{"as_of":"2026-08-20T05:56:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:de199db7e1efedb161e110dfe66d3b1e1e4da3d90943d0ac8040ef993f0a138c","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T23:14:55.137005Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2412.20807/citation-record","integrity":"/paper/2412.20807/integrity","json":"/paper/2412.20807/citation-record.json","paper":"/paper/2412.20807"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.050327Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":"b0e5a9a6-be40-48e6-91ae-00ab4d6844af","year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.914591Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:93236f3a6e1c8d0929111fff1b0f90e063a41487b02311f1c8457460165499f1","observation_id":"dd989002-f14e-4a20-9e6c-3139de59e17a","resolution":{"observed_at":"2026-08-10T23:14:56.055013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.031388Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":"972bfe54-1a6d-40c8-b482-c7b534ea2df3","year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.919455Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8238393fef7a4b83e3d3d548420e34957def9b24493049dd6453ae3db2a2a1d3","observation_id":"6e0b89c2-37f9-44eb-81e1-96e802ee985e","resolution":{"observed_at":"2026-08-10T23:14:56.036587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.017504Z","title":"Some methods of speeding up the convergence of iteration methods,","venue":null,"work_id":"397494b8-035c-47a7-b16e-d935f2b04301","year":1964},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.925803Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:ae0361c84c815aba58ee908a8cbd7ac84500b12a0926f3650e3b7b0b091047c5","observation_id":"2d552a60-3b8f-4e99-90f3-4fa4f286d588","resolution":{"observed_at":"2026-08-10T23:14:56.022669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:56.003139Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"687e3718-ccc0-48e0-8994-b8c93e6088e2","year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.935951Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:5628c9bddf1d245b34b0f23bf862ad55b178b555d4f7f92634372f9d24080100","observation_id":"5be1b0d4-417f-4ca8-afa2-f2553b6141bd","resolution":{"observed_at":"2026-08-10T23:14:56.008545Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-10T23:14:54.941049Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.941049Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:ec32141f997adf6035c80a83832c4f50fe04ce86dec999147ec39c474aa9da1f","observation_id":"1cf63b37-379c-4702-879c-321f7969dddb","resolution":{"observed_at":"2026-08-10T23:14:54.941049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.985419Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"d24548c3-8c99-4b72-a6b4-74f986f08899","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.947164Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:7140531b35d297b2843fc6b393f74202f01479bc7dcfc1d2e2731f4a1bd73199","observation_id":"ccc826b3-babe-4924-9783-34277b8a7320","resolution":{"observed_at":"2026-08-10T23:14:55.992619Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.969887Z","title":"Evading defenses to transferable adversarial examples by translation -invariant attacks,","venue":null,"work_id":"6dfa5b4d-6a0f-40c2-80a4-4bcb25c6374e","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.952719Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:63abfa9fcca4f1329b189f075ea21e249eb1b2a2fe4d985e3762e438c68e43a5","observation_id":"dc677325-04b3-4de5-b366-82630da5cc4a","resolution":{"observed_at":"2026-08-10T23:14:55.974801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.954034Z","title":"Learning with pseudo- ensembles,","venue":null,"work_id":"a8ed3f67-ca91-434e-9bce-b4a96b1a9228","year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.959824Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:83f0a914763724bef70a394259045f19287589bf2c1939b283ea33a426e63bf3","observation_id":"abb9b394-cda6-463d-8e4d-1b89655f128e","resolution":{"observed_at":"2026-08-10T23:14:55.959004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.938111Z","title":"Enhancing adversarial example transferability with an intermediate level attack,","venue":null,"work_id":"de16c3f2-cbf7-44b2-92d6-118ed3d9184a","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.966106Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:4c1c6b2b4bb6bf8d5fff6bd4272e7c99ae0801486f6ecbe81846bc19bc3c1f71","observation_id":"41de455f-2fda-405c-8d00-95782e4a42b2","resolution":{"observed_at":"2026-08-10T23:14:55.944017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.923602Z","title":"Yet another intermediate -level attack,","venue":null,"work_id":"e03aa4f5-878c-43e9-b02e-ba7332b1f330","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.971465Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:68b324931df5ef2f2cbb536e98547d594f45462eff7eb929ada4c56848c7c605","observation_id":"ea152028-3db6-4b1c-adf6-adebc17b9181","resolution":{"observed_at":"2026-08-10T23:14:55.928501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.910672Z","title":"Enhancing targeted transferability via feature spa ce fine -tuning,","venue":null,"work_id":"c14dc183-478a-48b8-900b-59cfeea7969e","year":2024},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.975978Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8f2bed232e66a568a462dabd757b13af477cb6e5015e637243238d5b0fdec0f4","observation_id":"86a4dbb7-42f5-4d22-b548-0bd660b396b1","resolution":{"observed_at":"2026-08-10T23:14:55.915105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05407","last_updated":"2019-02-25T14:18:11Z","snapshot_observed_at":"2026-08-14T19:36:09.254749Z","submitted_at":"2018-03-14T17:09:27Z","title":"Averaging Weights Leads to Wider Optima and Better Generalization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05407","snapshot_observed_at":"2026-08-10T23:14:54.982284Z","title":"Averaging weights leads to wider optima and better generalization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.982284Z"},"links":{"cited_paper":"/paper/1803.05407","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:e07eebe21a4d696c748ebafa3b44aacb81703c2185dea68382188cc94c207e06","observation_id":"939f5856-8acf-4f09-93df-a81ca50372a6","resolution":{"observed_at":"2026-08-10T23:14:54.982284Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.897727Z","title":"There are many consistent explanations of unlabeled data: why you should average,","venue":null,"work_id":"9a61e40b-dfbb-4e09-bf8c-9baae76adec6","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.987829Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:ffd05770cc92b4026ddc8017635db86080d65a645681fbf12f0bd18bbe91efa3","observation_id":"12e7dcfc-13a2-427a-ba06-bd5f0e340748","resolution":{"observed_at":"2026-08-10T23:14:55.902108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.884118Z","title":"Transferable perturbations of deep feature distributions,","venue":null,"work_id":"2aa6dd2f-1c83-42ae-be2d-2ef1b2c089b9","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.993835Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:4ff958628770382ccc07635f380758c49ae7eb869d95988689b3dcbf4c4ca987","observation_id":"04704021-b56e-4a5e-a5b2-626ff368edf2","resolution":{"observed_at":"2026-08-10T23:14:55.889082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.649740Z","title":"On generating transferable targeted perturbations,","venue":null,"work_id":"31c1c207-2f27-4331-87fb-2e58212ad1f2","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:54.999045Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:9f747e4f3c65cef180605e28ed31a876abc71003014832bc4f1a41432cb1cfbb","observation_id":"449c1a3b-03a6-4667-96ae-d80c268a03ca","resolution":{"observed_at":"2026-08-10T23:14:55.655430Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.634396Z","title":"Boosting transferability of targeted adversarial examples via hierarchical generative network,","venue":null,"work_id":"44869205-0ef8-41e2-94a8-127bee1aaa42","year":2022},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.004095Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:fa880da6aa525d879a9adf97cdc29a1096effafe492a8044a652380b0e89d487","observation_id":"fcc744a2-7a5b-43b6-a006-127519c804cb","resolution":{"observed_at":"2026-08-10T23:14:55.640314Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.617918Z","title":"LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations,","venue":null,"work_id":"921446b9-6f13-47bf-aabf-845ac8e781ac","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.009930Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:681f8393c6a30cdb21a904d93b47f65908ea8eb55a845d3fbd85095f81a852ec","observation_id":"809ea35c-399b-4ab8-aac6-455dbde8cfee","resolution":{"observed_at":"2026-08-10T23:14:55.623298Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.601227Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"0da24e50-d300-48f5-808b-90e7019146f1","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.014380Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:82c5bee809cea59572436f3751ad7395fdfdd3d03392db2538375a894bc2ff98","observation_id":"557a5223-7ef6-412b-8ac2-79ff8e060bf2","resolution":{"observed_at":"2026-08-10T23:14:55.607189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.580212Z","title":"Towards transferable targeted attack,","venue":null,"work_id":"122a19a9-14fc-451b-a207-eeda07bc1ba6","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.021127Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:d8708eb20c140046f98f330e53d20fea5e334e2877e95a5e89f454a1dc7b4b56","observation_id":"f4e0c76f-549b-4c88-ae96-79a4a924742f","resolution":{"observed_at":"2026-08-10T23:14:55.589912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.560010Z","title":"On success and simplicity: a second look at transferable targeted attacks,","venue":null,"work_id":"f5d934a8-0755-4810-a865-b6b714294cce","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.026917Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:a7e859e95c3ea9f5cbc9bff6f4b00ae91ef8b730b091f1d87228dfb699769d22","observation_id":"89b5ca35-3b52-4a2f-824c-fe9064075fe8","resolution":{"observed_at":"2026-08-10T23:14:55.566412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.543301Z","title":"Enhancing targeted transferability via suppressing high-confidence labels,","venue":null,"work_id":"66933c62-8fdc-43ea-b7fe-84dacafd8b9c","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.032377Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:4a76cf883bbb90c8335641860f4fc4f71818a3d9b51666c2c6be4898d1950576","observation_id":"dbb2a026-bd13-42b4-ac2b-f83e9e6b9ed3","resolution":{"observed_at":"2026-08-10T23:14:55.548492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.527784Z","title":"Logit