{"as_of":"2026-08-18T17:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d155c2e955b0bbeb25da651d1d9b45e771e45ec18b83c7a7268e777f8321fe61","coverage":[{"denominator":37,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":37,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T15:21:47.180378Z","state":"measured"},{"denominator":37,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":37,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.11168/citation-record","integrity":"/paper/2412.11168/integrity","json":"/paper/2412.11168/citation-record.json","paper":"/paper/2412.11168"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.091696Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.091696Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:c2104ebdb823147aacc989d37c45686aac9d97a8e3b10b86ab4ce91f281c07f0","observation_id":"1afaee15-0c91-4e6c-b9a6-ff7d0d96d196","resolution":{"observed_at":"2026-08-11T15:21:47.091696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.094432Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.094432Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:b65dc807b1df17aa649e0b96c927cd00a95b31c57187c6eb524667cb0ad1f217","observation_id":"fa4b47e4-4b40-4edc-aa5d-73f392adef36","resolution":{"observed_at":"2026-08-11T15:21:47.094432Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.096946Z","title":"Adversarial examples: Attacks and defenses for deep learning,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.096946Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:6f7ebbafc184e0ec30530b7dc69cf141610e6d51affad34f62183a14e1f4686b","observation_id":"1c310578-6e3e-4f67-afac-96f0168fe496","resolution":{"observed_at":"2026-08-11T15:21:47.096946Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.428023Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":"35ff01e1-7a6b-4504-af28-db9048ae9c1f","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.099188Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:d9beeec07ae3e8bf84b875c8e466c539cf44b66070ab818920e47c4dede97343","observation_id":"607f65b8-6c07-4e1c-b196-771d1e11a58d","resolution":{"observed_at":"2026-08-11T15:21:47.430903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.420628Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"d4706360-ab3c-40cb-a6b7-267b64017b8c","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.101698Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:76ad8d88de3d9f537532bfc1a193a4208fead08a047b485387de10b1ded2a002","observation_id":"5b81565e-e397-4245-859f-e36b97dec889","resolution":{"observed_at":"2026-08-11T15:21:47.423477Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.413246Z","title":"Multi- layer feature division transferable adversarial attack,","venue":null,"work_id":"3226b9f2-9046-4c4b-895b-ceb28d063d34","year":2023},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.104265Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:f46fbbec1ccad146696e49912f5969bc1da1e55f916afb9633e9985e39ce5119","observation_id":"5e926c17-5f80-4036-a2bb-1f4612f54611","resolution":{"observed_at":"2026-08-11T15:21:47.415982Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.405915Z","title":"Enhance transferability of adver- sarial examples with model architecture,","venue":null,"work_id":"e3b0479d-6610-475e-ac53-a6c6e315c425","year":2023},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.106781Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:7dd582cb97062e28dd9aa0f380eb370052aa06f78936a7b2a95a18a969758301","observation_id":"0233dc8d-31a3-4ef8-85da-f9f32a115d38","resolution":{"observed_at":"2026-08-11T15:21:47.408794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.398675Z","title":"Dynamic generative targeted attacks with pattern injection,","venue":null,"work_id":"ca51418e-56a7-4ebc-8efe-4614591c35d0","year":2023},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.108990Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:420653faeedefb4e80fbff34d28e44c353020ced6bec1b4a53fdc0aba8e96510","observation_id":"969d570d-fa8e-45af-b232-d45b8d2c8fde","resolution":{"observed_at":"2026-08-11T15:21:47.401363Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.392077Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"35255746-cefb-4786-9226-ab663848158d","year":2017},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.111013Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:9c89b115b25f2c803296df0ef178af1323f8198b1b40158412bf6ba54430a182","observation_id":"240a58cb-b628-489d-8313-042ee18ad985","resolution":{"observed_at":"2026-08-11T15:21:47.394297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.385456Z","title":"Towards imperceptible and robust adversarial example attacks against neural