{"as_of":"2026-08-13T00:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:81ab8bc08e23d1eaef7964b9ae9091ee5a0d707b0e412baa4b5449a6442ba9fe","coverage":[{"denominator":24,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":24,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T13:32:43.541240Z","state":"measured"},{"denominator":24,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":24,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.16162/citation-record","integrity":"/paper/2411.16162/integrity","json":"/paper/2411.16162/citation-record.json","paper":"/paper/2411.16162"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-12T13:32:43.386413Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":1,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.386413Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:2d212d3e20f64d5d4e523026d9b17b1b4525c61f2ec580d1e8cc557a3e058448","observation_id":"3f71ce10-26d4-46b0-a6fb-c5af140d3b2a","resolution":{"observed_at":"2026-08-12T13:32:43.386413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T13:32:43.395100Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":2,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.395100Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:1445bdf96f3c4273c76cbda398d98c4bfd9e0829ddec931dbd98d3675ba820c7","observation_id":"44a7707d-19dd-4e00-a41e-67794b68d496","resolution":{"observed_at":"2026-08-12T13:32:43.395100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.403293Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":3,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.403293Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:0b7aba158c442582fb78efd510a2372b35e88a966f1f60b3b698514b0e921eda","observation_id":"96620aed-f6b8-4383-ada9-f6625b51552e","resolution":{"observed_at":"2026-08-12T13:32:43.403293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.972884Z","title":"Sparse and imperceivable adversarial attacks","venue":null,"work_id":"55514257-b74b-4e03-83d2-b9aa6426fd6d","year":2019},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":4,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.409451Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:2bf8cca7590f75c199219568420188e7cdcb19c987b4cb2a1a4d444a2197a7e9","observation_id":"095c2f0a-0257-4ac6-ad99-846526bcfd77","resolution":{"observed_at":"2026-08-12T13:32:43.977830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.957138Z","title":"Sparse adversarial attack via perturbation factorization","venue":null,"work_id":"d33ccae1-fc13-41fd-8ebb-a314c6debb32","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":5,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.419315Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:f58cc3ddbbba43d21f6aee2dcd9f1667beed86158495dc769500c9cfcf55578f","observation_id":"f4786bd9-71f5-45a6-a3ba-c92a5c0d2f1e","resolution":{"observed_at":"2026-08-12T13:32:43.963027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.939384Z","title":"Mind the box: l\\_1 -apgd for sparse adversarial attacks on image classifiers","venue":null,"work_id":"5cea8b70-dfb0-427f-8a87-d93f924e2b7e","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":6,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.425871Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:6f0e735248a8e821efbb23061ee25c67665ad5e3cc333fdaba3f68295343e749","observation_id":"89af1b6e-f553-4930-955d-85ede9148ef3","resolution":{"observed_at":"2026-08-12T13:32:43.945141Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.923282Z","title":"Greedyfool: Distortion-aware sparse adversarial attack","venue":null,"work_id":"c1c62c09-9c03-4652-9cd2-83a8c699ecf4","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.432368Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:7b072191769ceb33859bdb40218703e471f22de4e87ecaa772ffe1402a8c6d7c","observation_id":"7f180394-d211-49ba-807a-b6bee5797747","resolution":{"observed_at":"2026-08-12T13:32:43.928566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.904734Z","title":"Physical passive patch adversarial attacks on visual odometry systems","venue":null,"work_id":"fbdad5c5-1bb9-47d2-9344-a70a36b92fcb","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":8,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.437605Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:79c06b065269aecc433a553bd77d90d5fd3eecebc5bbf86a531fc5046c4549fb","observation_id":"7af533b5-0779-4fcd-8de8-f33bfa9ce7fb","resolution":{"observed_at":"2026-08-12T13:32:43.911044Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1910.11099","last_updated":"2020-07-06T03:06:26Z","snapshot_observed_at":"2026-08-11T01:09:53.555164Z","submitted_at":"2019-10-18T02:20:17Z","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.11099","snapshot_observed_at":"2026-08-12T13:32:43.442166Z","title":"Evading real-time person detectors by adversarial t-shirt","venue":null,"work_id":null,"year":1910},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":9,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.442166Z"},"links":{"cited_paper":"/paper/1910.11099","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:21eba2e4c26ca2dda2963853842c0ed858e47396ed7ec893266b9fd6491372fa","observation_id":"0d70a4dd-badf-4676-a7e7-106eee03cd47","resolution":{"observed_at":"2026-08-12T13:32:43.442166Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.887995Z","title":"The translucent patch: A physical and universal attack on object detectors","venue":null,"work_id":"770d40d7-8e1d-42ea-8a21-0689e1c45f4e","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":10,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.447262Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:ffbb3efdf3cd35e2b44f5fbbca650a9d2e20678da59970e382b3febb81028daa","observation_id":"f11ed155-bd86-4cde-893b-08756bb3df13","resolution":{"observed_at":"2026-08-12T13:32:43.892937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.872438Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks","venue":null,"work_id":"737605f5-e26c-4282-9e3b-7471290be16b","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":11,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.452567Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:35a1307dd1143acbe90fb5f78e8da64d86cade3f1ca66a73b2fb1432dad3a92d","observation_id":"4cf06a25-bd99-443b-a62c-0af855f4f774","resolution":{"observed_at":"2026-08-12T13:32:43.877076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.857115Z","title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector","venue":null,"work_id":"95ec1e1f-e86d-454d-942a-cb0666199318","year":2018},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":12,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.457450Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:a678cddcacff5df10b9ace302e42317927027fd6ac79d9d2e1fdbd08cb2a8f0b","observation_id":"c381690b-822e-4bac-8e63-13d7c72235df","resolution":{"observed_at":"2026-08-12T13:32:43.862246Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.834417Z","title":"Adversarial