{"as_of":"2026-08-16T14:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6168cc2030cdfab4f7f04f59c8585b0566ee8d03848f53f67b54046e00a67e6d","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T11:24:19.193937Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.09163/citation-record","integrity":"/paper/1908.09163/integrity","json":"/paper/1908.09163/citation-record.json","paper":"/paper/1908.09163"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.597896Z","title":"Threat of adversarial at- tacks on deep learning in computer vision: A survey","venue":null,"work_id":"961bdf61-4ecd-4c23-86ad-f21af429ccc8","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.819816Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:9715638674573646dad22544e332b2c704600c2f77dbb67bd21fadf3453e6e93","observation_id":"92c5835b-0fc3-4ae0-a606-1065df5e4e08","resolution":{"observed_at":"2026-08-14T11:24:20.609756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.567694Z","title":"The vulnerability of learning to adversarial perturbation increases with intrinsic dimensionality","venue":null,"work_id":"fa8756b9-08d7-4354-826c-ca3c95919141","year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.833249Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:c0456879a2078b032673086dded1d892cf9d59c5be0c48be5142d643aea615af","observation_id":"4d15b55a-c266-403c-aeb7-4294e769d450","resolution":{"observed_at":"2026-08-14T11:24:20.577720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.535662Z","title":"NetVLAD: CNN architecture for weakly supervised place recognition","venue":null,"work_id":"0292f9e4-f207-4a0c-902d-250b1026f40c","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.840955Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:f60ae35bb5016181e2b76a7792043ac180f12309d52b5c9683276793f436cb2c","observation_id":"98899969-4b7a-4495-aad8-b204ca2822b4","resolution":{"observed_at":"2026-08-14T11:24:20.544204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.512371Z","title":"Aggregating deep convolutional features for image retrieval","venue":null,"work_id":"0408490d-7ef1-48ca-90cb-5eddcb93622d","year":2015},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.848131Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:1e93e8c2c9b75a0d149dc73f775d46cecb5113990767c74bb295eaf9c3efeacf","observation_id":"6463f1da-e67a-43e7-bf2b-832b2852f342","resolution":{"observed_at":"2026-08-14T11:24:20.518742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.481115Z","title":"A limited memory algorithm for bound constrained optimization","venue":null,"work_id":"80bf8e15-7028-4e12-ab52-eb53e343c223","year":1995},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.861610Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:8523d6de8ee0666c5197a26bf06d784971e81fd380640d9974105aadf196e9e6","observation_id":"b0595c8e-f190-4ff4-a6ef-32bcde4e182e","resolution":{"observed_at":"2026-08-14T11:24:20.495223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.447843Z","title":"Hidden voice commands","venue":null,"work_id":"5a9759bf-ce1f-49bc-a4f7-3d7d6f844cac","year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.872612Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:df36cf618640df43376e23e9d36a27f585d6642d44910637d1e9fcd6ea5d3259","observation_id":"3ae519a8-ec6e-4566-a3fd-e89c2143a8cf","resolution":{"observed_at":"2026-08-14T11:24:20.455249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.413498Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"0d09a73b-d54e-4649-b7b6-6299b835d97c","year":2017},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.879860Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:355892df4a9c474de241bd91aa74f7bb3e1e8a6e40d7695eb62ef5a802f06123","observation_id":"55cadfc7-8b1d-4332-819a-408bb4c6c4d1","resolution":{"observed_at":"2026-08-14T11:24:20.424166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.380245Z","title":"Security-oriented picture-in-picture visual modifica- tions","venue":null,"work_id":"276cd37a-33e1-49f4-b0ac-a709facf411f","year":2012},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.890784Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:d895b95513f06f9f4915f6e7f02b92ec3e127e515e8882a2ca51aadd837592db","observation_id":"084aece6-5144-4d75-be5d-3d491bad82e3","resolution":{"observed_at":"2026-08-14T11:24:20.388550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.343623Z","title":"Challenging the security of content-based image re- trieval