{"as_of":"2026-08-13T06:35:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:a37c3dd0978f8d58fbbfb3e34fe29c72f98e93625373b2ac2c817d830026bb7d","coverage":[{"denominator":50,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":50,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T14:16:28.254397Z","state":"measured"},{"denominator":50,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":50,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.15553/citation-record","integrity":"/paper/2411.15553/integrity","json":"/paper/2411.15553/citation-record.json","paper":"/paper/2411.15553"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.132298Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","venue":null,"work_id":"87ee3033-d8d6-498b-8aee-dbb5a20962d8","year":2018},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:27.974775Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:122dc1664f293b98a35191fa72b040bd1aae3e8eef23780a2f5412bc9c1858cb","observation_id":"0829fa38-b4d2-4c1a-9096-ff55e1011afd","resolution":{"observed_at":"2026-08-12T14:16:29.138865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.115084Z","title":"Improving the transferabil- ity of targeted adversarial examples through object-based di- verse input","venue":null,"work_id":"2bbbb316-8abe-49e9-8625-031cca5e90ad","year":2022},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:27.980653Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:5601bcd0702317e928eb07bd0cea1e3557ff27cea2bcaa527b2b430ce34fae2e","observation_id":"9ce7040a-d03c-4fdb-90ed-c1e1d4286408","resolution":{"observed_at":"2026-08-12T14:16:29.119401Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.100805Z","title":"Introducing competition to boost the transferability of targeted adversarial examples through clean feature mixup","venue":null,"work_id":"6faa723d-3ee3-4015-8235-2fcd44245e7e","year":2023},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:27.986894Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:f7c8c28fc6d2f790057f360a4f8ae11157f89c4dddf315673fb1b12436c3c08f","observation_id":"14584016-8da8-473f-9dae-b2a4b880f6a7","resolution":{"observed_at":"2026-08-12T14:16:29.105328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.087088Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"03a0ad7e-728f-4bb1-8e9d-ee4c5130624e","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:27.994939Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:5878124d1aa0592303853fbca4b524c2791927ed4c6f61b26d1ff045a98cf795","observation_id":"11a4f566-d362-4f57-b07e-8ff036bd2d2b","resolution":{"observed_at":"2026-08-12T14:16:29.091700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.069445Z","title":"Xception: Deep learning with depthwise separable convolutions","venue":null,"work_id":"6b6fb7a2-f211-44fd-b32f-0ad73ce4e927","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:27.999745Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:93eac8ada21215ed76552cf50d97f0b7d114f2926877ccd0d2cdb0c5d70ea50d","observation_id":"71decb99-f891-46ac-8854-73d62d9e45cf","resolution":{"observed_at":"2026-08-12T14:16:29.075164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.053061Z","title":"Twins: Revisiting the design of spatial attention in vision transformers","venue":null,"work_id":"689e02dd-373f-454c-ab1d-38b48ab0881d","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.005399Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:74288df1b9c4359c05c7d9e18a20cfa4f2d53e53f73ed91b18ea48ea09de2756","observation_id":"b7ccba21-6626-437b-a24c-d8b706ef9e3c","resolution":{"observed_at":"2026-08-12T14:16:29.058678Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.015295Z","title":"Advdiff: Generating unrestricted adversarial examples using diffusion models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.015295Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:5813c31d227fe40f7a8a602a66a68165281b87b97327e848353768d05f7afea6","observation_id":"90eee5bf-ddcf-4c25-b790-4a52f0ab34cb","resolution":{"observed_at":"2026-08-12T14:16:28.015295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.030761Z","title":"Leavitt, Ari S","venue":null,"work_id":"65345567-5f04-4ba2-bf92-3d4e900a50da","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.023556Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:6b9889bf936c7fe8e01aa76d2571ee6323894e89356eecbe3a4f9d4b46b98d8d","observation_id":"aaa6d4f7-506e-4c79-adab-d01b212a4074","resolution":{"observed_at":"2026-08-12T14:16:29.036160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.017390Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"a5fd84c6-b411-4400-b284-befcffcc3e6b","year":2018},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.029108Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:6e7a3c5148bf22608e87d3d3e4b0b71ac2da82b4d507af5e2435283d9ec2ccd7","observation_id":"d10f21f1-7cbc-4a7f-b119-146e773c28b4","resolution":{"observed_at":"2026-08-12T14:16:29.021739Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:29.003618Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"91c053e0-a6c6-4751-aa1a-e7ead77861f9","year":2019},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.036614Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:01f44a3993f0dfaace65d5033ab6c5d2aa4375d8e9dbbabe1bd1ae09e12f8420","observation_id":"4394cfd1-115a-4c81-ba49-54783620ec55","resolution":{"observed_at":"2026-08-12T14:16:29.008261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.043246Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.043246Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:2e3bf112d8c4d6ec57511b8c291f565defe83f48354cd3a9d8256102cf78f2a2","observation_id":"32835829-465b-4fcb-a4b5-dabe3b31b6c8","resolution":{"observed_at":"2026-08-12T14:16:28.043246Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.979478Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"7f4e54f4-f1aa-4f0d-b258-118bb5e54b80","year":2018},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.048222Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:6277f39d03da22e39db7529749285387d94a180f157a276ed7f45cf8003a989f","observation_id":"9c583e65-fa2c-4884-aefc-2980b8d860d3","resolution":{"observed_at":"2026-08-12T14:16:28.984311Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.964277Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"89be1e61-9e74-442a-9255-75f56578c5fe","year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.052994Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:3f3f3e013e80e4c5f1d1ac240116d979fdc315828696749e40b8ab1207832cdb","observation_id":"be8fedfd-daa2-4c56-af08-90295c79e915","resolution":{"observed_at":"2026-08-12T14:16:28.969417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.949383Z","title":"Levit: a vision transformer in convnet’s clothing for faster inference","venue":null,"work_id":"e9f05c2b-60d3-421c-ba37-b673b0d1c483","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.057741Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:870bbc218776919eca2ca11573022f049c06eb94207cd4f30be293b1db4d831f","observation_id":"8da50b99-734d-43fe-997b-fdfdd81e030e","resolution":{"observed_at":"2026-08-12T14:16:28.953741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.062313Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.062313Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:6ae5c7c54afe22385b8c3cecaf489b4ed599b8903e7527bc7f695e03599551af","observation_id":"0fc05b1f-777b-4125-83c0-60d3efb93c6a","resolution":{"observed_at":"2026-08-12T14:16:28.062313Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.925217Z","title":"Rethinking spa- tial dimensions of vision transformers","venue":null,"work_id":"14f5fe9b-78b5-496b-badb-17f2b6c2a4c0","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.067543Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:d7a126d1e2a50e71c38bd6385b6499ab205305bb49884c0c27704df05a73d0be","observation_id":"a0fe6f77-a89b-4ddd-9fec-a5b00146f129","resolution":{"observed_at":"2026-08-12T14:16:28.930259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.911388Z","title":"Densely connected convolutional net- works","venue":null,"work_id":"da3687f1-f7d8-41e6-8d4b-13922ce0d122","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.073587Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:c1ba08955cc1f3f9e6645a273eafd7fe5f508903d37263f9556e59b1236a705f","observation_id":"83a535b5-5ff8-44cb-9685-01ff139d9a9e","resolution":{"observed_at":"2026-08-12T14:16:28.915842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.895981Z","title":"Belongie, and Ser-Nam Lim","venue":null,"work_id":"1f61e24c-7a60-44f1-9b6f-b5a793aca8d2","year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.077702Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:f73fdc0fa64255f4bbbf6a8b9a9e1c7ae40a013559716f813472a01a47bb4760","observation_id":"0bf78b26-4690-4862-a438-0a17ceea6442","resolution":{"observed_at":"2026-08-12T14:16:28.900789Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.880471Z","title":"Adversar- ial examples are not bugs, they are features","venue":null,"work_id":"594d397d-1aed-4670-a9f2-ba902a816fc7","year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.082127Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:0f41dbfbc255c87669ae4a530fb0d86ccf24b9ca1fe98e61e87d62ba43ed1eb8","observation_id":"84e4b0eb-3026-49e2-9e63-b7e8e2b75532","resolution":{"observed_at":"2026-08-12T14:16:28.886050Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.867857Z","title":"Feature space perturbations yield more transferable adversarial examples","venue":null,"work_id":"b33e3f7a-a446-4dff-9373-54782f88ecdd","year":2019},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.087006Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:a10681c77c7e30d3f49f8d8cefec7a3519666d7e2fbb9a4e3d0d1f8314f4eee1","observation_id":"d6a5ee66-2256-436c-9043-9bf48ac6f9e3","resolution":{"observed_at":"2026-08-12T14:16:28.872436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.848527Z","title":"Liang, Lawrence