{"as_of":"2026-08-13T01:37:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0b667aa200d7543ae85e17efd73145071f35c434d02b435146a58309d2985578","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-12T10:56:43.943937Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2411.18776/citation-record","integrity":"/paper/2411.18776/integrity","json":"/paper/2411.18776/citation-record.json","paper":"/paper/2411.18776"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.834540Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.834540Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:765b78c92f6ba79cff08bbd434bc1aa9977f41d5d3455290ebfa69f85dc747db","observation_id":"45fe610b-09ba-4b26-9030-f7c728b231c8","resolution":{"observed_at":"2026-08-12T10:56:43.834540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.838161Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.838161Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:88d1c11110e6bca400f786a462993985dd25073d696ffe9bf64234e6d1493231","observation_id":"948919b1-3026-4006-a0de-62c3848d332f","resolution":{"observed_at":"2026-08-12T10:56:43.838161Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.844649Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.844649Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:1d36e0e8532744966c2b32d17329c7ec95eada2e36cb46c77346d03e092e9008","observation_id":"dac85b56-e6e6-4642-8132-74b5dc9425d2","resolution":{"observed_at":"2026-08-12T10:56:43.844649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1810.00069","last_updated":"2018-09-28T20:09:04Z","snapshot_observed_at":"2026-07-06T07:04:59.871975Z","submitted_at":"2018-09-28T20:09:04Z","title":"Adversarial Attacks and Defences: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.00069","snapshot_observed_at":"2026-08-12T10:56:43.847680Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.847680Z"},"links":{"cited_paper":"/paper/1810.00069","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b646efd7b4e1cf0f33ebd9fe521422074297b90174e60d9c002f2576efcb9041","observation_id":"af0c7b31-d6e4-48c4-bb09-0ab4bde60183","resolution":{"observed_at":"2026-08-12T10:56:43.847680Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.252593Z","title":null,"venue":null,"work_id":"bdc9921e-42ca-463d-8bc8-fb8f12559c7a","year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.850939Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:43d93775e212b64bf9de979cb872c7e3563317132a4eb03203e0164de3b22d95","observation_id":"64c96d27-293f-42f1-82d5-20c2fb1e89f7","resolution":{"observed_at":"2026-08-12T10:56:44.255228Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.244518Z","title":null,"venue":null,"work_id":"97f41b1d-0eb6-4067-b96d-e32e58eabc4d","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.853911Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:e59951e79822bae5a4b1b2e438f2a54b3f8453a0a894ec0b207479ff492c298c","observation_id":"dce810f6-00d6-44c5-9306-10d174af74a5","resolution":{"observed_at":"2026-08-12T10:56:44.247292Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.856845Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.856845Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:4681d66cb1699ca294682b7e26bd3ded070c56110c8a2b7f023ca26dc3813913","observation_id":"71ec5873-32e7-4f4f-bc15-dd5897829eaf","resolution":{"observed_at":"2026-08-12T10:56:43.856845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.230294Z","title":null,"venue":null,"work_id":"c2d4a01c-6627-4cca-9716-27ba14ebb5f3","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.859056Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:ff1200f766133e89b54bf57c12714d0c4c23c24b497dc44309b6c360f03a5e4a","observation_id":"39bac62a-709b-48ee-9c6e-0c367f33194f","resolution":{"observed_at":"2026-08-12T10:56:44.233332Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.221523Z","title":null,"venue":null,"work_id":"48e69683-c71f-48f8-9aee-eabd05a60832","year":2002},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.861270Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:a92e91aa56990e333b5b34b3b4d7db34c4a8a7b74ac95595a7102d2c959765f3","observation_id":"5d294d29-5bed-49b6-a0ac-942769bb4893","resolution":{"observed_at":"2026-08-12T10:56:44.224442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-12T10:56:43.863349Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.863349Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:55913d3a1418c0d67e512960bd3f8ff38ece1880fb5e655e120e68c33c973f26","observation_id":"1b1fd88c-e0c2-4557-b3bf-7133e15a9454","resolution":{"observed_at":"2026-08-12T10:56:43.863349Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1503.02531","last_updated":"2015-03-09T15:44:49Z","snapshot_observed_at":"2026-07-06T04:11:24.157003Z","submitted_at":"2015-03-09T15:44:49Z","title":"Distilling