{"as_of":"2026-08-22T21:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d3754e5d40bdb642798fd51d134912a5f3a069f645770dd7672703280cda732","coverage":[{"denominator":36,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":36,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T10:26:14.830268Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-22T06:32:14.747728+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.11230/citation-record","integrity":"/paper/1908.11230/integrity","json":"/paper/1908.11230/citation-record.json","paper":"/paper/1908.11230"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.205334Z","title":"Robustness to adversarial examples through an ensemble of specialists","venue":null,"work_id":"28767c1e-51a9-4bc4-a5a0-34e60b4d979c","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.711469Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:056a49215ce3bb4aa022f03e3072a60fefdfb01dbb4d2d5f7f364f0198ae3723","observation_id":"07b05407-f6b1-4492-bca0-d8284e83b152","resolution":{"observed_at":"2026-08-14T10:26:15.208878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.195116Z","title":"Bunescu, and Gordon Stewart","venue":null,"work_id":"0f7329fd-aa77-4f7e-ba0f-d9a84a916057","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.715885Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:39665a7e14c6a05e542368498277c1bddd0370a1da9ebfdd044d70acd4126a0c","observation_id":"cccb1b9f-64fb-4102-b4f1-c337049de30e","resolution":{"observed_at":"2026-08-14T10:26:15.198935Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.185639Z","title":"Bendale and T","venue":null,"work_id":"b60ee4e1-6c10-4b48-844d-03c260d9dd8b","year":2016},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.719595Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:89210e6cc9272633197c0ee3e42740eee3109180a4b1358d86e1510a8011e540","observation_id":"faeb3a15-e948-4588-9f55-288b1b868ff3","resolution":{"observed_at":"2026-08-14T10:26:15.188968Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-14T17:14:47.799958Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-14T10:26:14.723078Z","title":"On evaluating adversarial robustness","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.723078Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:07d3cf8c8998e1f20b73b3adc39d7e846d2e622c1621fb12fd26aa230b58882e","observation_id":"11678402-0b05-4c3e-96f7-51b016164990","resolution":{"observed_at":"2026-08-14T10:26:14.723078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.177186Z","title":null,"venue":null,"work_id":"6ff8f076-6aa2-4e39-be62-31f45d156457","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.728719Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:38d4902f426303b8047173c883d425e0be2706dbd1345c2e5adaf1a1a3d01a82","observation_id":"6b7cb03f-37e1-4783-9542-d28a24cfbc5b","resolution":{"observed_at":"2026-08-14T10:26:15.180287Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.167161Z","title":null,"venue":null,"work_id":"19ab56a6-3463-44fa-a572-5a165de1c0cb","year":2009},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.732801Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:18e9bde0e63a1569cd41daf91d929e658497fcfa332fa15339e82d180258a162","observation_id":"38361752-2541-4ba3-b1f4-307853fe66a2","resolution":{"observed_at":"2026-08-14T10:26:15.170989Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.00410","last_updated":"2017-11-15T23:31:59Z","snapshot_observed_at":"2026-08-14T21:14:04.215100Z","submitted_at":"2017-03-01T17:43:10Z","title":"Detecting Adversarial Samples from Artifacts","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1703.00410","snapshot_observed_at":"2026-08-14T10:26:14.736649Z","title":"Curtin, Saurabh Shintre, and Andrew B","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.736649Z"},"links":{"cited_paper":"/paper/1703.00410","citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:a1ce7491543576afdaf5b1de4a66a64ed67c92b010a1d203ff2900fcb80f236e","observation_id":"fe2757ac-d11b-4040-8892-deff03db9ef6","resolution":{"observed_at":"2026-08-14T10:26:14.736649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.156746Z","title":"Making machine learning robust against adversarial inputs","venue":null,"work_id":"e9d594b5-0db5-4951-b0e1-c1be2b28eafa","year":2018},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.739790Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:5672811ec20bd5eda6245ce02cb35888a870d0f05405ef76ff3504aa4f0163d8","observation_id":"ac2ce49c-6c02-4716-b233-314b29205a49","resolution":{"observed_at":"2026-08-14T10:26:15.160963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.146700Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"b153c021-15ca-4032-9330-b3c523f4779b","year":2015},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.742546Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:e11726c31b1e8cc2a21036d45fd3bd450b1293802ad4798d9daddec114b9dade","observation_id":"1d9f646f-efa9-40ce-884d-065a5e69e7de","resolution":{"observed_at":"2026-08-14T10:26:15.150275Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.136723Z","title":"Google