":"2026-08-14T12:36:53.393899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.378482Z","title":"Black-box adversarial attacks with limited queries and information","venue":null,"work_id":"0e7a70f0-8966-412e-9ef7-77f39dc02ed2","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.911776Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:6aeb634acf10c881f672e0c5aad120b33e32f1e71bedf1189b68bb79e910453e","observation_id":"0b5d2469-7566-42d2-845f-7135dd2f739b","resolution":{"observed_at":"2026-08-14T12:36:53.382700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.366685Z","title":"Prior convictions: Black-box adversarial attacks with bandits and priors","venue":null,"work_id":"617a8a46-267b-4cf1-9896-79b1ef72d335","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.916086Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:1589f077e8d39755ace8da0899e0ec75e8053446b10cb52100fe8cc2a0495583","observation_id":"7aed996f-1ff6-410e-9590-b402a7a14336","resolution":{"observed_at":"2026-08-14T12:36:53.370600Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.355453Z","title":"Learning mul- tiple layers of features from tiny images","venue":null,"work_id":"58f5fea0-593d-46a2-a7d5-fede9701ce46","year":2009},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.920675Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:cfc6d6ed44e893be32e4d6c0ad0c0909eeb977176f22a934d4fdc044b2a5b0b2","observation_id":"cdea9880-7efb-42b7-8cb4-ceeeb74cc6de","resolution":{"observed_at":"2026-08-14T12:36:53.359414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.344244Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"6dbaaed1-e9a7-4216-be06-efad34e339c0","year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.924599Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:b3a19fe134261797b56ec1db0167b63b417b8c30a6258746f8e9b8fded7d8b45","observation_id":"3e160da5-1a21-4812-abd6-20d324a1c4c9","resolution":{"observed_at":"2026-08-14T12:36:53.348236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.332295Z","title":"The MNIST database of handwritten digits","venue":null,"work_id":"a1ceff54-9db7-46c1-83be-8f3966ecab18","year":1998},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.928478Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:8868b427dd0d53ab0d76075c20fd0037eb3562d4a05b17048529816243b26248","observation_id":"7305ea39-7613-4f7c-af0e-07a0a6a7cf97","resolution":{"observed_at":"2026-08-14T12:36:53.336719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.320755Z","title":"Gradient-based learning applied to document recognition","venue":null,"work_id":"4cde7588-310b-442b-8387-34d2db8c8357","year":1998},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.932263Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:ae397a6f597e47f2b4dacd858444d6be3b07e5bddf8fb960b87794b300ec1315","observation_id":"3479dbf5-0696-4d6f-922f-ebe8fd56af6b","resolution":{"observed_at":"2026-08-14T12:36:53.324947Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.308618Z","title":"Query- efficient black-box attack by active learning","venue":null,"work_id":"f36297e8-83c3-4265-89d9-d9ae36654751","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.935816Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c88af8676bcd41cf5d4d852fb2cb0ec6dc2da377d735ff316ac1bb90113ee77b","observation_id":"f224a487-187f-4656-ad18-ec9655c3b44f","resolution":{"observed_at":"2026-08-14T12:36:53.312421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.296937Z","title":"Nattack: Learning the distributions of adversarial examples for an improved black-box attack on deep neural networks","venue":null,"work_id":"95543a19-b2ac-4a9a-a640-9eae1e204a41","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.939632Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:bbcef892d47cc83b213664c7abd5403641aeaf9f861c58b52b622aaad12dd565","observation_id":"9c1111c6-8f45-4b43-b49c-448d630ec465","resolution":{"observed_at":"2026-08-14T12:36:53.300996Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.285100Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":"485b694d-5364-4670-bcac-12614a1684ea","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.943422Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:587a244628882ee3fc68d24af8e6a493d0c09332c3cec6b349187013863e9c5a","observation_id":"fe8a15ff-c5e3-4887-80b8-4da9fa8df770","resolution":{"observed_at":"2026-08-14T12:36:53.289136Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.273371Z","title":"CIFAR10 