margin matters: Improving transferable targeted adversarial attack by logit calibration,","venue":null,"work_id":"c24d0411-8f52-4166-9f8b-3ae710d1c0ea","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.037192Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:d3b5042069f9ee3066a535e8046bb2ab1ed65b45e34cd4324e363d3333c0b249","observation_id":"b3a8c632-7db7-462f-97bb-34aa459d1d4e","resolution":{"observed_at":"2026-08-10T23:14:55.532969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.509647Z","title":"Enhancing the self -universality for transferable t argeted attacks,","venue":null,"work_id":"d6ee9a06-6e18-4d51-9ab3-1cf03f68c385","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.041616Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:0152645d06124424158b6f10a18a8ebcc5892458a53eb04c755b2c94d57ae5b2","observation_id":"af398228-7588-47a0-8237-ad977bb89b3a","resolution":{"observed_at":"2026-08-10T23:14:55.514830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.492313Z","title":"Feature space perturbations yield more transferable adversarial examples","venue":null,"work_id":"997d3587-1789-44ae-951d-c6050206b3ff","year":2019},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.046641Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:2aa3c92c85e646ee4349362fe4fb2a42c3deae56d996ae028653084a0fbe68e2","observation_id":"80e8a0c9-b77e-4a16-8e47-8d78b63453a1","resolution":{"observed_at":"2026-08-10T23:14:55.498371Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.478084Z","title":"Introducing competition to boost the transferability of targeted adversarial examples through clean feature mixup,","venue":null,"work_id":"86b8ac17-f853-4a62-b5a0-4a3227e8d6df","year":2023},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.053087Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:f85d4975628c449d804a16ca6a79320c2cd453b74c2d2cd84d42453c14888266","observation_id":"bbe4c35b-a2d6-40e0-809c-36c136d229a8","resolution":{"observed_at":"2026-08-10T23:14:55.482875Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1411.1784","last_updated":"2014-11-06T22:33:22Z","snapshot_observed_at":"2026-08-16T19:10:09.657437Z","submitted_at":"2014-11-06T22:33:22Z","title":"Conditional Generative Adversarial Nets","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1411.1784","snapshot_observed_at":"2026-08-10T23:14:55.058407Z","title":"Conditional generative adversarial nets","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.058407Z"},"links":{"cited_paper":"/paper/1411.1784","citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:dacd518bb9721c08c29a12ab76244f7ed1f83ab715e37d2fd2c20b66991eda22","observation_id":"0f80b63b-7d31-42ad-b672-16c11b97e194","resolution":{"observed_at":"2026-08-10T23:14:55.058407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.460645Z","title":"Delving into transferable adversarial examples and black -box attacks,","venue":null,"work_id":"ef2b162e-5034-494d-be6a-0d966f925206","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.062912Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:6b509c039c7c1734b6342b719f2f23c68d951f690e5cab3d6fc0b5d01a5a9eeb","observation_id":"e55f9a48-c063-4545-8fff-c4096887eab8","resolution":{"observed_at":"2026-08-10T23:14:55.465848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.442946Z","title":"Enhancing the transferability of adversarial examples with random patch,","venue":null,"work_id":"48002d23-7830-4451-97e8-03c39d0492ea","year":2022},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.068615Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:277b64f324175baa76a38412165ee5534d41f53f93bc5c58b0eead0a4a32ebb8","observation_id":"e971d3a6-fd65-4ec2-b917-f22240ae0f6b","resolution":{"observed_at":"2026-08-10T23:14:55.450338Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.426663Z","title":"Patch -wise attack for fooling deep neural network,","venue":null,"work_id":"737578c5-d67b-4afa-95dc-2a0548e1d258","year":2020},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.073437Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:73a4b1e9f120abbd44ccb6feea3838bf3004af4b4226ae7f441c40a079f7c001","observation_id":"ffd75bfc-bb84-4f86-af74-59a6bf27ae47","resolution":{"observed_at":"2026-08-10T23:14:55.433665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.411004Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"62d6df73-c13e-4f34-83ad-b929a0f41ae7","year":2016},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.079519Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:0f8e03fa544ff3a5d7cf02a17b20631a5633094cb488c6e613206542d567ad3b","observation_id":"b7e38eca-fd79-43cb-8dd1-bd7310de34eb","resolution":{"observed_at":"2026-08-10T23:14:55.416750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.394643Z","title":"Rethinking the inception architecture for computer vision,","venue":null,"work_id":"739a0439-1d1a-4564-b4ae-fbf0e67e9dbe","year":2016},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.085051Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:09bd219427f0828290ca6999bce40f7383a81659b820f1f1066b0f8b2f180141","observation_id":"c056fcd4-46ab-4d31-869e-7a4e4855d0a4","resolution":{"observed_at":"2026-08-10T23:14:55.400120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.379723Z","title":"Densely