Cloud AutoML","venue":null,"work_id":"899cb2f3-7c2f-413b-863a-39435bc5ffe2","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.745120Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:3e25f45482eedbefe34442cfb3f6cf9987fdbeb18339efbb222305cbea3671d8","observation_id":"4fbc5715-10b3-419d-9102-730695d23812","resolution":{"observed_at":"2026-08-14T10:26:15.140217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.126657Z","title":null,"venue":null,"work_id":"385aa921-b7e0-4e36-aa7b-31214ada4289","year":2015},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.748222Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:1fe24d9a83bbab562e57c4452c629328cc89b97b129a4ca14aca8c142dd4ce01","observation_id":"0510f117-96b7-4dfe-9301-2fefc1f62f2e","resolution":{"observed_at":"2026-08-14T10:26:15.130272Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.116589Z","title":"Ad- versarial example defense: Ensembles of weak defenses are not strong","venue":null,"work_id":"d9268319-6a03-44d7-a984-c65f8c22d88e","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.751537Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:a4b674e70f1c0dd5e77ae62f2198dff79bbdc5c1a162aa779d9e56ec28541fda","observation_id":"87ff866e-0732-4971-94ea-f40e677e586e","resolution":{"observed_at":"2026-08-14T10:26:15.120130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.107781Z","title":"Model-reuse attacks on deep learning systems","venue":null,"work_id":"00d20702-ef87-437f-8930-9d4db4c1af65","year":2018},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.754878Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:14f0bfd1bfd9ad2abc837b26e87ba744daf1520326cbd6b64b96da88986d683d","observation_id":"c4b91894-ac18-43ea-b3d4-ff6424f95efe","resolution":{"observed_at":"2026-08-14T10:26:15.110940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.097813Z","title":null,"venue":null,"work_id":"e2e953c4-95f2-41a4-bfb2-39d1a1f2cc44","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.758242Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:4f9cddc921161fd3f823e805fc634a9d9ebbc73c0bd048deb6bcaf14cf1dff43","observation_id":"9fd73ae9-b591-4966-b795-c3ea64d74ad8","resolution":{"observed_at":"2026-08-14T10:26:15.101384Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.088118Z","title":"Kumar, A","venue":null,"work_id":"401b748b-014b-42f1-a99a-d2156a69183a","year":2009},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.761399Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:d626065d3b33f49b9bc8817bdf4b50d1a2b2a5a1406569098b7996374c4147f0","observation_id":"a5e64773-0f07-47b2-8bfb-664d9fa3b1ed","resolution":{"observed_at":"2026-08-14T10:26:15.091421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.077668Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"04f19191-8beb-48d2-b41b-726a6a7eaeba","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.764548Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:773b1ebd060747d0ae95e07a2ed6cfbb26235239a0da54c315533e41cda1bbeb","observation_id":"fb389ef0-2d93-4a6e-a0e3-d3cc2971d7cd","resolution":{"observed_at":"2026-08-14T10:26:15.081157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.066961Z","title":"Prun- ing filters for efficient convnets","venue":null,"work_id":"dc8df177-3900-4582-b308-08f59cc50597","year":2017},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.767724Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:8efaf4ea43838f07897ff3e721c96933cd865c1192c266977dd68251fd77981a","observation_id":"63ae18e9-a29f-449c-b63f-d89de136e389","resolution":{"observed_at":"2026-08-14T10:26:15.070414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.056584Z","title":"Fine-pruning: Defending against backdooring attacks on deep neural networks","venue":null,"work_id":"082705d7-e876-47bc-b884-d93fcf3a1b1c","year":2018},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.770926Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:cdc6cdbc2b6ad69979a14b45fb6a9eb34ea19276fa6e36c67f5c0dc3bea625a9","observation_id":"ff065d1e-0e2f-4f43-a30e-86006c5297df","resolution":{"observed_at":"2026-08-14T10:26:15.060342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.046474Z","title":"Deep neural network ensembles against deception: Ensemble diversity, accuracy and