systems","venue":null,"work_id":"51d47ac2-08ff-4481-8da9-4dbe09d2354d","year":2010},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.901444Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:0a6bec0d06c198ff763109d30d4235e3dfd0441f989ccd236fbb375746310fb1","observation_id":"f1741f1c-8fbc-4cbe-88c3-84b2f1889586","resolution":{"observed_at":"2026-08-14T11:24:20.351245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.307298Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"4261591c-16b1-4834-bf50-b0fbeef45379","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.909686Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:d05ad61469d84993aeef3b9fec53fd14d911d6293088316bc40146e7e1a2b2f8","observation_id":"49b1f1e6-0902-4a87-8ad9-f8c7d3f85343","resolution":{"observed_at":"2026-08-14T11:24:20.316645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.272320Z","title":"Evaluation of GIST descriptors for web-scale image search","venue":null,"work_id":"165d3875-7d97-4974-a52e-f93b50146e08","year":2009},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.923105Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:ad8a0fb950bf7298c87aa53612981b05bd40a99a67225cc1ac26b0d563175533","observation_id":"07605bc1-1a75-4c4a-88d1-bc7d16a8d728","resolution":{"observed_at":"2026-08-14T11:24:20.280989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:18.932638Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.932638Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:fb67865f5b50579b792ed960c71ceac7fe8b48298bc99fe88d6e4b7df7aed3d6","observation_id":"303a2092-0f0b-4f51-87d1-06bb0327abe6","resolution":{"observed_at":"2026-08-14T11:24:18.932638Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:18.944833Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.944833Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:cc707bd689a2dc5c620242f772c84e593226c7c71b4b435c95d458e628e6ae36","observation_id":"cf75c0bd-1459-4d4e-b0b2-731f86efb83b","resolution":{"observed_at":"2026-08-14T11:24:18.944833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.200138Z","title":"Ham- ming embedding and weak geometric consistency for large scale image search","venue":null,"work_id":"f5421eb7-7d0a-469a-b8cc-f26c536e00bf","year":2008},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.954145Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:65b9638205e27f273200006cd0fc99df1edc9b254eb96bb66d6756cf52fe64af","observation_id":"d0a56327-1c1a-40cd-ad5b-77d68584d9f6","resolution":{"observed_at":"2026-08-14T11:24:20.210590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.165061Z","title":"Cross-dimensional weighting for aggregated deep convolu- tional features","venue":null,"work_id":"f181a6cd-b3bd-4090-9f19-d16cc5fe2b22","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.964247Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:3465d7f00adf5cf014a425b318eecc51a0ab50e3cd9b7fbf74c1f815966a5f0c","observation_id":"9fa1f06f-c163-45ef-acca-6376b29d2fe7","resolution":{"observed_at":"2026-08-14T11:24:20.173796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.124231Z","title":"Adam: A method for stochastic optimization","venue":null,"work_id":"eb0813da-cdc9-419e-a798-afcba84cbe3e","year":2015},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.972331Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:ec1a4938fb2cd430bf28d388aee80c87bd622a012daca85f0fa8dcfc4c35913f","observation_id":"47662f4f-4e1d-4873-8c18-420a3dd8261a","resolution":{"observed_at":"2026-08-14T11:24:20.137493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:18.983434Z","title":"Imagenet classification with deep convolutional neural net- works","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.983434Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:5a4f8ebd599c17e039c986eae3e3b6671422345d287dd1a1e8913973e8538ce0","observation_id":"d6d4b37d-f01d-4092-87e6-7288caae89c1","resolution":{"observed_at":"2026-08-14T11:24:18.983434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:20.035355Z","title":"Adver- sarial examples in the physical world","venue":null,"work_id":"f791baee-1031-421c-8db2-570c194ef272","year":2017},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:18.993859Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:43516ef4488781271f32f947f277fc96d1e4402fb75146b4e07a594455d14f8c","observation_id":"22ef1537-69c6-4073-9622-ccb8cf3b124c","resolution":{"observed_at":"2026-08-14T11:24:20.045537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.994060Z","title":"Universal perturbation attack against image retrieval","venue":null,"work_id":"af3d1bd3-eb69-4bc7-bb71-80264ad26a87","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.003147Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:b6783d20d0419565773914ae8126757a4dfe2c89518198a5c937f9e881b640bf","observation_id":"c292ed9a-6b29-40fd-b594-a74af29d3632","resolution":{"observed_at":"2026-08-14T11:24:20.004305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.955566Z","title":"Who’s