{"as_of":"2026-08-16T04:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b50297e27b53d6f43ea666a8fa1b689e70c167ec48e0a6e81eafea3a8ec23296","coverage":[{"denominator":31,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":31,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-14T10:21:42.550528Z","state":"measured"},{"denominator":31,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":31,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/1908.11332/citation-record","integrity":"/paper/1908.11332/integrity","json":"/paper/1908.11332/citation-record.json","paper":"/paper/1908.11332"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.435014Z","title":"Carlini and D","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.435014Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:2be9e96b1881ec6ffd7cc4a6838aaa262a058a28dd29239048a632208f7b9de6","observation_id":"5fc1b999-c60e-46bc-a17d-6f1b443b9792","resolution":{"observed_at":"2026-08-14T10:21:42.435014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.884757Z","title":null,"venue":null,"work_id":"8dc62c63-f7f8-4480-b358-a9685ceb9ffd","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.439864Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:643b374a17b7419c71529db207d2e4ebb0c750a4cd1281610d9709884e479a80","observation_id":"d6f8f5f0-1c1b-4efd-8bd6-478b4c85fbb5","resolution":{"observed_at":"2026-08-14T10:21:42.888254Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.873237Z","title":null,"venue":null,"work_id":"4baf1dd3-6ce6-4e32-a437-8845e55c8835","year":2018},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.443893Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:479a74801c5b4146ac2390fbe72be41a60052fba128894bfb174a6eae97a304c","observation_id":"ec29a958-f100-4b4e-a5cc-fbe9c011b2bd","resolution":{"observed_at":"2026-08-14T10:21:42.876875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1703.01101","last_updated":"2017-03-03T10:27:16Z","snapshot_observed_at":"2026-08-14T21:13:44.035111Z","submitted_at":"2017-03-03T10:27:16Z","title":"Adversarial Examples for Semantic Image Segmentation","version":1},"cited_work":{"arxiv_id":"1703.01101","doi":null,"metadata_source":"pith","pith_arxiv_id":"1703.01101","snapshot_observed_at":"2026-08-14T10:21:42.701614Z","title":"Adversarial Examples for Semantic Image Segmentation","venue":"stat.ML","work_id":"dae1d323-6b83-44ae-8ee5-fb2777a64e58","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.448100Z"},"links":{"cited_paper":"/paper/1703.01101","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:e7aad88add94c28e9884808142bb51a2d2cfe880f5382fc648fbc00f19b90a32","observation_id":"60399e94-4b9f-40d9-994b-584321a17f42","resolution":{"observed_at":"2026-08-14T10:21:42.706662Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.862649Z","title":null,"venue":null,"work_id":"08b76deb-842e-4bd6-99a0-0b291ad2cc94","year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.452109Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:68aab4e7c60503f62a0ffb2a2769452423411581b22e29ef3dc995467ff99c52","observation_id":"a138f3b9-d265-4258-acfc-b87b17c2b444","resolution":{"observed_at":"2026-08-14T10:21:42.866401Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-14T10:21:42.456229Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.456229Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:3b62f851271a8d16250fe1d99715156ec55f60453bf159a368a307f369251921","observation_id":"be5e2818-3ffb-43c8-9b89-476481c89aef","resolution":{"observed_at":"2026-08-14T10:21:42.456229Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.460734Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.460734Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:a045d8cbca47b7d031bfca599f5fd92d8b19b26e9201c62879dee1da9b36aafb","observation_id":"859a7cf6-ac71-4bcf-83b8-701a18794d52","resolution":{"observed_at":"2026-08-14T10:21:42.460734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.464437Z","title":"Huang, Z","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.464437Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:3b23c0c6d5b0f49fa0d705f30323553fa78ce7e9cda3021d9c8d1630e0d84e18","observation_id":"75ede5d0-ec0e-411e-b527-8acacbe9a868","resolution":{"observed_at":"2026-08-14T10:21:42.464437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1702.02284","last_updated":"2017-02-08T04:33:55Z","snapshot_observed_at":"2026-08-14T21:17:29.796866Z","submitted_at":"2017-02-08T04:33:55Z","title":"Adversarial Attacks on Neural Network Policies","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1702.02284","snapshot_observed_at":"2026-08-14T10:21:42.468128Z","title":"Huang, N","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.468128Z"},"links":{"cited_paper":"/paper/1702.02284","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:804266e3bca39b7d00370787dcd1a0a9da449bac4ac49a168cc1e1e96167e114","observation_id":"5e5d38ed-099e-4b6d-9d3c-3e9c20bed2ca","resolution":{"observed_at":"2026-08-14T10:21:42.468128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07328","last_updated":"2017-07-23T18:26:29Z","snapshot_observed_at":"2026-08-14T20:45:52.185644Z","submitted_at":"2017-07-23T18:26:29Z","title":"Adversarial Examples for Evaluating Reading Comprehension Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07328","snapshot_observed_at":"2026-08-14T10:21:42.472132Z","title":"Jia and