robustness","venue":null,"work_id":"16dd6f64-81ad-4ce1-925a-985ca90e4d41","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.774083Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:42b3c9374311be01ce575d928cf7c4814ebd640b02f59b4fc46ee429cfb7b4fc","observation_id":"885a4923-fe2d-48f6-a62f-8674a3b83e61","resolution":{"observed_at":"2026-08-14T10:26:15.050156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.037806Z","title":"Deep- fool: A simple and accurate method to fool deep neural networks","venue":null,"work_id":"92a9568d-b0a4-4452-85e7-621613c1f41f","year":2016},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.778473Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:03366cf0d5bc7c2b046e1ad9293bc66689017cf63b71f526f0d3105de60f6986","observation_id":"575557b9-5f48-4de1-96c7-1eb1d38e7310","resolution":{"observed_at":"2026-08-14T10:26:15.040703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.028501Z","title":"A survey on transfer learning.IEEE Transactions on Knowledge and Data Engineering (TKDE) , 22(10):1345–1359, 2010","venue":null,"work_id":"eaa74418-f6e0-4325-8e0d-87d40ddac597","year":2010},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.781732Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:23da6177bcbd4db2db1de1cffa6e3c059f87d3b514ef8ebb6f09ec18cfd4798a","observation_id":"484c2f2b-ba3c-47f7-b974-6410b168f666","resolution":{"observed_at":"2026-08-14T10:26:15.032023Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.018303Z","title":null,"venue":null,"work_id":"138a7819-0633-4b99-8830-a8eb4f3452f7","year":2015},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.785027Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:c65103056392e1c005e9803eacf11d7e82bdc367cbbb3186a7c950bbda99b92d","observation_id":"6932b6b6-b7ca-4ed9-ad85-16728ad8d995","resolution":{"observed_at":"2026-08-14T10:26:15.022356Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:15.008688Z","title":"Pinto, Z","venue":null,"work_id":"ca2c6461-ab0b-412d-ac8e-d653f4545a56","year":2011},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.788257Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:855036c234d004ea0f70f6a76204920999b00ba374b76a6026e454822eef25c9","observation_id":"afa87ba0-2ad8-46e1-8480-e870f592af52","resolution":{"observed_at":"2026-08-14T10:26:15.011969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.998995Z","title":"Polyak and L","venue":null,"work_id":"37344728-c7c6-47d5-a411-b6ba89a72411","year":2015},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.791434Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:65da3272fec072e5c5cecc5f44716e15ff334a3fc71aee11d2cb95cd88413320","observation_id":"a9deab1b-59cf-47ca-b6d4-b46a0fe67e8f","resolution":{"observed_at":"2026-08-14T10:26:15.002403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.988999Z","title":null,"venue":null,"work_id":"e31e830b-9462-48db-87d1-03b72fd165d5","year":2016},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.794805Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:045a146c8b864e3c9836302e9106c98fc81b66cb284ccefde55adbf5c3edd22a","observation_id":"db7e8f55-a685-4fbc-bc8c-9015cff9b36a","resolution":{"observed_at":"2026-08-14T10:26:14.992486Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.978582Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":"6f3ae169-82cd-4b0d-85fb-3eec73024710","year":2015},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.798122Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:1cc5515778b5095e121e5249bf57c32953f82921a8cf0730f85ad0c5f890f7b2","observation_id":"155fb437-f3c8-4fdd-abcc-891fd2037764","resolution":{"observed_at":"2026-08-14T10:26:14.982210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.969970Z","title":"Stallkamp, M","venue":null,"work_id":"3f47668f-f8e4-41b3-b9f4-012b00e9bd39","year":2011},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.801382Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:fce4979ee242ab7c921068da4c365b11b138f2b685849ae64c1c96cf2b848532","observation_id":"f8d631ff-8fd0-497c-9f65-930e033441fb","resolution":{"observed_at":"2026-08-14T10:26:14.972799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.960566Z","title":"Stallkamp, M","venue":null,"work_id":"374033a1-83ca-4fa6-921a-8047d764e07b","year":2012},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.805059Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:1cfae570f814259a4f420445d9a0276e731b5a5f430ff1b15777a00a349890f8","observation_id":"34df8394-da6e-4770-8047-cac42cc4109b","resolution":{"observed_at":"2026-08-14T10:26:14.963899Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.950387Z","title":"One pixel attack for fooling deep neural networks","venue":null,"work_id":"3431d0df-beea-4eaf-bef9-b1a59e7f6467","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.808521Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:0674fdb27c8780573858d18fa8756952ead0ac905f4cf39a95c635bc1a7e5c82","observation_id":"245bc302-2f4d-414f-80c0-f5b0657e5275","resolution":{"observed_at":"2026-08-14T10:26:14.954036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.938739Z","title":"Rethinking