{"as_of":"2026-08-15T13:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:08cd1527c5fb61b7e8e1fe4cfc57cce19385c02f5c6ba1d5afdeb61d647eea5d","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T05:54:16.582388Z","state":"measured"},{"denominator":55,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":55,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-15T06:32:42.880941+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.17038/citation-record","integrity":"/paper/2412.17038/integrity","json":"/paper/2412.17038/citation-record.json","paper":"/paper/2412.17038"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.396903Z","title":"Robust face recognition via multimodal deep face representation,","venue":null,"work_id":"83595863-c274-40bf-9a55-c5e63456c274","year":2015},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.356188Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:421694c648c8ffaea1d0e67e2b964b1392ea5c69b9d3cf21a9b6d0b0fcc040ca","observation_id":"14c97e2a-ab6c-40c8-961e-7bc7b287983a","resolution":{"observed_at":"2026-08-11T05:54:17.401635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.383332Z","title":"Dynamic training data dropout for robust deep face recognition,","venue":null,"work_id":"cdede111-dd9d-48be-a33c-b1344eefaa42","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.361082Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:6f5fd8b73f7bb25bb02d15f3c03e1d043c895956909bab4772c8ca25c1deee33","observation_id":"d5639b24-9bd2-4128-8157-5d29d61f7e93","resolution":{"observed_at":"2026-08-11T05:54:17.387939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.370351Z","title":"Face recognition and retrieval using cross-age reference coding with cross-age celebrity dataset,","venue":null,"work_id":"5715ecc1-b9ed-434d-9f2c-c699be85fddb","year":2015},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.365430Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:fa9243bfc98832ec610882325a9a63a251b4ecad38de75415e16a6f0b474aa74","observation_id":"79c0feb9-b482-4dfc-a9f1-c4c8fd164d07","resolution":{"observed_at":"2026-08-11T05:54:17.374672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.355853Z","title":"Collabo- rative face recognition for improved face annotation in personal photo collections shared on online social networks,","venue":null,"work_id":"8b994781-2377-4f0f-8ea8-477389b79d22","year":2010},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.369974Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:b5a9fb31d22984451abe744a353f495cb15510a4a728a973aab45cb61d5adad9","observation_id":"e78e207d-b30a-4b07-8ef0-a8d66cb69c5f","resolution":{"observed_at":"2026-08-11T05:54:17.361061Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.342501Z","title":"Pixel privacy. increasing image appeal while blocking automatic inference of sensitive scene information,","venue":null,"work_id":"a1612416-cd03-416d-b94c-2375f495e2f6","year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.374355Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:071f563fe7cdf801a7d9ae56e95ccb9a8a2226f7226c8733e981ce0a12b9ce3f","observation_id":"86c9ced1-eb3c-4c46-bb5a-3763ebfda7cf","resolution":{"observed_at":"2026-08-11T05:54:17.347098Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.329141Z","title":"Advfaces: Adversarial face synthesis,","venue":null,"work_id":"734d2701-9bb3-462b-93c4-ed5e26ac37ff","year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.378842Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:cafda1369894ab9a9c7ed9e36cfcb4e946f59eea6930779d0f35e83593866688","observation_id":"27f1922f-10d6-4695-936b-36bfcd7221b7","resolution":{"observed_at":"2026-08-11T05:54:17.333560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.314808Z","title":"Advhat: Real-world adversarial attack on arcface face id system,","venue":null,"work_id":"82b04a2c-61e8-4faf-a86a-7e9e46499f57","year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.383462Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:08f3f1ce1f8f1cc50a2e610f35ef00fe69efb76f154b298af12066343eba98c9","observation_id":"a7d7c3f2-34b2-422e-8d4c-b198751bb3fa","resolution":{"observed_at":"2026-08-11T05:54:17.319532Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.301366Z","title":"Efficient decision-based black-box adversarial attacks on face