networks,","venue":null,"work_id":"c35d2262-5028-458c-80d7-63b775292368","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.113368Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:20f1be9ec35362a8101544fe4cae07a893482c99ec18ae1b92bf9a26000cc99b","observation_id":"3af39c1f-9e97-4cdc-ab6f-ec527851a2d7","resolution":{"observed_at":"2026-08-11T15:21:47.388182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.379068Z","title":"Towards large yet imperceptible adversarial image perturbations with perceptual color distance,","venue":null,"work_id":"c692c2d9-8f9d-45b2-b85d-680de4928de8","year":2020},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.115516Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:03b8fe6c2b8479df806fb086082fa59ca344bc53422d2ddb79c80c344c0103d2","observation_id":"1284b92b-808c-4875-a65a-1729e7ef8727","resolution":{"observed_at":"2026-08-11T15:21:47.381392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.373110Z","title":"Perceptual adversarial robustness: Defense against unseen threat models,","venue":null,"work_id":"15c836a1-ba4d-4ac6-af49-e3376f48b080","year":2021},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.117608Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:bdc3d3a410d240507002c6395b4ad4608ba087b01918cee5bf630ff828e5a959","observation_id":"b26f0b1c-7b93-4237-baff-a1305495e41b","resolution":{"observed_at":"2026-08-11T15:21:47.375238Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.366502Z","title":"Advdrop: Adversarial attack to dnns by dropping information,","venue":null,"work_id":"dbfe678b-dce6-43a2-addb-bf3a74586171","year":2021},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.120145Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:9c70e9470381da472f8d863b1f06aa9fbde5503214f10731f8a6aef600d2946d","observation_id":"eee2bb62-22b3-47d1-884b-6c2d6dabe4fb","resolution":{"observed_at":"2026-08-11T15:21:47.369039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.360064Z","title":"Exploring fre- quency adversarial attacks for face forgery detection,","venue":null,"work_id":"7aacc473-f69f-4bf0-9b3f-154829877d8f","year":2022},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.122645Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:65db3931f0bc2607e04d3d4cb9cac51c16d91772aec8c6c6b322686aa3c2201a","observation_id":"9aa18ac2-adee-4fe7-9dd0-5b8bac1c3664","resolution":{"observed_at":"2026-08-11T15:21:47.362250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.353222Z","title":"Frequency-driven imperceptible adversarial attack on semantic similarity,","venue":null,"work_id":"b4f4c813-422b-4b22-a8d1-bc90ca3fba00","year":2022},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.125327Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:70f520226eab5968b023d11168854b13484c5a0e6668d9d836eccf20e9d06d29","observation_id":"0414a28d-268b-4ff7-8416-5cdee8e5f1ef","resolution":{"observed_at":"2026-08-11T15:21:47.355846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.345931Z","title":"Impercep- tible adversarial attack via invertible neural networks,","venue":null,"work_id":"e36874f1-efa3-44c0-a3b5-94f3a6b00410","year":2023},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.127750Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:626e2b6760eedee23723184bdf74d12603802d27bf36df17cfede9cc38e21861","observation_id":"2a88d44e-9c45-4e2e-b463-24cca2c67a01","resolution":{"observed_at":"2026-08-11T15:21:47.348642Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.338759Z","title":"On the suitability of lp-norms for creating and preventing adversarial examples,","venue":null,"work_id":"9ac34b7e-d0cb-4619-bfee-32b259c45565","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.130081Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:bd6eb333fc9e7081a5a31e149ba780d7d96f3d32fbcb854955a5229c861065f6","observation_id":"06c15ece-8c41-4771-806a-389fc0e7f170","resolution":{"observed_at":"2026-08-11T15:21:47.341664Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.331583Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":"45f844ef-c707-47f9-9ad9-7d20d54f953b","year":2019},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.132532Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:4adb949e4ae7a36890f861f734a0773e64b8e5cef8756194624a7e72dd403397","observation_id":"0248e79f-9f95-4a2e-b4b9-2ed23de6ab87","resolution":{"observed_at":"2026-08-11T15:21:47.334295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.324235Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":"2325f2e7-2930-4c52-bdde-69f540a7c5dd","year":2020},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.135136Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:5bda4d1c0bd93d5ade2f6ce3a58f310a49a12a324fcd89e2444958980cd3714f","observation_id":"d113e3fe-4379-40d9-b4f6-0f3d1f18d695","resolution":{"observed_at":"2026-08-11T15:21:47.327112Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.317022Z","title":"On