the Knowledge in a Neural Network","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1503.02531","snapshot_observed_at":"2026-08-12T10:56:43.865913Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.865913Z"},"links":{"cited_paper":"/paper/1503.02531","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:cbd03c59f282365795aee77aa2336682c0193eef6d37ac48b93ee2abc5707c5e","observation_id":"006a708b-0858-4043-9ff5-2acdb30656e2","resolution":{"observed_at":"2026-08-12T10:56:43.865913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.213099Z","title":null,"venue":null,"work_id":"021b9195-8ceb-4c95-8526-e4bb3ed7e39d","year":2024},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.868464Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:65c401045f3197804242d822d63f3d367bb3e72f950143bfea1fdf16e3c0693c","observation_id":"922f70d7-78c5-4b95-a891-8206c6713a91","resolution":{"observed_at":"2026-08-12T10:56:44.215938Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.204207Z","title":null,"venue":null,"work_id":"0b9e3365-da8b-494c-a355-3b504e93eaff","year":1987},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.870622Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2fa055fd1cae1d2f6f639e3e4a1b9d2edf63e2138fa33fc99611776589ba14d5","observation_id":"5c5fb5ff-87c1-454b-89ab-61f555be90dc","resolution":{"observed_at":"2026-08-12T10:56:44.207177Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.195868Z","title":null,"venue":null,"work_id":"07ec255a-e957-4226-9e07-3564487d4a6b","year":1988},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.872860Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:cdf1cf262b3f131d17a981db6c05faa18d16a33b0f1b5f69dacdb991caa444dd","observation_id":"e2669584-9db4-46b2-a1b8-3ff350c985bf","resolution":{"observed_at":"2026-08-12T10:56:44.198776Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.187520Z","title":null,"venue":null,"work_id":"79eb889e-40fa-402a-87e0-8f3b73cc4980","year":2020},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.875319Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:b1efca9d7486264087c07376ed3252d15ddd5d3734f26f47c9fdfa6b3549ff49","observation_id":"25dcc605-ab9f-4644-852d-7a5ebc7c543b","resolution":{"observed_at":"2026-08-12T10:56:44.190410Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.179266Z","title":null,"venue":null,"work_id":"e8fefb97-dc06-420c-9519-bdda0125cbde","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.877695Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:29279cf2da9ba3078915364e2477a16b598ce3a62f8fc288544b78dd77f81dc5","observation_id":"9df0ef8e-44da-45b6-9b67-06e9b708c78b","resolution":{"observed_at":"2026-08-12T10:56:44.182107Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.171236Z","title":null,"venue":null,"work_id":"214fa6d9-0b2d-47dd-adf6-fe59c9d9191f","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.880047Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:be8589c2a56a93e7088c0869a87deacbcf08bac07021beb5e4ee015960563b1e","observation_id":"93b51c7c-0607-4a2a-a1d4-446ea75e94a0","resolution":{"observed_at":"2026-08-12T10:56:44.174002Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1912.06059","last_updated":"2019-12-12T16:07:20Z","snapshot_observed_at":"2026-07-06T08:44:06.481703Z","submitted_at":"2019-12-12T16:07:20Z","title":"Grid Search, Random Search, Genetic Algorithm: A Big Comparison for