{"as_of":"2026-08-15T03:19:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b64ce64063d602cd165dc4ab23d4622abd316e57a56287a6c565d5e6f74d807f","coverage":[{"denominator":30,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":30,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:36:16.819416Z","state":"measured"},{"denominator":30,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":30,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.18718/citation-record","integrity":"/paper/2412.18718/integrity","json":"/paper/2412.18718/citation-record.json","paper":"/paper/2412.18718"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2201.07706","last_updated":"2022-01-19T16:45:16Z","snapshot_observed_at":"2026-08-13T16:00:39.612922Z","submitted_at":"2022-01-19T16:45:16Z","title":"Object Detection in Autonomous Vehicles: Status and Open Challenges","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.07706","snapshot_observed_at":"2026-08-11T04:36:16.680677Z","title":"Object detection in au- tonomous vehicles: Status and open challenges,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.680677Z"},"links":{"cited_paper":"/paper/2201.07706","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:874dd74f4702fb8ba6f27552517a88ff739d0a4be17e7e576b90262817ad2d31","observation_id":"fe6a3936-355a-4c15-804a-4f83592d92bc","resolution":{"observed_at":"2026-08-11T04:36:16.680677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1907.07484","last_updated":"2020-03-31T08:42:46Z","snapshot_observed_at":"2026-08-14T16:05:08.033414Z","submitted_at":"2019-07-17T12:51:10Z","title":"Benchmarking Robustness in Object Detection: Autonomous Driving when Winter is Coming","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1907.07484","snapshot_observed_at":"2026-08-11T04:36:16.686343Z","title":"Benchmarking robustness in object detection: Autonomous driving when winter is coming,","venue":null,"work_id":null,"year":1907},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.686343Z"},"links":{"cited_paper":"/paper/1907.07484","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:e84b9ebaf8daab558a666c613cd502d8086c50c303dd98c21b9f55c15f4e4aa8","observation_id":"b2a87a32-af3c-42c4-bc90-4fe9b48ae0c3","resolution":{"observed_at":"2026-08-11T04:36:16.686343Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.691489Z","title":"Attention is all you need,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.691489Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:a903579d3de8a305ce9773d415e51dff6458a1f5a2c02bdc0c1c584184590eb9","observation_id":"e4dc20bb-0114-4f7f-a2bd-b15a7d935aa4","resolution":{"observed_at":"2026-08-11T04:36:16.691489Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-13T14:19:26.598265Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-11T04:36:16.696717Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.696717Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:5dbbe50c1850f2eb51fb7161e11253d16fbdfb9583775f426267c3dfa9dde430","observation_id":"a1ec70c7-315b-44fe-b5f0-967ec0f40cee","resolution":{"observed_at":"2026-08-11T04:36:16.696717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.701649Z","title":"End-to-end object detection with transformers,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.701649Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:217f63273e725374bad1996b4581b43372402eb28791636278de724be6518c86","observation_id":"19df2f67-b808-431a-ad2f-36012a947219","resolution":{"observed_at":"2026-08-11T04:36:16.701649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-11T04:36:16.706743Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.706743Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:91e7e3a6651b729705a3a5a3c0f322b53a3946f0060264056fd8d71381e314b2","observation_id":"1868163f-df0d-45bd-b01b-bce933dd1a85","resolution":{"observed_at":"2026-08-11T04:36:16.706743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.236914Z","title":"Learning ordered top-k adversarial attacks via adversarial distillation,","venue":null,"work_id":"4abd7a62-7afe-4f09-85b0-68b6bf9ddb5f","year":2020},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.712365Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:0b48878159e7aa9c19b62a01239a5b01cf3d3e33ba59e554887887633c928144","observation_id":"ff7cc611-eee1-42ef-a70c-12ebc6e92e6b","resolution":{"observed_at":"2026-08-11T04:36:17.242094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-11T04:36:16.716834Z","title":"Explaining and harness- ing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.716834Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:56092d7296826feeeb2b79f633be8329ba2d33f141f06b6a8cc7dde344643b51","observation_id":"1f8d8731-94dd-499a-988c-8dea7c795290","resolution":{"observed_at":"2026-08-11T04:36:16.716834Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.03814","last_updated":"2016-11-11T18:57:15Z","snapshot_observed_at":"2026-08-14T21:30:49.644267Z","submitted_at":"2016-11-11T18:57:15Z","title":"Towards the Science of Security and Privacy in Machine Learning","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.03814","snapshot_observed_at":"2026-08-11T04:36:16.721977Z","title":"Towards the science of security and privacy in machine learning,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.721977Z"},"links":{"cited_paper":"/paper/1611.03814","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:f6c79e8cb9dcecf241506a720253297c6fe7371effca0888b0425d9fe497e330","observation_id":"b0fde5fc-b64e-432b-b33e-99e3edff39f3","resolution":{"observed_at":"2026-08-11T04:36:16.721977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.221000Z","title":"On the robustness of vision transformers to adversarial