success and simplicity: A second look at transferable targeted attacks,","venue":null,"work_id":"b6a4dcc4-b5b3-4cf6-ab2d-efb697f6480f","year":2021},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.138380Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:d459c6530737068002e3af50a45ce9d5978109850d4372ce0bd13402bbf62838","observation_id":"6e2a9cf4-17de-498f-bc66-2f78636b251b","resolution":{"observed_at":"2026-08-11T15:21:47.319790Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.310080Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":"44173601-e94c-49f7-851f-4fb4c36539d8","year":1924},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.140810Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:8853923e7a11047893098ea930a74dd4b12f4368893e776d23edb19a54f785a7","observation_id":"60e2c429-4f59-4585-a11c-ab99bdfddfe9","resolution":{"observed_at":"2026-08-11T15:21:47.312507Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.303017Z","title":"Improving the transferability of adversarial samples by path-augmented method,","venue":null,"work_id":"80cbd894-0d47-4dc8-bc94-50389f554067","year":2023},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.143814Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:310cb6bdc7e90a2ced648e4c7cbd4eea1b4a5dd8d3d09bd1501b83bea4f026c9","observation_id":"008d047b-13cf-4e98-a2c9-e764761edf61","resolution":{"observed_at":"2026-08-11T15:21:47.305612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.296262Z","title":"Adam: A method for stochastic optimization,","venue":null,"work_id":"035dc290-15b7-4341-8d00-76ea65ac95cf","year":2015},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.146188Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:f271d6ccdfa7619f8d9248b3e9e4816614fb4b6edf20fbb28a012bc86b68ac6d","observation_id":"64c6df27-e43c-402c-96e9-441bcdee14f1","resolution":{"observed_at":"2026-08-11T15:21:47.298589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.289506Z","title":"Sgdr: Stochastic gradient descent with warm restarts,","venue":null,"work_id":"38f0af34-0304-4087-bc10-b00dd28e5f62","year":2017},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.148625Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:2c967ad5e04956f0d0270157d2d33737cb7221f2aa659a6611e1261f2fad6282","observation_id":"b262b21b-663c-42e0-ad42-b001072a0446","resolution":{"observed_at":"2026-08-11T15:21:47.291883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.282742Z","title":"Decoupled weight decay regularization,","venue":null,"work_id":"f72ec06e-c714-4ec4-a8df-baa8edd208af","year":2019},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.151210Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:10c3faf4c512ccb3b36b9d461605de78bca9e32bebe4050928a8e7d1ce4f0760","observation_id":"0a65012d-ae78-46c4-b1f5-b8135428d0d6","resolution":{"observed_at":"2026-08-11T15:21:47.285282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1609.04747","last_updated":"2017-06-15T13:21:04Z","snapshot_observed_at":"2026-08-15T03:49:17.013617Z","submitted_at":"2016-09-15T17:32:34Z","title":"An overview of gradient descent optimization algorithms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1609.04747","snapshot_observed_at":"2026-08-11T15:21:47.153620Z","title":"An overview of gradient descent optimization algorithms,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.153620Z"},"links":{"cited_paper":"/paper/1609.04747","citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:c777ea714ffea57957c399d49d808aa02b3ebab808f8f06c81d999bf51fd412b","observation_id":"0fd98446-37bb-4953-9583-b58096227505","resolution":{"observed_at":"2026-08-11T15:21:47.153620Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.274811Z","title":"Early stopping-but when?,","venue":null,"work_id":"27547455-fea4-4d44-bf5b-2887c4bc88ca","year":2002},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.156359Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:9fbaf176f2bf90909448ac086c70a3e6feec8f034b514622887de76bdaed6feb","observation_id":"49b233b9-5ace-45da-9653-f357c83975f2","resolution":{"observed_at":"2026-08-11T15:21:47.277486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.267063Z","title":"Optimized approximation algorithm in neural networks without overfitting,","venue":null,"work_id":"5e81f0fc-e5ad-4bcc-90ff-b178a0d4507a","year":2008},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.158803Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:9042a01ba13ffb8be3b9bcc3e65fc5ba9ad17cc699d6e10bc1f03d470521cfd6","observation_id":"9bf549e0-b741-4290-b3cd-75435aeec3e0","resolution":{"observed_at":"2026-08-11T15:21:47.269932Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.162417Z","title":"Understanding