NAS","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1912.06059","snapshot_observed_at":"2026-08-12T10:56:43.882385Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.882385Z"},"links":{"cited_paper":"/paper/1912.06059","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:ae6bad82108fd0ad0bbacd8a5dc8f11bf8a75b001f7a7fcded8b2bb18b943004","observation_id":"ccb3a67b-5445-4305-8d54-07629b80fad9","resolution":{"observed_at":"2026-08-12T10:56:43.882385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.885084Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.885084Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2a74c15f2cb1e130dddc1eec15b0be01b5b0d5d757eb280424156b967faeb0e8","observation_id":"ce33d872-d739-4ef8-a2d5-8019982d4d5f","resolution":{"observed_at":"2026-08-12T10:56:43.885084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.14267","last_updated":"2023-07-16T06:05:14Z","snapshot_observed_at":"2026-07-06T14:56:35.804487Z","submitted_at":"2023-02-28T03:01:58Z","title":"Adversarial Attack with Raindrops","version":2},"cited_work":{"arxiv_id":"2302.14267","doi":null,"metadata_source":"pith","pith_arxiv_id":"2302.14267","snapshot_observed_at":"2026-08-12T10:56:44.031913Z","title":"Adversarial Attack with Raindrops","venue":"cs.CV","work_id":"1eeb37f8-9768-42c9-bbc2-ba5e5017dc65","year":2023},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.887540Z"},"links":{"cited_paper":"/paper/2302.14267","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:7d95f73329335369ce8d43279a4a7c626ef4d7be1ff45abc0860d9c8435b5fc9","observation_id":"cb4f2f48-df0d-409c-9886-2652ec17be2d","resolution":{"observed_at":"2026-08-12T10:56:44.035165Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02494","last_updated":"2017-12-07T05:13:54Z","snapshot_observed_at":"2026-07-06T06:13:11.382074Z","submitted_at":"2017-12-07T05:13:54Z","title":"Adversarial Examples that Fool Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02494","snapshot_observed_at":"2026-08-12T10:56:43.890556Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.890556Z"},"links":{"cited_paper":"/paper/1712.02494","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:63d210cf892a14c9d2473cf5b65d3fc58e3f0fb1928c1b55ababef60e5dedff0","observation_id":"4f5b9afb-9ae2-4496-8b7a-fb9c62613fc7","resolution":{"observed_at":"2026-08-12T10:56:43.890556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.03337","last_updated":"2017-10-26T21:53:58Z","snapshot_observed_at":"2026-07-06T06:03:25.270202Z","submitted_at":"2017-10-09T22:20:59Z","title":"Standard detectors aren't (currently) fooled by physical adversarial stop signs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.03337","snapshot_observed_at":"2026-08-12T10:56:43.893416Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.893416Z"},"links":{"cited_paper":"/paper/1710.03337","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:7ca076148019f5850dbcaca21ed54d1377d41f4df8dcbaac2ee771de80c4a3b1","observation_id":"34d1b2cc-3421-416d-983b-17c252811037","resolution":{"observed_at":"2026-08-12T10:56:43.893416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-12T10:56:43.896370Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.896370Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:9302b4fca2c64ac06507428023981328f73d5560b4f1ca121c435f1796a88d56","observation_id":"887c33ff-5268-4646-b39c-9b8ba363304d","resolution":{"observed_at":"2026-08-12T10:56:43.896370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.158019Z","title":null,"venue":null,"work_id":"6a225b96-3318-40ad-80ee-5bc18665de69","year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.899280Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2f23f5d52abaeb9708d868853896b68e9d3d5ed466ed00a540c80ad9eb4e586b","observation_id":"f458a912-2dac-4e11-8c39-8ff4e1d26f2d","resolution":{"observed_at":"2026-08-12T10:56:44.160855Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.149518Z","title":null,"venue":null,"work_id":"02a1d8f6-02fb-409e-a0a0-11062b18196b","year":2012},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.901931Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:3761e705a35ca0a35cb74170e86c97c4408d3c496c39ea94595a7db06974c2bb","observation_id":"e483c579-771b-4043-92eb-ac79015fc95c","resolution":{"observed_at":"2026-08-12T10:56:44.152502Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.904494Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.904494Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:dcd79c075a611234854a038d2c1ab9c75f98175dbedb13f315e133f2ebbe4583","observation_id":"432e8879-d57e-4c57-8e0c-5977da0611c7","resolution":{"observed_at":"2026-08-12T10:56:43.904494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.136129Z","title":null,"venue":null,"work_id":"bf308c0f-7760-4383-be7c-10bb0c7254f0","year