{"as_of":"2026-08-15T13:09:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:306dbfe94cfe5bed4af10ad9386eb4c9ddea9455d8cc84e31580cd66080c3f1f","coverage":[{"denominator":23,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":23,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T12:29:34.990371Z","state":"measured"},{"denominator":23,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":23,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.07116/citation-record","integrity":"/paper/1908.07116/integrity","json":"/paper/1908.07116/citation-record.json","paper":"/paper/1908.07116"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-14T20:45:49.587140Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-08-14T12:29:34.898564Z","title":"Synthesizing robust adver- sarial examples","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.898564Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:9aacc6d807e4dff3926095456b9b37cabc930d4a24c9f56815dc04333800b2dc","observation_id":"7558958b-093b-4b57-bb37-589b3fe27e77","resolution":{"observed_at":"2026-08-14T12:29:34.898564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.284082Z","title":"Towards evaluating the robustness of neural net- works","venue":null,"work_id":"131e4f17-11bf-4ac0-8ea6-de331f71a39a","year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.908638Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:03a2e72c6f05643f7cfaed91937a65ae0078eab686d3f917e23eeb9be4f01ce4","observation_id":"1fb0a148-3352-4f86-9456-c8b3899d7a9d","resolution":{"observed_at":"2026-08-14T12:29:35.287792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1709.04114","last_updated":"2018-02-10T04:49:12Z","snapshot_observed_at":"2026-08-14T20:33:45.650005Z","submitted_at":"2017-09-13T02:40:59Z","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1709.04114","doi":null,"metadata_source":"pith","pith_arxiv_id":"1709.04114","snapshot_observed_at":"2026-08-14T12:29:35.094276Z","title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples","venue":"stat.ML","work_id":"3d72c21b-2964-4840-acd4-87e7e90f4b32","year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.912657Z"},"links":{"cited_paper":"/paper/1709.04114","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:856696f11a289bec282f984fca7a6bef22fa138c5a91d35d65bb03e089f99f50","observation_id":"135e4f66-8b8e-4c26-aba5-3209dccb82a9","resolution":{"observed_at":"2026-08-14T12:29:35.100559Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.272367Z","title":"Dhillon, Kamyar Aziz- zadenesheli, Jeremy D","venue":null,"work_id":"aa84ee40-acf4-4bbf-bcf0-d2119fc6b00f","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.917745Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:7a1ac237c50649562320404c98f2c781cefe47cd2ef4990ab89be2957c2de1c0","observation_id":"f12d26b7-b430-4982-9359-7b08ef50cf2f","resolution":{"observed_at":"2026-08-14T12:29:35.276543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T12:29:34.926968Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.926968Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:292c44ff113ac8c2befbb8dccc8bbf2e1ff6f99fd94851e24b18cc7761b71d5b","observation_id":"de49af6e-0c62-450e-b882-80c4ebf280d7","resolution":{"observed_at":"2026-08-14T12:29:34.926968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.00673","last_updated":"2018-08-01T00:44:31Z","snapshot_observed_at":"2026-08-14T20:07:36.575817Z","submitted_at":"2017-12-02T22:26:12Z","title":"Towards Robust Neural Networks via Random Self-ensemble","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.00673","snapshot_observed_at":"2026-08-14T12:29:34.947794Z","title":"Towards robust neural networks via random self-ensemble","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.947794Z"},"links":{"cited_paper":"/paper/1712.00673","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:6a2640b9389069b3f8c018238fe994a9eed12d0282ef8a301b8db4f7a907c9aa","observation_id":"d2890338-764f-446e-8123-e03fe229b0a2","resolution":{"observed_at":"2026-08-14T12:29:34.947794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-14T12:29:34.951955Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.951955Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:08fe6e45446742c8cfba260d3c6087ebc33cc8b6c9c2621d30bbef859bd81eae","observation_id":"abdf9768-1204-4e38-babd-c1e0177bc8ff","resolution":{"observed_at":"2026-08-14T12:29:34.951955Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.216830Z","title":"Training neural network classifiers for medical decision making: The effects of imbalanced datasets on classification performance","venue":null,"work_id":"09d0e31a-4569-4ac4-a155-6475e98a9d39","year":2008},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.955262Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:ed8472610f227464a1c3a84686b34cfda596ab06e0b70b8b49f14091c51b2fae","observation_id":"2d6a7045-b1bb-4011-af71-3952fd431663","resolution":{"observed_at":"2026-08-14T12:29:35.221218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.179802Z","title":"Is robustness the cost of accuracy?