examples,","venue":null,"work_id":"a7806291-3dff-4607-a9ca-c198b8e59892","year":2021},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.727091Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:834e4683efeecaa6866430654fb6fbcde44f58756efe64c047973c3685f91f92","observation_id":"e2920700-db99-4695-95dc-1d56142b3924","resolution":{"observed_at":"2026-08-11T04:36:17.226182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15670","last_updated":"2022-11-02T18:57:19Z","snapshot_observed_at":"2026-08-08T22:57:45.855434Z","submitted_at":"2021-03-29T14:48:24Z","title":"On the Adversarial Robustness of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.15670","snapshot_observed_at":"2026-08-11T04:36:16.731567Z","title":"On the adversarial robustness of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.731567Z"},"links":{"cited_paper":"/paper/2103.15670","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:7b9ca5c8826385d11acc6c2d05b64d07536f2fd96c28fb9eb78bd4fe72542e9c","observation_id":"a18ef748-11ff-4951-af76-e444dda4cd58","resolution":{"observed_at":"2026-08-11T04:36:16.731567Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.205667Z","title":"Detects ec: Evaluating the robustness of object detection models to adversarial attacks,","venue":null,"work_id":"b06a2aa7-bdff-4c33-81d5-a33333ca54c5","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.736475Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:62d2c5348cd19bc1bd0a72ea4efa566604b09fa1585e87043659ec6c79a042e3","observation_id":"fde17cf2-bde2-4adc-8b87-cb349fdfdc6d","resolution":{"observed_at":"2026-08-11T04:36:17.210633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.190105Z","title":"Adversarial attacks on faster r-cnn object detector,","venue":null,"work_id":"34b5ab9d-ea90-4ddf-aba1-3a3b26d05ab1","year":2020},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.740866Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:1ae8244fe84316e32865ec63d8627b19e3c77116efed787c04b09a8cee2f783a","observation_id":"d9e7dec0-4b8b-4105-a84f-08ce971d2901","resolution":{"observed_at":"2026-08-11T04:36:17.195036Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.173843Z","title":"Anchor detr: Query design for transformer-based detector,","venue":null,"work_id":"5e734d9c-a63a-4362-bec5-e5c89d676995","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.745512Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:564553836df0e1d3c8e4bc3a4b3df9274b088997fe29eeef85019cd08723597c","observation_id":"d0d32951-dad4-4b1b-bc1d-4333ee2439dc","resolution":{"observed_at":"2026-08-11T04:36:17.179122Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.01318","last_updated":"2021-04-03T06:14:24Z","snapshot_observed_at":"2026-08-13T19:46:44.137730Z","submitted_at":"2021-04-03T06:14:24Z","title":"Efficient DETR: Improving End-to-End Object Detector with Dense Prior","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.01318","snapshot_observed_at":"2026-08-11T04:36:16.750140Z","title":"Efficient detr: improv- ing end-to-end object detector with dense prior,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.750140Z"},"links":{"cited_paper":"/paper/2104.01318","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:b1f9a61938169f0cde45d1ee8c50f6dc0b1816667e2c19498c7f99b4bfceb643","observation_id":"20d21516-0a08-4632-bf41-272d9ef6becd","resolution":{"observed_at":"2026-08-11T04:36:16.750140Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.754940Z","title":"Transferable adversarial attacks on vision transformers with token gradient regularization,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.754940Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:09fea5506d3971cfe12e20d13418e16c9df4b3811c02f8a4b3b204d377da7528","observation_id":"06c1f0d3-208f-4408-9d3b-52ee58ccb97c","resolution":{"observed_at":"2026-08-11T04:36:16.754940Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.148313Z","title":"Towards transferable adversarial attacks on vision transformers,","venue":null,"work_id":"d5736024-9eb5-43e5-8f49-37f4a414f38b","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.759327Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:ff37a3773eedc6a2385f970cafe6d55bab810c3c398c446a6772252bc4534f44","observation_id":"7b63b369-8b68-41b7-a10e-27d3169e8f48","resolution":{"observed_at":"2026-08-11T04:36:17.153416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.132424Z","title":"Generating transferable adversarial examples against vision trans- formers,","venue":null,"work_id":"730307a7-93c4-4f15-9b15-5d04dd806418","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.763796Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:e0aa802c638a7831b764b96293ef6254575b5eeb79e56ae43f01013b94ceb785","observation_id":"eac37712-702b-42a7-94fe-149b860f6cb9","resolution":{"observed_at":"2026-08-11T04:36:17.137400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.116172Z","title":"Big transfer (bit): General visual representation learn- ing,","venue":null,"work_id":"365781e4-e1ea-4e34-a198-e011dcf9a80d","year":2020},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.768252Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:da400b1900e4763e55ae7d972cfb3133f103636efabb940a4feb70773e0b16b3","observation_id":"1bcc6b94-ac63-4b7b-b41b-abe8c16c0799","resolution":{"observed_at":"2026-08-11T04:36:17.121707Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-11T04:36:16.773135Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.773135Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:024bf2296982b873428cbc37b5f819877daa37b9128dde0c394b28eea58c4514","observation_id":"1fdb3f7a-1ab3-4d12-ace9-525a0f750922","resolution":{"observed_at":"2026-08-11T04:36:16.773135Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.778011Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.778011Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:ce58ce2859bf56e38e5b9c69a10896ea8f1cc52835fa68e2942aa0b86e13a41c","observation_id":"fa5ff650-e556-4cb9-acdf-75befa86a58d","resolution":{"observed_at":"2026-08-11T04:36:16.778011Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.782267Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.782267Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:ead4a02f28c8d3b52d104bbf65519e8ce06d297d49266f4d88e43b26f8a01b30","observation_id":"dd7789a3-1e0a-4dde-9d4c-c0c17d00e112","resolution":{"observed_at":"2026-08-11T04:36:16.782267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:17.080258Z","title":"Give