afraid of adversarial queries? the impact of image modifica- tions on content-based image retrieval","venue":null,"work_id":"08daeebf-6958-4117-af84-f3da3a72c455","year":2019},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.010952Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:eedbfb22240a13ef3322237e368939daf919f2191d1c58d93bc597060c72dbef","observation_id":"c21f65d1-2299-456c-bdb3-e9b896a0dc19","resolution":{"observed_at":"2026-08-14T11:24:19.966319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.917368Z","title":"Distinctive image features from scale-invariant keypoints","venue":null,"work_id":"d4cdb069-3809-4b6e-8824-862b62b79dae","year":2004},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.017778Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:dd02a537b3f03791523c981420790dd8f790c7230416a4b923fda7fe8c03f86f","observation_id":"b028c090-d3a3-4014-b39a-0a717d8fc44f","resolution":{"observed_at":"2026-08-14T11:24:19.931773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.035444Z","title":"Understanding deep image representations by inverting them","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.035444Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:c810eab8961c130d7f0f31695ba9c6fe0a5bdc9470f428a7e66f3bb3e363cbb7","observation_id":"8f2f14a1-d0f5-4f6a-ba91-2ceef7c1840e","resolution":{"observed_at":"2026-08-14T11:24:19.035444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.861472Z","title":"Bags of local convolutional features for scalable instance search","venue":null,"work_id":"b36d658c-4119-4407-aa9b-2f779d666b12","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.044306Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:5c4cba08986875a329ef67736d083d535b85ab04bbb712ed4bd8c57e531cd00a","observation_id":"c0364372-98cf-464a-9315-9dc73317eaab","resolution":{"observed_at":"2026-08-14T11:24:19.873950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.816323Z","title":"Universal adversarial perturba- tions","venue":null,"work_id":"adc75280-a0a1-4551-b682-82337057ac36","year":2017},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.054206Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:57cfd518f734215cc722bcd54b49dbbdccc3ddabfe6a4fc48ea6702a999ddf99","observation_id":"dd6508b9-7278-4e37-af5c-62b12d6775d1","resolution":{"observed_at":"2026-08-14T11:24:19.832208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.780080Z","title":"DeepFool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"d2b0ebc3-b1e3-43dc-8531-bcda3eae4792","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.063348Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:a9bf86381b5f4e492059092f2a831bbdb025415fec2699e20a5af9815220ced2","observation_id":"58ae5296-8980-4a32-9e28-2f217aa49c88","resolution":{"observed_at":"2026-08-14T11:24:19.791627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.741430Z","title":"Large-scale image retrieval with attentive deep local features","venue":null,"work_id":"7f6bdabc-5157-435f-b34c-9c5c88c72e31","year":2017},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.076427Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:127f32d49a0de45b1ccc85fb00f333f0177bcb136268ee4e941bfa2ab68fef3a","observation_id":"b50aeee6-4245-4415-8563-24eb381fca1e","resolution":{"observed_at":"2026-08-14T11:24:19.749724Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.700896Z","title":"Siamese network of deep fisher-vector descriptors for image retrieval","venue":null,"work_id":"32af7f72-9d07-4e77-aa31-a8f0bfb9acc7","year":2017},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.087678Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:1f331a64bc01fa1f2594b4a72e631e3a9fd9e5c8d67d17473b5b7b65dbb0f91f","observation_id":"0f000d1f-6d97-4776-a364-8ac6a9491c4a","resolution":{"observed_at":"2026-08-14T11:24:19.710094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.662775Z","title":"Transferability in machine learning: from phenomena to black-box attacks using adversarial samples","venue":null,"work_id":"235bd5e9-3ac5-432e-bf45-4b4a2cee4c6b","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.098650Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:9c0ceb348f92e368e9186c5d2fec0788bd12468497b83f84352a37761dc68710","observation_id":"ab6a127e-55fa-470e-9374-1d5959c54635","resolution":{"observed_at":"2026-08-14T11:24:19.673268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.617406Z","title":"Practi- cal black-box attacks against machine