sticker: A stealthy attack method in the physical world","venue":null,"work_id":"cf0ef7a3-6eec-497c-9b93-3ab84f6bc590","year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":13,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.468797Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:943bfd222463d4b5cf01ac3f7f57d34e3964641be348e9543ebf02d937ddc467","observation_id":"cfdfc25b-1c7a-44ed-aa99-42274168ba37","resolution":{"observed_at":"2026-08-12T13:32:43.840592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.817569Z","title":"Sparsefool: a few pixels make a big difference","venue":null,"work_id":"e2a93839-38c7-4d50-a363-0ebb492fde4a","year":2019},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":14,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.477988Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:e0d56e1f52251440d090d0258312b5d011c2597088598f5851ef3253b5bac15e","observation_id":"c746c27d-d18d-4c72-b8c6-ed1d367876fa","resolution":{"observed_at":"2026-08-12T13:32:43.822557Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.482358Z","title":"Generative adversarial networks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":15,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.482358Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:e9a229d8000a77149e8ffbca9cfc17d7505bc1dbf6556dea8a234de0e113be73","observation_id":"df96dbeb-9435-411b-8547-6a7cc42cfe9a","resolution":{"observed_at":"2026-08-12T13:32:43.482358Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.787498Z","title":"Sparse and imperceptible adversarial attack via a homotopy algorithm","venue":null,"work_id":"d2bb9a48-0873-4c71-b0e1-1fb65bdd8d61","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":16,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.489060Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:8ab3fe03055c82246fcfef21c42bcd4473b75d94d22d7594a3b7bd09a002f7df","observation_id":"17606f56-7558-477d-8c09-ee4d94044bd2","resolution":{"observed_at":"2026-08-12T13:32:43.794913Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.495125Z","title":"Sparse and redundant representations: from theory to applications in signal and image processing","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":17,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.495125Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:baa4b40169a9ffe01b9c21a1e284c1272328c65835afdf9c4019a60e5c5c7d91","observation_id":"1b0de2c4-4469-4b43-a9ec-965d536fafd5","resolution":{"observed_at":"2026-08-12T13:32:43.495125Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.501037Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":18,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.501037Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:ac96416015690af7f6445805051d2948e08c6f32599bfad9932c41920b39dc9f","observation_id":"9d7d48be-a785-4fd8-88f0-f423df80585d","resolution":{"observed_at":"2026-08-12T13:32:43.501037Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.508961Z","title":"Rethinking the inception architecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":19,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.508961Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:0cb9583cdb9c0d44744948e138146fae6a314969f580ff4be589fa13665760e7","observation_id":"6ff17f0f-c50f-43f9-a81d-ef36439d27b6","resolution":{"observed_at":"2026-08-12T13:32:43.508961Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.732147Z","title":"Resnet 50","venue":null,"work_id":"e71a1655-72fd-4a12-95ac-85dd56e66008","year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":20,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.514560Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:a659566f0b59d179edecddc91e03d1aa2bb2f11b2197de7f8e9bcdb9f0846686","observation_id":"e343c87e-6e8c-49fc-896a-822b87ad918c","resolution":{"observed_at":"2026-08-12T13:32:43.740079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.520831Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":21,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.520831Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:af389d0791f4aa29373a7f4eb1418e2b4c8ea703385a6bb51e4ae3e1d3a90ee4","observation_id":"a4b06e26-11b5-4f87-9181-6144076596b5","resolution":{"observed_at":"2026-08-12T13:32:43.520831Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.528810Z","title":"A convnet for the 2020s","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":22,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.528810Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:66a622fe67787054bcc18a2a939daef5aa5aa58a5af3ec40747769539ed8d285","observation_id":"60f36b61-9287-4d75-9490-e0584791f8dc","resolution":{"observed_at":"2026-08-12T13:32:43.528810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-08-11T03:41:16.906633Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-12T13:32:43.534316Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":23,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.534316Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:94742207614fa916a16ce649722ac17291d3089105c2d2c4277038559ba3605d","observation_id":"74a94fbc-cd4e-4400-b2e5-5f70f7b654db","resolution":{"observed_at":"2026-08-12T13:32:43.534316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T13:32:43.675998Z","title":"Do adversarially robust imagenet models transfer better? Advances in Neural Information Processing Systems, 33: 0 3533--3545, 2020","venue":null,"work_id":"6d85c53d-36eb-420b-9b7e-1ff91fe058f4","year":2020},"citing_paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information","version":1},"reference_index":24,"source":"arxiv_source","source_observed_at":"2026-08-12T13:32:43.541240Z"},"links":{"citing_paper":"/paper/2411.16162"},"observation_digest":"sha256:85293ddbb36c78b8c486658d95b28694582f019838f3157732030dcd4a426b7b","observation_id":"de3612b0-cbbc-474f-971b-9117ed8a30f7","resolution":{"observed_at":"2026-08-12T13:32:43.686041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2411.16162","last_updated":"2024-11-25T07:36:46Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T13:27:04.793933Z","submitted_at":"2024-11-25T07:36:46Z","title":"Sparse patches adversarial attacks via extrapolating point-wise information"},"reference_resolution":{"displayed":24,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":11,"verified_exact":0,"verified_fuzzy":13},"total_outbound_references":24},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 24 of 24 outbound references and 0 inbound Pith citation observations for arXiv:2411.16162."}