recognition,","venue":null,"work_id":"276409f9-3856-48d1-97c7-1dabd868c66e","year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.387633Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:f700262eba90124b49e1b9a7af882fb63ea59b3858281165538a1c99e14c566f","observation_id":"31cf5e6f-db0d-4d4b-be32-6734ed781947","resolution":{"observed_at":"2026-08-11T05:54:17.305845Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.287966Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":"34f61d44-386a-4cf2-8fae-599f3cdafbde","year":2016},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.391853Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:f48ee8583bfec225d380bca95f4c5f6447e567cfa62fe6c755e89cee4402c67e","observation_id":"155b3c3e-12e1-4c5a-abc1-02be839f3c2e","resolution":{"observed_at":"2026-08-11T05:54:17.292588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.274856Z","title":"Attacks on state-of-the-art face recogni- tion using attentional adversarial attack generative network,","venue":null,"work_id":"c24c1f49-11de-4b74-80c9-af38d465ba28","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.395947Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:3afc8c83991d2c13bdcda79ccfa375ccc2bae767319667d121bd0a32bae37ea1","observation_id":"e6af513b-f6c8-47a3-829d-d6e56dccc381","resolution":{"observed_at":"2026-08-11T05:54:17.279322Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.261278Z","title":"Semanticadv: Gen- erating adversarial examples via attribute-conditioned image editing,","venue":null,"work_id":"73340d1b-0064-460a-b0d6-b4007fd53a05","year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.400099Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:ac78c229843cb6c6075f3948c28bd76c65525120c8153b6bbd43cfdf5e6e6a7a","observation_id":"805f8772-deaa-403d-b96f-94057886664c","resolution":{"observed_at":"2026-08-11T05:54:17.265789Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.247450Z","title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition,","venue":null,"work_id":"936e746d-eec2-48ab-8633-7a009afca7d3","year":2022},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.404352Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:7b302f4c378ed8062916f19b3b4731ded42704cc053166fb31892715525bd68b","observation_id":"e0a7c8cc-7d43-4bc2-ac61-734f8d1433f8","resolution":{"observed_at":"2026-08-11T05:54:17.251837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.234144Z","title":"Pro- tecting facial privacy: Generating adversarial identity masks via style- robust makeup transfer,","venue":null,"work_id":"e7fa5f03-63d4-4fef-b2b7-f86b4a6924ea","year":2022},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.408412Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:76eb2f85fb24d8e64c15f7bf26c2daf79f138269c3644c29600ba3abaac99832","observation_id":"bde66346-1381-4742-aa23-c20404b82533","resolution":{"observed_at":"2026-08-11T05:54:17.238738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.220830Z","title":"Clip2protect: Protecting facial privacy using text-guided makeup via adversarial latent search,","venue":null,"work_id":"c69e27fc-4905-4622-9a9d-10e49f73865e","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.412568Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:371ff012f8a9f0f8cfb0ca0d4e2a6dd8c06ca2fdabd99e63f9651e90c3942fb5","observation_id":"d95d6f68-59f3-4011-a863-d6cfc05acc57","resolution":{"observed_at":"2026-08-11T05:54:17.225222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.206526Z","title":"Adv-diffusion: imperceptible adversarial face identity attack via latent diffusion model,","venue":null,"work_id":"8add5ce2-e4a5-4714-8c87-b1f8c540ca8a","year":2024},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.416508Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:895ae7e23ac256a451da3470fc854fcc85781d8e5843754061aa7d77d1e87427","observation_id":"6beecac3-298d-4430-8a68-71529ca8d1c0","resolution":{"observed_at":"2026-08-11T05:54:17.211154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.192759Z","title":"Towards transferable attack via adversarial diffusion in face recognition,","venue":null,"work_id":"41dfde5e-11de-4ac4-a1a3-5de76ebba9fc","year":2024},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.420559Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:40b6ac34efdb254f9a42f6bd7e89a7df7e659149b622d00e7b3f7aa25082f447","observation_id":"b1e640a2-11d7-4e8d-a71c-641dbcdce2aa","resolution":{"observed_at":"2026-08-11T05:54:17.197268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.178929Z","title":"Adv-makeup: A new imperceptible and transferable attack on face recognition,","venue":null,"work_id":"b831bccb-7e84-4ebd-82f7-5ff14b0e3d5c","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.424617Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:cb87592047a1659ec1f5dc1afa7bd662783ec3baea1f77672a16eb6bf6ebcc32","observation_id":"ac04f74e-26e2-4ae7-811e-5ad3eaa2db16","resolution":{"observed_at":"2026-08-11T05:54:17.183514Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.164943Z","title":"A black-box reversible adver- sarial example