P","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.472132Z"},"links":{"cited_paper":"/paper/1707.07328","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:5aee3d110e7858805560f6bd61196b750b10b6faf2d694cd2be735cbd0a9f2cd","observation_id":"081f9320-4db6-421c-ab3f-72fc4a31b415","resolution":{"observed_at":"2026-08-14T10:21:42.472132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-14T10:21:42.475879Z","title":"Kurakin, I","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.475879Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:487d608c7b0da8154cb551af3a07d7f7fda45ec98298b4994159c945f3bc0c62","observation_id":"7de30f37-0bc8-4674-a3df-78a10f733680","resolution":{"observed_at":"2026-08-14T10:21:42.475879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.838957Z","title":null,"venue":null,"work_id":"4acebbcb-7c1f-4a89-8ac5-b14b3aab4e31","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.479930Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:ede16380272ecd6d983f29a0a454e090b6fc4bbda781bd602116b15f7958ab2b","observation_id":"1e800afb-ee11-4bca-abc0-0eaafccb9a61","resolution":{"observed_at":"2026-08-14T10:21:42.842931Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1905.01723","last_updated":"2019-09-09T06:11:56Z","snapshot_observed_at":"2026-08-14T16:37:04.705313Z","submitted_at":"2019-05-05T17:41:31Z","title":"Few-Shot Unsupervised Image-to-Image Translation","version":2},"cited_work":{"arxiv_id":"1905.01723","doi":null,"metadata_source":"pith","pith_arxiv_id":"1905.01723","snapshot_observed_at":"2026-08-14T10:21:42.641035Z","title":"Few-Shot Unsupervised Image-to-Image Translation","venue":"cs.CV","work_id":"916a0832-d986-453b-80a8-f37759db2fac","year":2019},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.483094Z"},"links":{"cited_paper":"/paper/1905.01723","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:44a474d3f586add7b4537a1355a5c11e9ad2efd8b19460be8bab76e108b17d64","observation_id":"03c0b042-0544-47d4-8c21-fbdc5569e1d3","resolution":{"observed_at":"2026-08-14T10:21:42.646756Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1611.02770","last_updated":"2017-02-07T14:24:44Z","snapshot_observed_at":"2026-08-14T21:31:19.477872Z","submitted_at":"2016-11-08T23:25:00Z","title":"Delving into Transferable Adversarial Examples and Black-box Attacks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.02770","snapshot_observed_at":"2026-08-14T10:21:42.486875Z","title":null,"venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.486875Z"},"links":{"cited_paper":"/paper/1611.02770","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:23d3aea0c71d90c4c165ce91a30dc8003a04640b7294a5b545e71752cf7bba32","observation_id":"da3a36c5-b00c-461a-9aa2-d52f9dbde5d8","resolution":{"observed_at":"2026-08-14T10:21:42.486875Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.827662Z","title":"Moosavi-Dezfooli, A","venue":null,"work_id":"3900292a-e976-4611-aa87-d8560f0454e4","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.491498Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:ae5dcf9dab94e3b3c78545c202f6b09889e9de1ab1cd134eb0cf3eb8e54bd2c1","observation_id":"ec3d84e7-9702-48f6-bcfc-7b74f2fb9333","resolution":{"observed_at":"2026-08-14T10:21:42.831994Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.817198Z","title":"Moosavi-Dezfooli, A","venue":null,"work_id":"7c542b28-7307-4e4d-ad58-737a77beee35","year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.494870Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:15f16aad99dbed430158381c6a1c15d0a0432c1b7e025edf22f1142da3c811b6","observation_id":"3db5047f-aea2-40c8-be65-d3c6448ffefe","resolution":{"observed_at":"2026-08-14T10:21:42.821024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.807116Z","title":"Nguyen, J","venue":null,"work_id":"dd389f18-32e7-4b3f-8a20-58ff44f377ba","year":2015},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.498326Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:5153a272d86ee337d9fa35ea1f8a849b2cf23e555406c2018c206ae846cb8160","observation_id":"bda55f2e-dd34-476d-9644-4872ac3a86d9","resolution":{"observed_at":"2026-08-14T10:21:42.810525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.502851Z","title":"Odena, V","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.502851Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:4f077afd9727679e8325d35e51b8232fdce8d7570c0b4853a1d7dd99f8e81162","observation_id":"fce1c781-f843-4726-afb5-89e5aff13ad4","resolution":{"observed_at":"2026-08-14T10:21:42.502851Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.789377Z","title":null,"venue":null,"work_id":"398d792a-19fe-4d8f-aa7e-1e7d79976485","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.506714Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:3b30fd179e828482588406a1ac65a9b6f325a84782b6f18e9bf6748ff3d0430e","observation_id":"f36e8666-fc17-41a1-ace4-8626dbc03b74","resolution":{"observed_at":"2026-08-14T10:21:42.793194Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-15T19:47:29.283675Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-14T10:21:42.510383Z","title":"Papernot, P","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.510383Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:29f55209420d86f056c088a205a4eb7820f01c14fdb7341faa4d4705137c2a73","observation_id":"e8066ce0-fbd7-4ab1-8fe8-cb95269390ed","resolution":{"observed_at":"2026-08-14T10:21:42.510383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.778579Z","title":"Papernot, P","venue":null,"work_id":"e9f55959-b7d6-49e9-b45a-c969efd40c21","