connected convolutional networks,","venue":null,"work_id":"296bad59-c795-41f7-a47f-3dbd09ac2511","year":2017},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.090244Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:7283b6556c69ab5ecf6468d610a7c2b26686521c0af24e50311f9e20dcd4b7b2","observation_id":"8f374d09-8be5-4408-9e35-083480899cc8","resolution":{"observed_at":"2026-08-10T23:14:55.385004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.362041Z","title":"Very deep convolutional networks for large -scale image recognition,","venue":null,"work_id":"59fba944-7813-4b08-8b3a-cc9d69de0d9a","year":2015},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.095463Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:8bec983b849ec5a168fe9d7c66ba7a9361d5847ebf5c3b56e249f9f30082b935","observation_id":"0f60ff8c-0764-4cc5-a56c-46280839a866","resolution":{"observed_at":"2026-08-10T23:14:55.366770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.346567Z","title":"Adversarial exam ples in the physical world,","venue":null,"work_id":"37795d72-a5fa-4e33-988c-71a08ea37e96","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.099647Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:91006d558aa8c57b53bd1d9c66b56f259c20dd263a6b93b85b4979ff58472022","observation_id":"358cf2b2-6495-42ef-a5ea-6ddab08f6a54","resolution":{"observed_at":"2026-08-10T23:14:55.351719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.333085Z","title":null,"venue":null,"work_id":"fb0a9085-860c-4b17-a5e1-b77ca5c8f387","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.104366Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:6da63aa7314d4a8652ca6c7a4e4dfbe96403eb58c1baa6b59fc4b3d37e34897d","observation_id":"f8651010-9d06-484a-8688-17af8ecfb59f","resolution":{"observed_at":"2026-08-10T23:14:55.337372Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.313294Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows,","venue":null,"work_id":"f65f4598-32a2-4725-8ae7-b27af31c62bf","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.109337Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:9ea0d060c60c5130e3eefc111d847ede1e5100c5c343c42457832cce568525c7","observation_id":"7b5ec764-84cd-4c66-bbf2-8b987cd7a3c7","resolution":{"observed_at":"2026-08-10T23:14:55.319490Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.291817Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":"89205b14-09da-40f5-a68f-104bb47bde43","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.113300Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:09f1bf50ff17bf7ed79f3f4af3b1ba408c76496d129b1734957d923114dd51e8","observation_id":"af285541-b85f-455e-8fb8-0008eb7b11d7","resolution":{"observed_at":"2026-08-10T23:14:55.298266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.272236Z","title":"Rethinking spatial dimensions of vision transformers,","venue":null,"work_id":"1390539a-b92e-49ff-93f5-7ebbcfac41ae","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.120630Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:90addc698c2f027987104790083d452ec7bbfa3318c89505cddcc5b1548a0eb2","observation_id":"33b37b01-47a7-42c2-82a6-3ecebe7b6758","resolution":{"observed_at":"2026-08-10T23:14:55.277554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.255188Z","title":"Visformer: The vision-friendly transformer,","venue":null,"work_id":"45091fee-6667-46c9-b756-4049e9cd0df7","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.126417Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:aa074e8b8af857925b42f6f42714545db76a3f747917925507ccff7273ff76de","observation_id":"3d726273-a962-4b15-8f2f-68679441bda8","resolution":{"observed_at":"2026-08-10T23:14:55.260121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.238095Z","title":"A little robustness goes a long way: Leveraging robust features for targeted transfer attacks,","venue":null,"work_id":"0a1483db-2b4c-46c4-a02f-fd824d0c6aea","year":2021},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.131654Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:c88db8645b9593912b7d25178a7167d9ef5ac80a540f8bc964aff485b263194f","observation_id":"5cedae7b-31a8-4fdc-88d6-a94263a4abf8","resolution":{"observed_at":"2026-08-10T23:14:55.244318Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T23:14:55.222415Z","title":null,"venue":null,"work_id":"9fd11d9c-852c-4877-920c-bca8ac2cb41f","year":null},"citing_paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T23:14:55.137005Z"},"links":{"citing_paper":"/paper/2412.20807"},"observation_digest":"sha256:a4c81f9c59f8f93436535a223f94579a2ea463a2117ccc78da1ea74f1dfba3b2","observation_id":"3fe7c040-3dde-44ba-8f0b-198adadc544b","resolution":{"observed_at":"2026-08-10T23:14:55.228754Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2412.20807","last_updated":"2024-12-30T09:01:27Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-20T00:21:16.509923Z","submitted_at":"2024-12-30T09:01:27Z","title":"Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":4,"verified_exact":0,"verified_fuzzy":36},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 20 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2412.20807."}