for authorizable recognition to shared images,","venue":null,"work_id":"a28c10c3-fcd4-4dd6-a757-85b048a090f9","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.428770Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:76f60e6dfb03731715b6b0d46e7bfdf44fa8ddcd247c029211e60818e7dffd5a","observation_id":"fd7dedbe-0daf-4e5f-9938-0d144ed06cc5","resolution":{"observed_at":"2026-08-11T05:54:17.169610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.149601Z","title":"Unautho- rized ai cannot recognize me: Reversible adversarial example,","venue":null,"work_id":"bbcc58f4-375e-4e3f-bdaf-8c281bf55857","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.432788Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:b6ad0bd60b7998c983467cac1e2d3f4a81366dc5004766cc8d991c2ed8da5f3b","observation_id":"ef9cab87-c69a-42ff-9926-5c3d52c84fdc","resolution":{"observed_at":"2026-08-11T05:54:17.154750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.134290Z","title":"Self-recoverable adversarial examples: A new effective protection mechanism in social networks,","venue":null,"work_id":"4bdb4dad-003d-45e0-ad3a-ac586b51067f","year":2022},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.437172Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:824f0b92338e39e187409e537bdfb193e6efb8a6725d284e34b621d7dba80358","observation_id":"c1bae238-fd75-4354-b606-1154259a4d37","resolution":{"observed_at":"2026-08-11T05:54:17.139184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.120753Z","title":"Reversible gender privacy enhancement via adversarial perturbations,","venue":null,"work_id":"c0528ac5-349e-48f9-969d-316c767ccc99","year":2024},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.441369Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:3db6ed2cba064b8cd0d5ba733830db1d17cb57a2173edc253f4d7e9a47453935","observation_id":"63a7f34c-99db-4fa0-b5c9-3dd50bc0c017","resolution":{"observed_at":"2026-08-11T05:54:17.125165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.107201Z","title":"Reversible attack based on adversarial perturbation and reversible data hiding in yuv colorspace,","venue":null,"work_id":"6e6acd7c-01e0-44f9-af06-d32d3869a6dd","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.445148Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:1144570243a47164e4a8d585adb89aa232a4dd5a626b6f4212192bd6903c3d86","observation_id":"006f7829-afc9-4f8f-b9e8-e31008bc9f01","resolution":{"observed_at":"2026-08-11T05:54:17.111608Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.093289Z","title":"Self-supervised generalisation with meta auxiliary learning,","venue":null,"work_id":"cc7ee2be-2696-4554-b0e0-31a15761e166","year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.449091Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:3982b4e456a16906ff98e00e60572a1d2a8e421623fb84b2cec3023a1c9fa80d","observation_id":"8b7b03e7-d62d-4c52-8640-9751dec9e80c","resolution":{"observed_at":"2026-08-11T05:54:17.097875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.079936Z","title":"Joint data- task generation for auxiliary learning,","venue":null,"work_id":"3aca9ccc-6c38-4b17-9436-c84f1bdfa01c","year":2024},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.453000Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:77a0b7e824d7188daf260404405d75f03bb9e45e373e1e85f45ab9df544379f3","observation_id":"450e0c17-476c-4a67-b677-117a52621aa7","resolution":{"observed_at":"2026-08-11T05:54:17.084327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.456987Z","title":"Model-agnostic meta-learning for fast adaptation of deep networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.456987Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:cf943e1f2d9217f50472ec327bd5f26002ecaf8813f64fbbb64402d7dd3edebd","observation_id":"f7232242-3ae8-4f4f-9869-0eaeaadbee3a","resolution":{"observed_at":"2026-08-11T05:54:16.456987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.057530Z","title":"Regularized fine-grained meta face anti-spoofing,","venue":null,"work_id":"f16cc3af-cff6-4216-8d05-06eee2281135","year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.460963Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:42466ad7cc1a09ffa5f181684b37d631b8dcc2eade04a093ab74ba0a30a1ae88","observation_id":"f1114c17-6e8d-4835-bb36-eb25d0cb6241","resolution":{"observed_at":"2026-08-11T05:54:17.061953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.044218Z","title":"Mbrs: Enhancing robustness of dnn- based watermarking by mini-batch of real and simulated jpeg