adversarial examples challenge","venue":null,"work_id":"be189a18-9d89-4653-94e4-bc30e6ce7ec7","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.947370Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:77e6e16c8cc30f1aee24f6dc07d5db2e963cf1ae6de8b3121331941b2e08a6ba","observation_id":"2bff7b8f-6b51-4580-b918-07f75d3b2b4d","resolution":{"observed_at":"2026-08-14T12:36:53.277405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.260939Z","title":"MNIST adversarial examples chal- lenge","venue":null,"work_id":"faf8b753-f8d7-4ed5-beeb-893d414a0ee4","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.951025Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:466d6cef46b93413ac79a69db798951e864e6a3f2f6ccd0d7388ee3c44cafe06","observation_id":"80e30964-fd15-4b45-9a05-49ae222ba92f","resolution":{"observed_at":"2026-08-14T12:36:53.265233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.954763Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.954763Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:51a803db0c639aa8172ea6377cbd1727845f866fdf76fa8e67a0bf7e509eff74","observation_id":"3b4f8312-fdc3-4c1e-a45e-f2e1a3ec97e9","resolution":{"observed_at":"2026-08-14T12:36:52.954763Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.240676Z","title":"Parsi- monious black-box adversarial attacks via efficient com- binatorial optimization","venue":null,"work_id":"54bc2c35-5a16-490a-8262-e683b5f482b0","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.959262Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:b97057a908b4228fc6810bdc488288393fa34e3146b2b30a3d6e26e08efa26be","observation_id":"bf956622-d3e8-4db0-bcae-2cf776dc3e18","resolution":{"observed_at":"2026-08-14T12:36:53.245748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.228354Z","title":"Simple black-box adversarial perturbations for deep net- works","venue":null,"work_id":"0ff5058f-13f7-4caf-bcc4-2e7f387b0e83","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.963504Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:2e80ed39fdaf4d904a86e6b6b10496d28b4c5948301749c5d4ceaf7663029538","observation_id":"690e5be7-7f52-498d-badf-c58f651d0a84","resolution":{"observed_at":"2026-08-14T12:36:53.232124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-14T12:36:52.967237Z","title":"Transferability in machine learning: from phe- nomena to black-box attacks using adversarial samples","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.967237Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:19716acedbd7902d6a463a8935aea0d757d9822b00545b333015650054e77b25","observation_id":"53a9e5ad-6222-46f5-9c8d-a341b7538e1f","resolution":{"observed_at":"2026-08-14T12:36:52.967237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.216377Z","title":"Practical black-box attacks against machine learning","venue":null,"work_id":"d4494534-d0c2-47a8-8591-d06e5abc3a67","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.971349Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:3b603d0f54e442037043bb26585362762c8afc0da8004343e526f20d2a45d29e","observation_id":"c1d870e2-5fbd-4246-8cc7-d5a5d369bbe2","resolution":{"observed_at":"2026-08-14T12:36:53.220861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.204338Z","title":"Very deep con- volutional networks for large-scale image recognition","venue":null,"work_id":"713aac0b-8c98-48e9-97f7-a63b0519e608","year":2015},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.974940Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:55b43bf94896dfc061d89d79159bdecb225e2ddfed6489e31bc66c302b59ba30","observation_id":"374fe4ae-b579-445d-8ace-4db6db4cb515","resolution":{"observed_at":"2026-08-14T12:36:53.208295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.192862Z","title":"Query-limited black-box attacks to