Carin, and Yi- ran Chen","venue":null,"work_id":"cc11fbb5-c3f3-4967-91a8-7d129c2e1a93","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.093453Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:469359966eff1664c80a2ef28aaeac02014ea3f951d0647fab83da24e3f722df","observation_id":"c48b6b83-2909-4c77-8513-6c0a1656e732","resolution":{"observed_at":"2026-08-12T14:16:28.856410Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.832119Z","title":"Liang, Binghui Wang, Matthew Inkawhich, Lawrence Carin, and Yiran Chen","venue":null,"work_id":"2f7b7ee1-5675-448d-856e-b545875c53c9","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.100190Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:ff72c482f9066f2afb0f457076ba8bed96ea66a53dea5c1273f8583d2d417d34","observation_id":"fc09299c-4705-4839-8d1f-2babcfc4b894","resolution":{"observed_at":"2026-08-12T14:16:28.838293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.816238Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"7f03bbbc-0954-4d64-b9f6-3cab2341608e","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.105120Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:0fe1dddb01073d1795d70ab99ac1a576c20b0493bcf334a97b72e62337c614fd","observation_id":"5359e9b5-7416-4166-b8a5-01f2a19babc2","resolution":{"observed_at":"2026-08-12T14:16:28.821388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.795932Z","title":"Towards transferable targeted attack","venue":null,"work_id":"64e30600-0adc-46fd-a2b8-f45860579218","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.109284Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:c3f6f407c48924dcfb63765f7b86adfd300d5beba4d2df5869505abf52af1761","observation_id":"efe120e2-57c5-462f-8a5c-06c3debb741b","resolution":{"observed_at":"2026-08-12T14:16:28.800945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.778331Z","title":"Yet another intermediate-level attack","venue":null,"work_id":"35123e40-bf33-48ab-ac8c-cf87f5ff5137","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.114228Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:35d03ae88af9e9cc75cd788ff94d7b9c38976bcea8807aa3f79cf566a139df4b","observation_id":"846017e8-b36b-461d-b0c7-26534f9b8b1b","resolution":{"observed_at":"2026-08-12T14:16:28.783843Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.764348Z","title":"Physical-world optical adversarial attacks on 3d face recognition","venue":null,"work_id":"2090adca-299b-438d-925a-23ae961820f3","year":2023},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.118998Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:8f3adabb99d1a9f838ae06452425c4683ee9489da46892fefc119b36797ac397","observation_id":"a30affa3-1c42-4366-b441-eb21d6158fb5","resolution":{"observed_at":"2026-08-12T14:16:28.768849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.745521Z","title":"UV-attack: Physical-world adversarial attacks on person detection via dynamic-NeRF-based UV mapping","venue":null,"work_id":"dec8e541-eb54-470f-84d8-f65341cec0bb","year":2025},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.126753Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:05de29712297fb17ae2791859184beee5137ff9ea2a873ca448f75c23ad2519b","observation_id":"f731843e-c125-49ea-a24c-ad3a413acb6a","resolution":{"observed_at":"2026-08-12T14:16:28.754197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.727049Z","title":"Styless: Boosting the trans- ferability of adversarial examples","venue":null,"work_id":"ee86c2d4-7fbe-4b7c-af05-2a1a33e1ea03","year":2023},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.131912Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:15cca8ee2765b8f57a19aee067e3bc7fded831fb14ca3cdb77a935325c6b7a3c","observation_id":"05c778d7-fc5c-4840-9042-bfa00a9b25e6","resolution":{"observed_at":"2026-08-12T14:16:28.733437Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.709146Z","title":"Hopcroft","venue":null,"work_id":"989c7eaf-c2ad-4b2c-9c85-27f78de28481","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.138094Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:842df9a800a4805929c485ed6227bd79611cf6b6d3f7b1cfd0957f544111476e","observation_id":"134dae42-93e8-48e1-9f0a-748c20e32f13","resolution":{"observed_at":"2026-08-12T14:16:28.714421Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.690352Z","title":"Delving into transferable adversarial examples and black- box attacks","venue":null,"work_id":"5c00215d-24c6-4af4-8fb8-332dc2afc309","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.141926Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:3df0da8fb18cc4fffed7af9663b401fdaa181e5d2ca10fa59a7fedff39861615","observation_id":"b8a6054e-284f-4ab8-a4f2-b3fb46777fce","resolution":{"observed_at":"2026-08-12T14:16:28.696333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.668106Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"a9141263-89d0-4c51-80d7-76d6c97ccc72","year":2018},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.146381Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:67772a706ea590d0aa6d49e982af2df5fde40f9b9bb8a5cc03686704d86e67a5","observation_id":"471ac6cb-9996-4467-9286-362ce0315817","resolution":{"observed_at":"2026-08-12T14:16:28.673940Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.648979Z","title":"On