year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.514203Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:576576533bbb658b320e4b530ffb168a5613e84bd3e0fcc00565f2c7de01340e","observation_id":"46a137b1-2061-4251-b89f-d69597fa0642","resolution":{"observed_at":"2026-08-14T10:21:42.782432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.766471Z","title":"Quadrianto, J","venue":null,"work_id":"49132ff8-0ba4-4854-9cb5-6444d31e7a53","year":2009},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.518300Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:fab4fd2c714019736c50def42bd0a7125cfd19c45481a4ad17960e08adb9c805","observation_id":"1cab9e49-afad-40bd-92a3-e19a88500011","resolution":{"observed_at":"2026-08-14T10:21:42.770387Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.521712Z","title":"Rozsa, E","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.521712Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:2626144dd73a8890f0eb785af99f1b4ef7a4536fa3a161a4e1ca130a1ac2efd5","observation_id":"ffa1918b-b000-4d5f-a0e2-e25959a42069","resolution":{"observed_at":"2026-08-14T10:21:42.521712Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-14T23:20:42.336514Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-14T10:21:42.524927Z","title":"Simonyan and A","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.524927Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:7b6a8013a007857f16f96882f8a9326ef2df571e4679ae33458b69f6463ba6dc","observation_id":"8f6f8f76-b5c9-4867-bc2c-3e8a5f27cae3","resolution":{"observed_at":"2026-08-14T10:21:42.524927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.745527Z","title":null,"venue":null,"work_id":"5a4f976b-b357-4923-bc13-5447c01f0cfa","year":2007},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.528777Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:97e8d00b5867dc4c29e452a896c37a1716b665f9207b4ee13dd9deff9695a453","observation_id":"d469ea3d-1c3f-4faf-a2d2-c51c3a23da56","resolution":{"observed_at":"2026-08-14T10:21:42.750382Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.733329Z","title":null,"venue":null,"work_id":"1869b7b0-194c-4790-86fe-1ce1000fb24f","year":2019},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.532430Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:dec5f5f46f8b69fce2e7cdb4923c41b1e5aae7dcd8279e4d375dff4a047ec4c8","observation_id":"e730fb62-a7ba-4150-a0d5-c9aea639bfba","resolution":{"observed_at":"2026-08-14T10:21:42.737770Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.535863Z","title":"Szegedy, V","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.535863Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:5d84f4cc5a055eeb64ab74c7735ae30a26287015c9f6ec4db57b048f79c08e24","observation_id":"dd2cdd1b-f6ed-4715-bd0f-d1165402d118","resolution":{"observed_at":"2026-08-14T10:21:42.535863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-14T10:21:42.539244Z","title":"Szegedy, W","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.539244Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:5ba44ad5324c1384ce6dfeb7b3eceaacee345993efb184d1b0226c784e59110c","observation_id":"d422eaa8-8ce3-4fda-9b9a-7feea698d2aa","resolution":{"observed_at":"2026-08-14T10:21:42.539244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-08-14T20:59:26.461775Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-14T10:21:42.543379Z","title":"Tram `er, A","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.543379Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:fb356239791c331cf92e4d8f89952ff997191237c47f0eeee0bedcb3b5bae319","observation_id":"bb9f7c29-fa45-4cc8-82bd-dfa689363ce9","resolution":{"observed_at":"2026-08-14T10:21:42.543379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-14T10:21:42.714560Z","title":null,"venue":null,"work_id":"b9440546-7588-4327-84f5-fd182f0e081c","year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.547135Z"},"links":{"citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:3750d8126f2fac99c4774c0c9ec8335e2042dd3e9398368a3fa0c2a9f5e8298c","observation_id":"814d9248-23e6-400c-9faf-c72a78185a8d","resolution":{"observed_at":"2026-08-14T10:21:42.718416Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.11342","last_updated":"2018-02-23T23:28:31Z","snapshot_observed_at":"2026-08-15T12:04:30.915681Z","submitted_at":"2017-10-31T06:22:26Z","title":"Generating Natural Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.11342","snapshot_observed_at":"2026-08-14T10:21:42.550528Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-14T10:21:42.550528Z"},"links":{"cited_paper":"/paper/1710.11342","citing_paper":"/paper/1908.11332"},"observation_digest":"sha256:4b816abad169b213e845bc8dc1730ef8c47a0360aa6ad95539f54706f6bfbccd","observation_id":"fcfb7238-0564-4c6b-9696-ffeca974517a","resolution":{"observed_at":"2026-08-14T10:21:42.550528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"1908.11332","last_updated":"2022-06-13T04:15:43Z","latest_version":4,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-16T01:29:32.507243Z","submitted_at":"2019-08-29T16:27:24Z","title":"Universal, transferable and targeted adversarial attacks"},"reference_resolution":{"displayed":31,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":24,"verified_exact":2,"verified_fuzzy":5},"total_outbound_references":31},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 31 of 31 outbound references and 0 inbound Pith citation observations for arXiv:1908.11332."}