learning","venue":null,"work_id":"8ebf198b-5e0e-4c37-91bd-cfb433f71d3d","year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.108619Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:d0f37e5a768f25f11dd611e693481dd1c1dbf9ce7cb850f4577d66001aea983a","observation_id":"1c5b9371-8381-46fe-9af3-c8eaca8c2423","resolution":{"observed_at":"2026-08-14T11:24:19.628529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.563890Z","title":"Revisiting Oxford and Paris: Large-scale image retrieval benchmarking","venue":null,"work_id":"9384f0fe-d023-4195-8849-11bf0a613703","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.121063Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:02e8eaa1cacfecccdcdd5bfffb357e49ffa6d7e1135cedb63dcb519a43d850b9","observation_id":"1e3b92e4-f1b7-48e3-8060-01eae0034b8b","resolution":{"observed_at":"2026-08-14T11:24:19.576257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.495605Z","title":"Fine- tuning CNN image retrieval with no human annotation","venue":null,"work_id":"5f845526-42ee-452d-85b2-e5ef7367419b","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.129205Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:d26206a96b051bb679e8d7e14ae718cf728fbc1f978ecb0b669534e81ab22c95","observation_id":"a6e5bebf-58b6-427c-ad7d-d89b0bd4dfb0","resolution":{"observed_at":"2026-08-14T11:24:19.515209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.456589Z","title":"Visual instance retrieval with deep con- volutional networks","venue":null,"work_id":"f5698c85-5f94-475d-a2fa-ea878e2b9f88","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.138541Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:43cdd62415a86c7f05a277294ac9067bac28731b54b7845bb4cddc2686594c11","observation_id":"0406d81a-122b-402e-9c87-f90c6b838bed","resolution":{"observed_at":"2026-08-14T11:24:19.467828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.153729Z","title":"Imagenet large scale visual recognition challenge","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.153729Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:a7a5d7882b70dff61967541afbb65cfdb5e233d9e80a09f44f18edcb875760fd","observation_id":"4c8b0a59-8615-4c78-a1d4-6861201481ce","resolution":{"observed_at":"2026-08-14T11:24:19.153729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.382898Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":"06a200d1-4eb8-452b-8e48-c0d62ae92545","year":null},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.167900Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:64117d73acef5b20bfb7ebd709352e26a84dc9c8261fed0ef1a62685e63d70ae","observation_id":"388d0738-4c52-4710-a779-8f79d4490169","resolution":{"observed_at":"2026-08-14T11:24:19.393749Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.343780Z","title":"In- triguing properties of neural networks","venue":null,"work_id":"c4fcc98e-03fd-4c5f-832f-ceda3e4fe886","year":2014},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.175290Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:5c9e9de84d7115fe9776af12796a25d5722b978356a0b5e37ef8ac04bdf2c9c4","observation_id":"01b962b9-b4ac-46f3-9f48-b765f7d29ae7","resolution":{"observed_at":"2026-08-14T11:24:19.355309Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.307141Z","title":"Particular ob- ject retrieval with integral max-pooling of CNN activations","venue":null,"work_id":"a259af9f-245b-4af4-ac31-24b4e9f41320","year":2016},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.185781Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:95547cd60bf1cb4af95b13046950dfd7feab22317ca3c0a9f5b2b7a5c435c2ba","observation_id":"7a4840cf-3d5f-4373-aebd-99edb2f1d7a4","resolution":{"observed_at":"2026-08-14T11:24:19.321561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T11:24:19.273183Z","title":"Open set adversarial examples","venue":null,"work_id":"c5e080ad-46cd-49b2-bdba-e1ac0f5592b6","year":2018},"citing_paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-14T11:24:19.193937Z"},"links":{"citing_paper":"/paper/1908.09163"},"observation_digest":"sha256:ee81b74b194100d1385fb3aaa7357aab62d6df8cb69d53b07fbed5767686bf18","observation_id":"137344f1-fd7f-4607-a269-684400ebd8dd","resolution":{"observed_at":"2026-08-14T11:24:19.282058Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.09163","last_updated":"2019-08-24T16:30:44Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-14T11:17:35.190151Z","submitted_at":"2019-08-24T16:30:44Z","title":"Targeted Mismatch Adversarial Attack: Query with a Flower to Retrieve the Tower"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":0,"verified_fuzzy":32},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:1908.09163."}