generating trans- ferable targeted perturbations","venue":null,"work_id":"41aa59a0-b29b-4666-bbd5-40d12a211071","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.152923Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:65f73438a274c84ad7a8da67343194ca06479309b6834d14e3e46ba5c029ba79","observation_id":"087b5999-1c7d-4643-b2ca-90ab3c1f61e3","resolution":{"observed_at":"2026-08-12T14:16:28.654825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.627384Z","title":"Boosting the transferability of ad- versarial attacks with reverse adversarial perturbation","venue":null,"work_id":"f57e0916-e52f-4e6c-bb48-9f5a870dc9fb","year":2022},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.158806Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:79efdc32d6fc5f6b4db936c7a42451cbe5849cf8531e45abbdcd9ae72261fd9b","observation_id":"1a6141dd-eab3-48ce-a272-5026f5488cbc","resolution":{"observed_at":"2026-08-12T14:16:28.635633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.610732Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":"40eb2522-1599-4c29-b48e-f8304965d666","year":2018},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.165521Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:3652dd7decb247b72261e8848342cec2a40ca73a052b430ec8638c43a55764e2","observation_id":"d7cd5ee2-f27a-4864-86c7-9c0dfbc2c9f7","resolution":{"observed_at":"2026-08-12T14:16:28.616491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.172881Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.172881Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:2f85fa4a0f524049fb73072a35533ace9f9151a3fe79c82b9074ae16b5b3c481","observation_id":"be8576e7-550d-4801-b0fc-40fe80f41d03","resolution":{"observed_at":"2026-08-12T14:16:28.172881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.177614Z","title":"Rethinking the in- ception architecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.177614Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:c3abbbb80244b601ba20778fd740b8f106b08691c900be7a5335934ecbad8c98","observation_id":"4c893639-4cb0-412b-8964-98d9b712eda8","resolution":{"observed_at":"2026-08-12T14:16:28.177614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.560198Z","title":null,"venue":null,"work_id":"7b892725-7a43-4c81-ab7a-d5f1c257d041","year":2017},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.183302Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:fac354dd56f6b5a180e51b028539474d57db6f7911fcb7862389ac90c9e209dd","observation_id":"1e94acd8-bbc2-4a7f-b5ce-e36528a1ec56","resolution":{"observed_at":"2026-08-12T14:16:28.565728Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.188126Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.188126Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:972ea54ea98d5564da748f572a70d501cc8f7cc1b07312068cd8d3afca47cf6f","observation_id":"fc04feca-dd56-4901-9b0b-f050b71b48fe","resolution":{"observed_at":"2026-08-12T14:16:28.188126Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.533876Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":"14a6e15c-6302-4901-b2c5-ec698e5e2a90","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.194499Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:21018723f7ffee991b18d5a9a60c13ff564d1890f4d0c1625378047b488ae18c","observation_id":"40d65317-3407-4393-9b9d-e151f7941e6d","resolution":{"observed_at":"2026-08-12T14:16:28.539880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.514322Z","title":"Admix: Enhancing the transferability of adversarial attacks","venue":null,"work_id":"aafbaefd-0111-438e-8b24-d97b596e0ae2","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.198511Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:dc9085e581b82a680d1ac275f6f8809bb09b0a8c2361a5bd6032eefda4867c19","observation_id":"fd52e727-0b3b-4f4c-aff6-037b0f8bebba","resolution":{"observed_at":"2026-08-12T14:16:28.522432Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.487997Z","title":"Feature importance-aware transfer- able adversarial attacks","venue":null,"work_id":"03c27c0c-1eb4-467c-89b4-f9795a52881d","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.202757Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:c3ffc138e02b9109b04309601b049135a5764402989abb1e0d7637987cd3e505","observation_id":"7f8803aa-32cc-49b1-b6fd-888c014c2a69","resolution":{"observed_at":"2026-08-12T14:16:28.495046Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.468826Z","title":"Towards trans- ferable targeted adversarial