com- pression,","venue":null,"work_id":"87df237a-d612-4a79-9cc8-8c52da2ad596","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.465277Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:8dcea9a51efd0194e1a7f6064c46d3abec86b8e86628e1bc7119751ca6031e49","observation_id":"4ed4e08a-ab51-4623-9b83-e8bcd7362f04","resolution":{"observed_at":"2026-08-11T05:54:17.048615Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.469398Z","title":"A survey on curriculum learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.469398Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:ea4f80e490b7fdbaf62bc7614efcef6ad4dbe00bd40bb4d2c6ab9d36ff069925","observation_id":"14180b53-a5c3-46f5-b985-edadd6004407","resolution":{"observed_at":"2026-08-11T05:54:16.469398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-11T05:54:16.473340Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.473340Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:ebc45a42b9107622ae571f78e5e84842094f2fbeccce1a8342390cf45f868140","observation_id":"5d689bc0-8179-4278-a914-5eb9589a4576","resolution":{"observed_at":"2026-08-11T05:54:16.473340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.021701Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":"bce0e022-6aa3-44cf-a203-ba88d8604849","year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.477811Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:e4b6a78aa6d36b93592f18f1de5a255038c23b6db5647c6ffdb81084cf47c3dd","observation_id":"7a83d7f8-f311-4edd-b5ab-8df4f1b14429","resolution":{"observed_at":"2026-08-11T05:54:17.026237Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:17.007690Z","title":"Sibling- attack: Rethinking transferable adversarial attacks against face recogni- tion,","venue":null,"work_id":"de07e79c-85d5-4749-9262-792d79b3f0d8","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.481823Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:34116d251da600f3b09a366f44ddd0c4b6cdf48514c4e0eaa494846ee009d4f8","observation_id":"297aad9f-fd30-481a-bee2-aac0601f94ef","resolution":{"observed_at":"2026-08-11T05:54:17.012335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.993298Z","title":"Discrete point-wise attack is not enough: Generalized manifold adversarial attack for face recognition,","venue":null,"work_id":"061eeae9-8a7d-44bc-95c8-c2d55c570a43","year":2023},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.485962Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:5ce3ee466eb827c7a7af5f053a08db8166aa0fe354b3c4e2413bffaa1c58ea10","observation_id":"39777f9f-1a93-4050-bbfc-3c5ce116cf5b","resolution":{"observed_at":"2026-08-11T05:54:16.998025Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.490188Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.490188Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:6de85ee27d60602c44e195bb94db6d030d5142e45a1d99a5c73712d176db1259","observation_id":"6be9fb70-dcd0-4958-a3d5-9e5a72feade9","resolution":{"observed_at":"2026-08-11T05:54:16.490188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.970524Z","title":"Improving transferability of adversarial patches on face recognition with generative models,","venue":null,"work_id":"0ea51e90-0d87-4c0c-954c-557193ec7271","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.494513Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:12b11c47e1a38029dd7e8fc032e88edbe5b558c4d9835cff70dcc89eef8cee20","observation_id":"a2967dbd-90f9-449e-b30b-ed71800a6a68","resolution":{"observed_at":"2026-08-11T05:54:16.975345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.956385Z","title":"Towards face encryption by generating adversarial identity masks,","venue":null,"work_id":"b2c8fb08-a7a1-41bc-8b54-7a42813870eb","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.498719Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:f5617324e9b554990853243afd1ec7be09a5b0058365a949cdcc65c518b6bf15","observation_id":"4e71fda1-6fff-494b-8838-0c6e854bab81","resolution":{"observed_at":"2026-08-11T05:54:16.961052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.502972Z","title":"Towards transferable adversarial attack against deep face recognition,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.502972Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:59c6695b0979f3ba3cd98183eb291d5b6950626261744c46e1d06a377593d89d","observation_id":"5f8b0d4c-29c7-469c-af7c-7b7f170b6df9","resolution":{"observed_at":"2026-08-11T05:54:16.502972Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.507238Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.507238Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:c31aa5b3541b62a634d3cc60ddb77603c56f3e70911e6363ff9721582f3b0bb7","observation_id":"764edfe2-d3e1-4502-90a9-f8d86ac0ba47","resolution":{"observed_at":"2026-08-11T05:54:16.507238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.924077Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":"ae5d8483-2126-43aa-8f9e-5a87ed61a50c","year":2022},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.511275Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:03dea40517b884a947574304c712a3b2270e29d0fcf12ccbf5987c76f9e906c2","observation_id":"c974fb7b-8f4e-4b8d-bb26-a7b863300a30","resolution":{"observed_at":"2026-08-11T05:54:16.928812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.01428","last_updated":"2024-07-18T02:16:11Z","snapshot_observed_at":"2026-08-14T23:54:17.714881Z","submitted_at":"2024-07-18T02:16:11Z","title":"Transferable