classifiers","venue":null,"work_id":"c801b57b-2295-474d-ae3c-9b3a9b178b8d","year":2017},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.978925Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:f1e12bc8dc34d47d4d24422ed4b7e5c4be3e0cc6b94d678d13437f65481f27c7","observation_id":"a85e7d22-a2ac-45f3-961d-1ed8ba264a5a","resolution":{"observed_at":"2026-08-14T12:36:53.196961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:52.982325Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.982325Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:c8639fddba4eb17a8505c536540ecf4f047b3ede6bf701044f69dbef8f81b990","observation_id":"b9324eae-71e1-4226-bb58-bb724fec0d5a","resolution":{"observed_at":"2026-08-14T12:36:52.982325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1805.07820","last_updated":"2019-08-20T03:34:24Z","snapshot_observed_at":"2026-08-14T19:13:13.171258Z","submitted_at":"2018-05-20T20:04:09Z","title":"Targeted Adversarial Examples for Black Box Audio Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1805.07820","snapshot_observed_at":"2026-08-14T12:36:52.985909Z","title":"Targeted adversarial examples for black box audio systems","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.985909Z"},"links":{"cited_paper":"/paper/1805.07820","citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:7f062e50897e235bb58a4e1910353a0876c486493e8ae16c9161bd53d90b1cdf","observation_id":"82248e7a-0a14-4674-9a55-67d9c81a6dee","resolution":{"observed_at":"2026-08-14T12:36:52.985909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.172011Z","title":"En- semble adversarial training: Attacks and defenses","venue":null,"work_id":"059781aa-cf7f-40dc-ad6c-8f30359f4d57","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.991230Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:e9b85fa7599ac1d6a5f0e5557f75f215b6b0493ff3595c437d5967bc8572fe44","observation_id":"4c645395-f339-4df5-baa7-9bfd8498b173","resolution":{"observed_at":"2026-08-14T12:36:53.176011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.158872Z","title":"Robustness may be at odds with accuracy","venue":null,"work_id":"dc52be1e-030c-4c5e-a263-691fdfa96357","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.995260Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:0cc5373edeb8d6039df4ae8a5b413b665efea2f7542e01ea7eb17b1d3df3bd1f","observation_id":"c2f692a0-a2b1-4605-9e63-5a29e648a3fb","resolution":{"observed_at":"2026-08-14T12:36:53.163858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.144793Z","title":"Autozoom: Autoencoder-based zeroth order optimization method for attacking black-box neural net- works","venue":null,"work_id":"be720109-e1f4-4172-b6ac-419b35fac688","year":2018},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:52.998751Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:0425aae71a3b23c23eefde1a31d09db4e4407feca90faddec91f0f89d3cc41e2","observation_id":"048afd41-9abb-4e3a-99f2-4c2efccdd58d","resolution":{"observed_at":"2026-08-14T12:36:53.149693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.132961Z","title":"Natural evolution strategies","venue":null,"work_id":"a4a0d4b2-c325-4ba1-a1a7-ef62d52190e0","year":2008},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:53.002526Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:d197e153089da6aeec7fbd6fa547161ea45ce150cf4f045d3d8006e094c1ca25","observation_id":"1f9905f0-f2ac-4035-8876-610bed5b0a2f","resolution":{"observed_at":"2026-08-14T12:36:53.137103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:36:53.120659Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":"6bd6aeba-c7a4-4ee3-88e1-afcb012f6d6e","year":2019},"citing_paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","version":3},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-14T12:36:53.007232Z"},"links":{"citing_paper":"/paper/1908.07000"},"observation_digest":"sha256:32dd3420d5ee45b41f8b1596b1abddbdc093e5b0ae4d1bd208ef26ac1708e504","observation_id":"a441e8b5-9d45-4e8a-85bc-eee9c9f9a129","resolution":{"observed_at":"2026-08-14T12:36:53.124658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.07000","last_updated":"2019-12-02T01:12:23Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-14T12:26:56.193715Z","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries"},"reference_resolution":{"displayed":45,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":1,"verified_fuzzy":33},"total_outbound_references":45},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 45 of 45 outbound references and 0 inbound Pith citation observations for arXiv:1908.07000."}