me your attention: Dot-product attention considered harmful for adversarial patch robustness,","venue":null,"work_id":"e41ef558-15e5-4e9d-9852-24fa886049d3","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.786896Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:e91a35be8a004f5b5903481677d88565b2cd5fe8b7cacf24448c033b2d503c73","observation_id":"02c06078-2bb9-48fd-91c6-08ea7226611a","resolution":{"observed_at":"2026-08-11T04:36:17.085284Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.791510Z","title":"Object-aware transfer-based black-box adversarial attack on object detector,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.791510Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:95ea8e0b99ab51aa4ac95d50fe9cf43db46b21c4d80b4c1637805d35bd266f27","observation_id":"1a9bc561-287e-47c9-8e40-ef57705642c5","resolution":{"observed_at":"2026-08-11T04:36:16.791510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.09592","last_updated":"2022-05-19T14:34:55Z","snapshot_observed_at":"2026-08-13T15:40:43.919163Z","submitted_at":"2022-05-19T14:34:55Z","title":"Transferable Physical Attack against Object Detection with Separable Attention","version":1},"cited_work":{"arxiv_id":"2205.09592","doi":null,"metadata_source":"pith","pith_arxiv_id":"2205.09592","snapshot_observed_at":"2026-08-11T04:36:16.872008Z","title":"Transferable Physical Attack against Object Detection with Separable Attention","venue":"cs.CV","work_id":"2bd5ce86-570f-4ec7-93d2-f82cbc2ca8ad","year":2022},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.796032Z"},"links":{"cited_paper":"/paper/2205.09592","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:61cc67dea9c42d3b12f3bdb2bfbbca1dc2c5de7c1efb3c5934b987d70e05f860","observation_id":"b4857418-0e6d-4452-9410-c12114f334a4","resolution":{"observed_at":"2026-08-11T04:36:16.879219Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.800777Z","title":"Faster r-cnn: Towards real- time object detection with region proposal networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.800777Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:3cc26bfb27445b5d0add016c48c91dc4e5586c4959c09a97d5493c638b7196b9","observation_id":"35aec70c-2213-4ebc-992f-2e6e6590091b","resolution":{"observed_at":"2026-08-11T04:36:16.800777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.805221Z","title":"Ssd: Single shot multibox detector,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.805221Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:5cbcb1e45ac37687398f337bb921d04e1cbe1f5f46de75cfd44512b920bb03eb","observation_id":"543fe5fb-3af7-4ec9-a78a-4fbf20d4e254","resolution":{"observed_at":"2026-08-11T04:36:16.805221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.04159","last_updated":"2021-03-18T03:14:26Z","snapshot_observed_at":"2026-08-13T17:54:01.724774Z","submitted_at":"2020-10-08T17:59:21Z","title":"Deformable DETR: Deformable Transformers for End-to-End Object Detection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.04159","snapshot_observed_at":"2026-08-11T04:36:16.810323Z","title":"Deformable detr: Deformable transformers for end-to-end object detection,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.810323Z"},"links":{"cited_paper":"/paper/2010.04159","citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:2e13f26da6077a90a150ac3a83926106c7b3dc2f5258ab4fde4f4e6ff62dae57","observation_id":"6418cc7c-c2fa-4257-b6bb-ddd37eea057a","resolution":{"observed_at":"2026-08-11T04:36:16.810323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.814830Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.814830Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:d59b5217b7f76834332b885fb4add3abc19f91af7c9e73dc55ba19365e990c74","observation_id":"fcd99b3d-6a17-42a8-a4de-a0c09c04b226","resolution":{"observed_at":"2026-08-11T04:36:16.814830Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:36:16.819416Z","title":"Are we ready for autonomous driving? the kitti vision benchmark suite,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T04:36:16.819416Z"},"links":{"citing_paper":"/paper/2412.18718"},"observation_digest":"sha256:643709bb70241692846431ede2462a2b3f76180c086220eafcca2d909e2565b6","observation_id":"59527074-c398-495a-af58-7543a1143a60","resolution":{"observed_at":"2026-08-11T04:36:16.819416Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2412.18718","last_updated":"2024-12-25T00:31:10Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T01:10:06.482538Z","submitted_at":"2024-12-25T00:31:10Z","title":"Evaluating the Adversarial Robustness of Detection Transformers"},"reference_resolution":{"displayed":30,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":20,"verified_exact":1,"verified_fuzzy":9},"total_outbound_references":30},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 15 August 2026, this Paper Citation Record lists 30 of 30 outbound references and 0 inbound Pith citation observations for arXiv:2412.18718."}