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.907427Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:34358ffc56d08abb28e22d09d211a38e9401ecb91f2021c127708bfa6be157bd","observation_id":"85c7b490-7905-4f01-a324-2fe30ded0325","resolution":{"observed_at":"2026-08-12T10:56:44.138975Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.910016Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.910016Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:6612dbbe34083a277edb0e34fabcaca99c9714e7ad34cfef5c9e88debc7c8c12","observation_id":"54e1f883-5bab-48a7-b4da-cd8c13162172","resolution":{"observed_at":"2026-08-12T10:56:43.910016Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.119239Z","title":null,"venue":null,"work_id":"ccb8e020-1429-4188-8371-1ffc8dae6ede","year":2023},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.915960Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:9c8e9915c0077a572e07377ad648c51218536ded250f77a14e797784bd53ca54","observation_id":"c607afd0-a94b-43c9-9524-ce9072929152","resolution":{"observed_at":"2026-08-12T10:56:44.121842Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.918587Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.918587Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:d80d018484c33bf0b234c5ea4043b5a9ffe028fbc6192010059b0242aa49f903","observation_id":"24cbc291-f357-4e0b-8a8e-44fe7ffb82c3","resolution":{"observed_at":"2026-08-12T10:56:43.918587Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1506.01497","last_updated":"2016-01-06T06:30:17Z","snapshot_observed_at":"2026-07-06T04:19:53.343717Z","submitted_at":"2015-06-04T07:58:34Z","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.01497","snapshot_observed_at":"2026-08-12T10:56:43.921116Z","title":null,"venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.921116Z"},"links":{"cited_paper":"/paper/1506.01497","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:6d6a1f727773c0d2c2861d95be29d458cf843c998ed394a77c70beb0a1394a39","observation_id":"431fb2f4-84e6-40f6-8a8c-61701554fda7","resolution":{"observed_at":"2026-08-12T10:56:43.921116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.106661Z","title":null,"venue":null,"work_id":"db05d431-14f1-4441-99af-4c3b5c528d50","year":2014},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.924490Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:6ab1c1a6941e39e33e80f3d9e8b5f649602c0bfd340d0667f0753b4220831385","observation_id":"ad05b9fe-04c5-4834-ad1a-57f188bcc7bf","resolution":{"observed_at":"2026-08-12T10:56:44.109076Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1802.06430","last_updated":"2018-05-31T20:05:27Z","snapshot_observed_at":"2026-07-06T06:24:02.844055Z","submitted_at":"2018-02-18T19:39:28Z","title":"DARTS: Deceiving Autonomous Cars with Toxic Signs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.06430","snapshot_observed_at":"2026-08-12T10:56:43.927063Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.927063Z"},"links":{"cited_paper":"/paper/1802.06430","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:5a724fc7c6a79e015e18f167650bafb16ac1a466e4ba6ec348992a28940b89d1","observation_id":"501315a2-3772-41a7-8086-5363da384a35","resolution":{"observed_at":"2026-08-12T10:56:43.927063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02780","last_updated":"2018-03-26T20:28:30Z","snapshot_observed_at":"2026-07-06T06:17:47.185268Z","submitted_at":"2018-01-09T03:33:33Z","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","version":3},"cited_work":{"arxiv_id":"1801.02780","doi":null,"metadata_source":"pith","pith_arxiv_id":"1801.02780","snapshot_observed_at":"2026-08-12T10:56:43.986215Z","title":"Rogue Signs: Deceiving Traffic Sign Recognition with Malicious Ads and