–a comprehensive study on the robust- ness of 18 deep image classification models","venue":null,"work_id":"ac97d866-e8a8-4ed2-8daf-d4d67ccc470b","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.966400Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:487c16222065699102d515bc1f1e710111cd466d76d83dc9aba2b66f80e13a4e","observation_id":"cbaebb95-92b1-485c-8dc8-c8b687941882","resolution":{"observed_at":"2026-08-14T12:29:35.184066Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T12:29:34.970353Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.970353Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:2a2332b216a70b6e07b4d174b552b8908bc9d66cb640f42829a52045b8ff84b1","observation_id":"553e4f3c-7438-4778-b3b2-2a97714cf771","resolution":{"observed_at":"2026-08-14T12:29:34.970353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.166829Z","title":"Using deep learning to extract scenery infor- mation in real time spatiotemporal compressed sensing","venue":null,"work_id":"4d53df7e-8ccc-4414-8d21-eabcf89e8256","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.978323Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:c7beb38fd117e9482025490a627cea62dbbdb2bb87a196464908731704687931","observation_id":"09709e8e-cd04-4895-bfd1-85c94eb64a24","resolution":{"observed_at":"2026-08-14T12:29:35.170951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.155582Z","title":"An admm-based universal framework for ad- versarial attacks on deep neural networks","venue":null,"work_id":"dc6c5d37-130a-4d9b-836e-54e488f19f7a","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.982471Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:ab5068624ec43800b0ef35b63d859c3ba8dac06627a207b2d82f59db3de3db51","observation_id":"36e57a19-5c51-41fd-8c22-0adafab9efac","resolution":{"observed_at":"2026-08-14T12:29:35.159122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.143130Z","title":"Fault sneaking attack: A stealthy framework for misleading deep neural networks","venue":null,"work_id":"5215fd27-111a-4f25-bb85-5dac439c5c95","year":2019},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.986408Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:b39354b0eacfcb4d786cf4b24ec625637fd006a103d253cd6cf830dd8e372fd7","observation_id":"4d81573c-6561-461b-b5c9-6591c32fa456","resolution":{"observed_at":"2026-08-14T12:29:35.147611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.131579Z","title":null,"venue":null,"work_id":"d9337cb6-c34c-446a-9547-1b72e5d18cc4","year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.990371Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:ca5a2b091adf230978159a465c4614d6ef7f7c9f3cd659d12532579fed92d260","observation_id":"2cf837a8-a68a-4196-81b4-579cd6c472fc","resolution":{"observed_at":"2026-08-14T12:29:35.135523Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.228653Z","title":"The mnist database of hand- written digits","venue":null,"work_id":"ab1c4a3e-7fc6-45d7-8365-e0d451e6cf13","year":1998},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":1998,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.943612Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:8fff562f8b01766a898758eb987546774681059cce9eba40ef51cd85487069ee","observation_id":"0da9b32e-e5c9-4a0c-98ba-5e79acc19e1e","resolution":{"observed_at":"2026-08-14T12:29:35.232232Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.204513Z","title":"Distillation as a defense to adversarial perturbations against deep neu- ral