Adversarial Facial Images for Privacy Protection","version":1},"cited_work":{"arxiv_id":"2408.01428","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.01428","snapshot_observed_at":"2026-08-11T05:54:16.644943Z","title":"Transferable Adversarial Facial Images for Privacy Protection","venue":"cs.CV","work_id":"b5374cd3-89dd-44d5-8648-5a12c6de2899","year":2024},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.515388Z"},"links":{"cited_paper":"/paper/2408.01428","citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:915686f97825fdb3ca623d4dc33ecc404b409384d487c0015cf3f71445d86b6d","observation_id":"bf4514aa-c446-468e-9d01-0f3c569f8eb7","resolution":{"observed_at":"2026-08-11T05:54:16.651920Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.812314Z","title":"Attgan: Facial attribute editing by only changing what you want,","venue":null,"work_id":"8bc355ec-658c-4e61-af53-0a83e53a8bb2","year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.519833Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:b8ebce6e2ef2e1190068bccbbb97e63745eb00f576b8db4c169b285af48798dd","observation_id":"322f80b9-e4d5-485b-b60d-557423db9a8e","resolution":{"observed_at":"2026-08-11T05:54:16.913786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10196","last_updated":"2018-02-26T15:33:34Z","snapshot_observed_at":"2026-08-15T04:29:56.166616Z","submitted_at":"2017-10-27T15:28:35Z","title":"Progressive Growing of GANs for Improved Quality, Stability, and Variation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10196","snapshot_observed_at":"2026-08-11T05:54:16.524052Z","title":"Progressive growing of gans for improved quality, stability, and variation,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.524052Z"},"links":{"cited_paper":"/paper/1710.10196","citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:fec05e92156f55a352dde1d53c0557054edfcdb9d61415f5e660807a315ccce1","observation_id":"1c2d3031-7d4d-49e7-a5b7-d641f3c0e9fc","resolution":{"observed_at":"2026-08-11T05:54:16.524052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.528552Z","title":"A style-based generator architecture for generative adversarial networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.528552Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:c5682fb71996108a75605b9808c589d56630d08a5f875e166e1c4aedcfdb1ac4","observation_id":"7c779c38-f184-49ff-98ca-657fd9c19df3","resolution":{"observed_at":"2026-08-11T05:54:16.528552Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.532646Z","title":"Joint face detection and alignment using multitask cascaded convolutional networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.532646Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:bfdd9aab7e3b319e18f3ff8522b606400a85e45d48be2a34054e5cac9b879241","observation_id":"f4f8a80d-b9aa-42e7-81ee-8e23e20f66e6","resolution":{"observed_at":"2026-08-11T05:54:16.532646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.536898Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.536898Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:b6638b69324dc142c2eb7153f9a3230569c10599a1db688e2c12cca003588a01","observation_id":"88b810bc-4e55-4b8c-acb5-e48911160718","resolution":{"observed_at":"2026-08-11T05:54:16.536898Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.540905Z","title":"Squeeze-and-excitation networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.540905Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:de751b2a58bb3e6c1e0a7f699ec223469ed69871dab2a8a90337e207a6b134d8","observation_id":"1d1a53f9-e522-49b2-a3cc-f106b4e76689","resolution":{"observed_at":"2026-08-11T05:54:16.540905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.544812Z","title":"Facenet: A unified embed- ding for face recognition and clustering,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.544812Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:ed53ace4746e09264bd14b61c1440bc1ea613c254658576031ecb6eea951c6b5","observation_id":"27994f74-4217-4ee7-bb93-2d266471e59f","resolution":{"observed_at":"2026-08-11T05:54:16.544812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.548881Z","title":"Arcface: Additive angular margin loss for deep face recognition,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.548881Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:ec20065c01fc7f15d04308df4ef1dd56216c7d2e428fcbef4fa6d2f450039d6f","observation_id":"a76b78a8-975a-4a69-a658-b6e7ea60caeb","resolution":{"observed_at":"2026-08-11T05:54:16.548881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.744343Z","title":"Improved residual networks for image and video recognition,","venue":null,"work_id":"4a81e49c-0b49-457a-b27d-cf2720c95940","year":2020},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.553077Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:7d4437be44d76ad08b96e2392284a5df5455d2eb57d44fd2044c29eaa2a2c11e","observation_id":"7f59c9be-7398-4851-b2d4-b26d655f386b","resolution":{"observed_at":"2026-08-11T05:54:16.748966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.557328Z","title":"Cosface: Large margin cosine loss for deep face recognition,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.557328Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:f56986b7d2173bf4ccdaef42e7a9dc1c9dded56f8a5085eaf1f2ece038f00be2","observation_id":"5a832cf0-92c1-4fef-84bc-64f9d6ed3a36","resolution":{"observed_at":"2026-08-11T05:54:16.557328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.721345Z","title":"In https://www.faceplusplus.com.cn/,","venue":null,"work_id":"2d6d4d13-dc9e-4b6a-9d4c-bab4a47a32f0","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.561357Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:917274d243e0e50faeaf78822c941bbc57625920f54886c6a5afb96191c687ed","observation_id":"c5f5f2eb-7694-486c-8de5-a8c90dd73101","resolution":{"observed_at":"2026-08-11T05:54:16.725671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.707821Z","title":"Cloud, https://cloud.tencent.com/document/product/867","venue":null,"work_id":"40ecff33-dcd6-4568-82df-2e4193b4d4e8","year":2021},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.565490Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:79f231a0300620890cc3892971a2076d85af4e01a733d67e02b175dc0f8e3380","observation_id":"f7bf8a4e-be7e-44e3-8bd0-3e39a035f126","resolution":{"observed_at":"2026-08-11T05:54:16.712266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.693962Z","title":"https://cn.aliyun.com/,","venue":null,"work_id":"d21c979a-5b03-4c68-813d-8fa49fdbd22f","year":2019},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.569772Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:c32c4afd13a579da3b949bc0c3e74c8f3223860d84f58b78a85c1afb4c4f93d3","observation_id":"210764f7-6ae4-4156-9d20-2475bc4b275e","resolution":{"observed_at":"2026-08-11T05:54:16.698287Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-15T06:32:42.880941+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-11T05:54:16.574003Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.574003Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:60f1db5b2037b1d913cb1d7efa8a9787fa3250c8ca5dbf74190e46d456fdfa39","observation_id":"a9f0678c-21cb-4331-bb8c-2e5f276d415b","resolution":{"observed_at":"2026-08-11T05:54:16.574003Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.578309Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.578309Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:1a13462441cd576ec3cc64e6768df932c1029d82cf2372e9567061175ec109b9","observation_id":"ea716f5a-c1bd-484b-8dd9-ea3548e4471e","resolution":{"observed_at":"2026-08-11T05:54:16.578309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T05:54:16.582388Z","title":"The unreasonable effectiveness of deep features as a perceptual metric,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models","version":4},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-11T05:54:16.582388Z"},"links":{"citing_paper":"/paper/2412.17038"},"observation_digest":"sha256:bcf687c7d2bb394e3eae20d8003b55355f590e61e7da46bd27242231ea2545f9","observation_id":"10ac62ea-ada5-4943-9945-2fe231b1b505","resolution":{"observed_at":"2026-08-11T05:54:16.582388Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.17038","last_updated":"2025-05-22T05:37:36Z","latest_version":4,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-11T05:48:28.722243Z","submitted_at":"2024-12-22T14:30:26Z","title":"ErasableMask: A Robust and Erasable Privacy Protection Scheme against Black-box Face Recognition Models"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":1,"verified_fuzzy":37},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-15T06:32:42.880941+00:00","source":"crossref"},{"observed_at":"2026-08-15T06:32:39.529945+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 0 inbound Pith citation observations for arXiv:2412.17038."}