the inception architecture for computer vision.2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , pages 2818–2826, 2016","venue":null,"work_id":"5d046efd-8341-4233-ba43-57ef552fa37a","year":2016},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.811814Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:092eb09eaccfacd8edf20398dcf363ed04c72c32c03f4ca08ca43d045711f5be","observation_id":"36908677-553b-4215-8317-d5d455f4a8ae","resolution":{"observed_at":"2026-08-14T10:26:14.943251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.928011Z","title":"Goodfellow, Dan Boneh, and Patrick D","venue":null,"work_id":"3fea3c4f-3ff5-431d-bab4-b0fe1d5413d2","year":2018},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.815025Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:14ea8d28fd652c31b92eb05556e55d49093c125470fade65a232ce057409aacd","observation_id":"a41084e7-c416-4bea-b9af-50037093c864","resolution":{"observed_at":"2026-08-14T10:26:14.931460Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.917355Z","title":"Neural cleanse: Identifying and mitigating backdoor attacks in neural networks","venue":null,"work_id":"8ab6b24c-39f1-424c-a37c-843f65ba56c9","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.817657Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:10ccb71b4a3f7553919ec85297727610734aa5a02c753251562c39eae6a57eca","observation_id":"9e01ef43-2b63-4a98-9816-f168887e8d64","resolution":{"observed_at":"2026-08-14T10:26:14.921128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.907813Z","title":null,"venue":null,"work_id":"1e504d04-20ba-483c-b513-b723abdba9d7","year":2018},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.820279Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:288680589cb3b5dd8957d935bc8f02c35aa8e4d887e316ef3cba96e05329e168","observation_id":"90774ae4-d264-4da5-aa66-d934453325c9","resolution":{"observed_at":"2026-08-14T10:26:14.910876Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.897376Z","title":null,"venue":null,"work_id":"4b319899-6b53-4630-8884-687ea39c61ea","year":2003},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.822803Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:20153a080e8838ada83b3b5789005be215e6624575bb078d8317f0f96accc798","observation_id":"00d475e3-8478-48c9-90b4-e78373432d87","resolution":{"observed_at":"2026-08-14T10:26:14.900984Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1212.5701","last_updated":"2012-12-22T15:46:49Z","snapshot_observed_at":"2026-08-19T05:19:50.480481Z","submitted_at":"2012-12-22T15:46:49Z","title":"ADADELTA: An Adaptive Learning Rate Method","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1212.5701","snapshot_observed_at":"2026-08-14T10:26:14.826111Z","title":"Adadelta: an adaptive learning rate method","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.826111Z"},"links":{"cited_paper":"/paper/1212.5701","citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:fe94da83c37afbc182cd9d98db1377812486e1782ed4c1a5ea1a7e0bd1e24998","observation_id":"80760096-e946-4f8c-bd0c-812ef9c745e5","resolution":{"observed_at":"2026-08-14T10:26:14.826111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:26:14.884391Z","title":"To compress or not to compress: Understanding the interactions between adversarial attacks and neural network compression","venue":null,"work_id":"c54d30c4-5114-4609-a508-8b0c4d7f682f","year":2019},"citing_paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning","version":4},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-14T10:26:14.830268Z"},"links":{"citing_paper":"/paper/1908.11230"},"observation_digest":"sha256:85710dd26cf2e17e1f9e2eaee1562cdb64b97bd03899ff3787c70793a2509649","observation_id":"8c45a328-7b77-4bcc-96db-60bc9655749d","resolution":{"observed_at":"2026-08-14T10:26:14.890395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-22T06:32:14.747728+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"1908.11230","last_updated":"2022-02-09T02:19:38Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-20T16:24:59.891365Z","submitted_at":"2019-08-29T13:54:08Z","title":"Defeating Misclassification Attacks Against Transfer Learning"},"reference_resolution":{"displayed":36,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":25},"total_outbound_references":36},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-22T06:32:14.747728+00:00","source":"crossref"},{"observed_at":"2026-08-22T06:32:06.552537+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 36 of 36 outbound references and 0 inbound Pith citation observations for arXiv:1908.11230."}