Logos","venue":"cs.CR","work_id":"674250c5-5c72-4f11-9544-376b8fb428c3","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.929721Z"},"links":{"cited_paper":"/paper/1801.02780","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:cf9816313541f0c500b15e0109de70ddf989d6ea0a0688918706b291d8128cf1","observation_id":"a3faf653-eecc-4976-9466-4af623f22cde","resolution":{"observed_at":"2026-08-12T10:56:43.989049Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.099247Z","title":null,"venue":null,"work_id":"da5fd0ab-55c1-45c3-9ac8-7480ed47db96","year":2018},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.932098Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:58345257d3c28faa5d055c90e0ea366861551dcb4a8f1dafe77644e0e9108fb2","observation_id":"50229133-300c-42a0-9028-af315a32107c","resolution":{"observed_at":"2026-08-12T10:56:44.101779Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-12T10:56:43.934334Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.934334Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:ea8010bbb604320237b419629e6a00fc19ec35b3753ed90084c4d35da1fc7794","observation_id":"a82b13a1-165b-4fe1-bfba-fc24f9e84227","resolution":{"observed_at":"2026-08-12T10:56:43.934334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.091404Z","title":null,"venue":null,"work_id":"5ea2d4c5-6f85-4af9-ab53-be4f98c3c41e","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.937006Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:50bdb29b30a5cbf9d5d82ff4dbf12c9f7640e21ac3cd65e6e796f8b0c46f093c","observation_id":"1f520288-97b6-4c59-b9c9-77a70d6e1e95","resolution":{"observed_at":"2026-08-12T10:56:44.094065Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.083759Z","title":null,"venue":null,"work_id":"7f8b4454-7139-4fdf-8a79-3834a8de0916","year":2021},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.939377Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:6fccf7fe2347955e725d95c5c66c9af464d54705895b8c02ec5808b872bb64cc","observation_id":"2dd8dd52-a490-41b1-9731-3a7c85291cb4","resolution":{"observed_at":"2026-08-12T10:56:44.086294Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1909.09552","last_updated":"2020-02-14T20:07:55Z","snapshot_observed_at":"2026-08-08T14:08:39.341444Z","submitted_at":"2019-09-20T15:11:09Z","title":"Defending Against Physically Realizable Attacks on Image Classification","version":2},"cited_work":{"arxiv_id":"1909.09552","doi":null,"metadata_source":"pith","pith_arxiv_id":"1909.09552","snapshot_observed_at":"2026-08-12T10:56:43.965241Z","title":"Defending Against Physically Realizable Attacks on Image Classification","venue":"cs.LG","work_id":"0ea5fca5-0cd8-42de-b2b4-ba640c09af1a","year":2019},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.941603Z"},"links":{"cited_paper":"/paper/1909.09552","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:f476899349cb3fe8b9d4807188078f46b55ea835f3756302e0fe31862261e536","observation_id":"86a93e97-d52e-4623-be7d-2b69fc214758","resolution":{"observed_at":"2026-08-12T10:56:43.970468Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:44.075970Z","title":null,"venue":null,"work_id":"61881a1d-237f-4e66-b03a-3048b1b87dd3","year":2022},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.943937Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:02c855cc3a9d1b53570c9247688eb503fa3084340b54296b9a70956164cb1eb6","observation_id":"d9006c88-05a1-40b1-8a83-e5da4a59406b","resolution":{"observed_at":"2026-08-12T10:56:44.078729Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-12T10:56:43.912809Z","title":"In 2016 IEEE symposium on security and privacy (SP)","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2016,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.912809Z"},"links":{"citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:40baa04e42061e7e6387d62671dee72c2d3f98da5035aa8cb950e5a1d35ba4ad","observation_id":"8a428018-f195-46a8-9c1e-657b8154719d","resolution":{"observed_at":"2026-08-12T10:56:43.912809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-12T10:56:43.841184Z","title":"arXiv preprint arXiv:1712.09665 (2017)","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification","version":2},"reference_index":2017,"source":"pdf_text","source_observed_at":"2026-08-12T10:56:43.841184Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2411.18776"},"observation_digest":"sha256:2e8668cd06e7eea8ec49b06d8a7fa6066c85ce5a40ab9f432cb3e37823989066","observation_id":"883d5582-374a-46b9-8b63-68e016de2219","resolution":{"observed_at":"2026-08-12T10:56:43.841184Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2411.18776","last_updated":"2025-02-26T00:12:19Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T10:51:22.259636Z","submitted_at":"2024-11-27T22:02:38Z","title":"Fall Leaf Adversarial Attack on Traffic Sign Classification"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":39,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2411.18776."}