and improving early stopping for learning with noisy labels,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.162417Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:edf038b9c167942c29b8546b481c3cd4ed3f6608d0438917a65e95fec6a75ab9","observation_id":"3a3b9a35-ca5c-4782-9be5-33e4d0b6e218","resolution":{"observed_at":"2026-08-11T15:21:47.162417Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.254629Z","title":"Adversarial attacks and defences competition,","venue":null,"work_id":"c13e033f-a51c-45c5-b348-4819130b65f3","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.164671Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:935744439b7ff5129a8907fc534e1ab8e1bae60712c7afda1bd23d38db8a76b6","observation_id":"3494caa0-38ce-4805-a36a-4d9c602334cd","resolution":{"observed_at":"2026-08-11T15:21:47.257665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.167155Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.167155Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:78ce8efade8bcaed861467d60c1401ecb70035a0519192becec9b2e8eaa4fdd4","observation_id":"44f45559-a6f2-4774-a420-df33f8be1497","resolution":{"observed_at":"2026-08-11T15:21:47.167155Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.242899Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"4f5d9000-ec57-40da-802f-5bbc3d3a649f","year":2016},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.169568Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:a69c996301f9ca74b95b5f8ed5bfb83db40fda79af8a8e13db43eae8b6c7916f","observation_id":"e5d7a66f-62f7-4106-911c-4526e13296cd","resolution":{"observed_at":"2026-08-11T15:21:47.245953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.234981Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"383d6a31-c59e-4fb8-98a6-b6d12f159ff4","year":2015},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.171620Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:a4f0237bd35f3f98197bc71196cf5b839bae4c649875ec506afaa6515e26c658","observation_id":"950e13d6-d3d6-46ad-bbe0-49208113a941","resolution":{"observed_at":"2026-08-11T15:21:47.237978Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.227172Z","title":"Mo- bilenetv2: Inverted residuals and linear bottlenecks,","venue":null,"work_id":"0f481c70-dd99-4bf7-933e-ddd91bff04bc","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.173855Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:71647f11b10b5c3f794e8729b259ff92f3b759b0abcffc56f587c68323aead9b","observation_id":"e96df687-d67a-4153-be4d-d61ccfb73b7d","resolution":{"observed_at":"2026-08-11T15:21:47.230095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.220446Z","title":"Wide residual networks,","venue":null,"work_id":"6e580852-2948-4d96-9e37-3c889251b5d5","year":2016},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.175955Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:01bba26e19614a88602946272f08e933d398c79975a91a7b66699e3af48ab124","observation_id":"f8afe5ad-2f8b-4934-8672-981e2566fc59","resolution":{"observed_at":"2026-08-11T15:21:47.222748Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.178414Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.178414Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:698b773442fe8575845f1f60db4c7146590681481119171a67cf9ba678868883","observation_id":"3efdbea0-c239-4f58-bf24-99b6d7189454","resolution":{"observed_at":"2026-08-11T15:21:47.178414Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T15:21:47.207367Z","title":"The unreasonable effectiveness of deep features as a perceptual metric,","venue":null,"work_id":"0f88232b-bd36-4d7d-b599-a8b5acce5aef","year":2018},"citing_paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T15:21:47.180378Z"},"links":{"citing_paper":"/paper/2412.11168"},"observation_digest":"sha256:9eb9d209e7ab1afa676c69ed2bb8fd175574787dd3b41e38d6d26ba71c305453","observation_id":"7979e3d8-5169-45c2-be6c-44ae53bee9da","resolution":{"observed_at":"2026-08-11T15:21:47.211673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.11168","last_updated":"2025-03-10T12:26:21Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-14T03:38:21.013529Z","submitted_at":"2024-12-15T12:34:22Z","title":"PGD-Imp: Rethinking and Unleashing Potential of Classic PGD with Dual Strategies for Imperceptible Adversarial Attacks"},"reference_resolution":{"displayed":37,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":0,"verified_fuzzy":30},"total_outbound_references":37},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 37 of 37 outbound references and 0 inbound Pith citation observations for arXiv:2412.11168."}