networks","venue":null,"work_id":"98130955-9e20-4edf-93a4-3b180ae44e57","year":2016},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2008,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.958610Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:cd40045de575772c3ba0de3bf41b603c684c78b55f80c9dcdf564f689fc4d25c","observation_id":"6d56cbe4-3c02-4b10-9da9-fad3b2f39adf","resolution":{"observed_at":"2026-08-14T12:29:35.208693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.239648Z","title":"Lecun, L","venue":null,"work_id":"750242cd-5836-4545-a379-e7dc1c29b74f","year":1998},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.939554Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:3639b1a0151be903cd2cf527c0c73656d5f326c3639614387a1a4481b2aec344","observation_id":"7bfcd256-09be-4326-9681-721babd58e8e","resolution":{"observed_at":"2026-08-14T12:29:35.244193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T12:29:34.974316Z","title":"Ensemble adversarial training: Attacks and de- fenses","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2013,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.974316Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:4e01bc254710107ebe3f40ad464f95896c2b46d9bb15dbc16e27ff808d794037","observation_id":"eb077d57-03cd-49ec-868d-3a63586f8990","resolution":{"observed_at":"2026-08-14T12:29:34.974316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:34.935622Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2014,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.935622Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:c8f1e7d9e83dc1c1f548aeff6ae78ba35bc64695f781f768376552fc9ef30458","observation_id":"83fba3a8-1374-4579-a102-2711b483bc6d","resolution":{"observed_at":"2026-08-14T12:29:34.935622Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.260089Z","title":"Convolutional neural network architectures for matching natural language sentences","venue":null,"work_id":"3d79d60b-48b2-43ec-b2a9-66902a3209ad","year":2014},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2015,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.931648Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:0c69b6472c61f388e5d0aae0e180f655774abf1d36ef0b56a3adc85dd0b13fad","observation_id":"e5eb3dd4-7072-4b62-8ae6-3d2c8f98bb74","resolution":{"observed_at":"2026-08-14T12:29:35.264214Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T12:29:35.192535Z","title":"Dropout: a simple way to prevent neural networks from overfitting","venue":null,"work_id":"8886d367-9e84-4a6d-9727-307e2c468739","year":2014},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.962618Z"},"links":{"citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:5e1316519abfa488cd0f7fe46ee33e28d31d6007909adbf74b86042d6e592880","observation_id":"3a73961b-733c-44ec-8405-f0699cd4a1ce","resolution":{"observed_at":"2026-08-14T12:29:35.196883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.00420","last_updated":"2018-07-31T00:09:56Z","snapshot_observed_at":"2026-08-14T19:49:46.769530Z","submitted_at":"2018-02-01T18:20:05Z","title":"Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.00420","snapshot_observed_at":"2026-08-14T12:29:34.904372Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.904372Z"},"links":{"cited_paper":"/paper/1802.00420","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:a673a1d89da58e853085ba7716efc69c2351d294410d70d11bff895557e6a56f","observation_id":"52594590-9b1e-42c2-aed7-899df2e50bd4","resolution":{"observed_at":"2026-08-14T12:29:34.904372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1806.11146","last_updated":"2018-11-29T22:50:01Z","snapshot_observed_at":"2026-08-14T18:57:52.025130Z","submitted_at":"2018-06-28T19:06:26Z","title":"Adversarial Reprogramming of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.11146","snapshot_observed_at":"2026-08-14T12:29:34.922198Z","title":"Adversarial re- programming of neural networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-14T12:29:34.922198Z"},"links":{"cited_paper":"/paper/1806.11146","citing_paper":"/paper/1908.07116"},"observation_digest":"sha256:82d46e7155bc9c92781c38a9110cc7e77a90238ca712ed16ec48bece86e4d1c9","observation_id":"d69a2a91-d532-4547-9230-dfe68e754fea","resolution":{"observed_at":"2026-08-14T12:29:34.922198Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.07116","last_updated":"2019-08-20T00:29:23Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-15T10:38:16.397821Z","submitted_at":"2019-08-20T00:29:23Z","title":"Protecting Neural Networks with Hierarchical Random Switching: Towards Better Robustness-Accuracy Trade-off for Stochastic Defenses"},"reference_resolution":{"displayed":23,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":1,"verified_fuzzy":12},"total_outbound_references":23},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 23 of 23 outbound references and 0 inbound Pith citation observations for arXiv:1908.07116."}