examples","venue":null,"work_id":"384a568e-3319-4957-8ef1-fdd6a767baf9","year":2023},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.209839Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:d3604429811e000221ca70e2f0fc426046e09faafdf1a6135757c2bfdcc2e666","observation_id":"692f8b88-5041-48af-b0b5-3e3e943ca4cf","resolution":{"observed_at":"2026-08-12T14:16:28.476042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.449948Z","title":"Enhancing the self-universality for transferable tar- geted attacks","venue":null,"work_id":"f026b0f5-6e3a-4ca3-b9bb-57aa8f703b0b","year":2023},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.213935Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:974770ff52971f9f67997ee434e919a0724c0d1499f0be255efcfbc9e855d2bd","observation_id":"fedc2ec4-2bab-4d75-a58f-f27b1b3475fa","resolution":{"observed_at":"2026-08-12T14:16:28.454937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.432869Z","title":"Skip connections matter: On the transferability of adversarial examples generated with resnets","venue":null,"work_id":"cefed0de-2a01-43d9-898b-4e997bbe800b","year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.217885Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:7ba8ad5c2a817d3e2a89751c589eaf5b648ab24457bd93e800c87804fae015ad","observation_id":"2e036693-f6f5-44fa-bdff-f48c95e562f1","resolution":{"observed_at":"2026-08-12T14:16:28.437888Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.409180Z","title":"Im- proving the transferability of adversarial samples with adver- sarial transformations","venue":null,"work_id":"037bba36-c056-41ce-a715-198e0230a537","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.222344Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:8d29920bbce3f15d92cec2780533931247f9d2e235c15379fd4b99aea351a505","observation_id":"f5afdc18-c05e-48f6-9ff9-a8972953a61f","resolution":{"observed_at":"2026-08-12T14:16:28.416607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.390381Z","title":null,"venue":null,"work_id":"33166b29-c20f-4696-93c7-24c4dfb35910","year":null},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.227414Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:587743718d211567b2406ab90eda8a48eb8c7809e017bb13bfc7cd879fdd3093","observation_id":"21cd60eb-6aff-4bae-8665-f625e1f471ac","resolution":{"observed_at":"2026-08-12T14:16:28.395258Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.373450Z","title":"Boosting transferability of targeted adversarial exam- ples via hierarchical generative networks","venue":null,"work_id":"b480d743-bcc9-4ac2-b059-855ed7d58d5a","year":2022},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.235812Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:6b59f8b54bbce36c003823888f972942f6105db2e76de33b6fc744e508e218d2","observation_id":"7343574c-40b6-42ec-a8e1-283a43f84ebc","resolution":{"observed_at":"2026-08-12T14:16:28.379790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.353202Z","title":"Improv- ing adversarial transferability via neuron attribution-based attacks","venue":null,"work_id":"1ad8a7ca-d843-4bfe-b5a0-0e0d6a8cea42","year":2022},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.243799Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:fbc3895efec8ed485350f53f998543f920e8df4c0fd31865313e199630c90b4e","observation_id":"eda8d063-00b4-41f3-b96c-c256851ca2d3","resolution":{"observed_at":"2026-08-12T14:16:28.359578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.321676Z","title":"On suc- cess and simplicity: A second look at transferable targeted attacks","venue":null,"work_id":"a7e7f506-71da-41c2-8271-0771b089709b","year":2021},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.249159Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:eec925e5e3998e501ec0bb0c9518d312a228c9ac3940cea43ab3c42bced8bc8d","observation_id":"31366859-97e5-4ee2-acfb-2073d3c9f17e","resolution":{"observed_at":"2026-08-12T14:16:28.327097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T14:16:28.300769Z","title":"Is this image a photo of {target label}? Yes or No?","venue":null,"work_id":"b33c67ae-1e38-469c-8602-d5cc05099c19","year":2020},"citing_paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-12T14:16:28.254397Z"},"links":{"citing_paper":"/paper/2411.15553"},"observation_digest":"sha256:d4ffc5869a3ae147d7fb60380ba13f5db67a24b51e0fcd7c8d2486aa135f9943","observation_id":"964a5691-1816-40c8-9c54-de2d74908a6a","resolution":{"observed_at":"2026-08-12T14:16:28.309194Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.15553","last_updated":"2025-03-25T07:01:56Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T14:07:55.468925Z","submitted_at":"2024-11-23T13:18:25Z","title":"Improving Transferable Targeted Attacks with Feature Tuning Mixup"},"reference_resolution":{"displayed":50,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":41},"total_outbound_references":50},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 50 of 50 outbound references and 0 inbound Pith citation observations for arXiv:2411.15553."}