{"as_of":"2026-08-14T07:26:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:3c53f900e2ab09518513749323837f74744aa4222fc4cd020ff06dade1e08b8c","coverage":[{"denominator":61,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":61,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T20:33:11.000621Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-14T06:32:32.682623+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2501.08258/citation-record","integrity":"/paper/2501.08258/integrity","json":"/paper/2501.08258/citation-record.json","paper":"/paper/2501.08258"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:12.031161Z","title":"Enhanc- ing object detection in smart video surveillance: A survey of occlusion-handling approaches,","venue":null,"work_id":"8924170d-a103-4377-ac76-d29b540f40fb","year":2024},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.700594Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:330098d5788097a1f9415ad9a924f419dc66006bddeeb38e9c6840a718e253ba","observation_id":"78267256-017d-4aa4-90f8-81dc60e6dd8e","resolution":{"observed_at":"2026-08-10T20:33:12.036326Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:12.015321Z","title":"Automatic number plate recognition: A detailed survey of relevant algo- rithms,","venue":null,"work_id":"1943fcf1-9432-4017-9d00-69553acb3446","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.705963Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:790b485856cd61f773e63740a3410d4dfb20305e7870af474038a4ab4925a99d","observation_id":"c0867823-cbdd-4bde-8aba-00f4661d14a1","resolution":{"observed_at":"2026-08-10T20:33:12.020801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:12.000082Z","title":"Deep learning meth- ods for object detection in autonomous vehicles,","venue":null,"work_id":"27c899aa-ca7e-4517-a7d3-39c9eab94972","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.710615Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:173696da3cbb6a392063da7402db94dd133a574fc83430859dda20d3016af45b","observation_id":"02bb3d08-92fd-487d-87de-2bdde3a74dec","resolution":{"observed_at":"2026-08-10T20:33:12.004814Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.984635Z","title":"Naturalistic physical ad- versarial patch for object detectors,","venue":null,"work_id":"ec310d73-e7c7-4941-86d7-7b49c52b363e","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.715690Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:366c37ce5691fd7a6efbe1156ea685488c396726d835f8eab72d6ebb94ae37d8","observation_id":"79de64b5-6cf0-4b26-8fea-8746a25b7c72","resolution":{"observed_at":"2026-08-10T20:33:11.989388Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.968449Z","title":"Hop- skipjumpattack: A query-efficient decision-based attack,","venue":null,"work_id":"644d4ce2-d079-4be6-a043-b1a0a033e618","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.720198Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:03405b876fd1beba568796c0a9f1fde9471551d37984b8ad3c9a3628e53dbe7d","observation_id":"c8888f05-831a-4285-99d9-d911534c5b68","resolution":{"observed_at":"2026-08-10T20:33:11.973911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.951452Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":"c491bf60-6feb-45e5-ac0a-3008a31a2a14","year":2019},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.724737Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:3c9e2437f64c664e573230d92f353ec78b6436727b0a71ef1b45bdaa399eb265","observation_id":"1dc519d1-927c-4392-a981-b07fa9d9c5fa","resolution":{"observed_at":"2026-08-10T20:33:11.956934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-08-13T00:34:03.935687Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-08-10T20:33:10.729674Z","title":"Decision- based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.729674Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:4a28e7b088d184894d41e8507ee74c2f32db3fde299cb22b995d683de5835a47","observation_id":"e62eb51d-515d-47f6-8fd5-98b674a5bf5c","resolution":{"observed_at":"2026-08-10T20:33:10.729674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-08-12T19:28:42.313899Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-08-10T20:33:10.734328Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.734328Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:94eb89de49fbbc5bbbcf497ca73d62407c9a7caec462913619980ddb9b53b12a","observation_id":"887b6d10-c300-4114-a53d-371e61b9b559","resolution":{"observed_at":"2026-08-10T20:33:10.734328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.934946Z","title":"Phys- 14 ical adversarial examples for object detectors,","venue":null,"work_id":"9b8747c8-6a6b-4f12-9dda-c1d50cda8c8b","year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.739102Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:54c8d793079e8b9da847ed3dec616322e96809458b31d89e08c248e27ea37414","observation_id":"eb3e3aea-0c4a-41eb-a9e1-0d202ec7be3c","resolution":{"observed_at":"2026-08-10T20:33:11.940180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-13T18:17:41.806260Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-10T20:33:10.744310Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.744310Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:0a502cf8d78ea7c9262388d9ca4c190295e4bd8638922c7e64426568f06d821a","observation_id":"eb659320-9df5-4893-9bf9-f7b698aa5928","resolution":{"observed_at":"2026-08-10T20:33:10.744310Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.919549Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":"e3b7bd75-d13c-4154-8715-d2499ea8968d","year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.750034Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:4e9523dfa9c8f4c08963cfeee7babb1ac8c32d59c58fd0ab60f5be49244464dc","observation_id":"40a44acc-7346-4e31-bd95-721a274baa85","resolution":{"observed_at":"2026-08-10T20:33:11.924585Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.903052Z","title":"Adversarialeak: External information leak- age attack using adversarial samples on face recognition systems,","venue":null,"work_id":"f8c7924f-c1f0-4e00-ac01-72a3b841094f","year":2025},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.755036Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:a50ff70360593a3351dc35bac240f51d0a2eeb1740980be1e42266dbbb10d0ca","observation_id":"7114ed83-f7df-48fa-b4f2-31becccb9ef9","resolution":{"observed_at":"2026-08-10T20:33:11.908486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.886542Z","title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector,","venue":null,"work_id":"855a26ea-f5ca-4dc3-9774-cf9ed96245f3","year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.760023Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:42723bac447d0cfd044686d3ec7e39e2591727a6cadb3a4f67847837d19838b2","observation_id":"36275dc0-0a3a-43e1-aa24-f7d56d94de0b","resolution":{"observed_at":"2026-08-10T20:33:11.892001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.02299","last_updated":"2019-04-23T16:44:32Z","snapshot_observed_at":"2026-07-06T06:43:22.227602Z","submitted_at":"2018-06-05T17:04:37Z","title":"DPatch: An Adversarial Patch Attack on Object Detectors","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.02299","snapshot_observed_at":"2026-08-10T20:33:10.765118Z","title":"Dpatch: An adversarial patch attack on object detec- tors,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.765118Z"},"links":{"cited_paper":"/paper/1806.02299","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:d124acc494121c950704ffe10fb6792406d73446d0e57f04fff78a522231e5ed","observation_id":"ef45cd5e-8c31-4b55-ab7e-46bdf8e7d8ee","resolution":{"observed_at":"2026-08-10T20:33:10.765118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.870339Z","title":"Camou: Learning physical vehicle camouflages to adversarially attack detectors in the wild,","venue":null,"work_id":"95aeb9cb-c5bb-4b2e-be79-43beae26c94c","year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.770268Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:9f9ace9cf9578d9a5917f2fb8d056b8fa13c035c6524a24b16df19b5097375f8","observation_id":"611762b1-a5a7-4d86-ba9a-56fe15e46392","resolution":{"observed_at":"2026-08-10T20:33:11.875710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.854470Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection,","venue":null,"work_id":"13ad5c25-58c2-4fc9-ac7f-11b1676767fb","year":2019},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.775066Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1bd1dce25c6f9914862a4d2b5a9451c19f3ba085162097ce40f779bca969d4e1","observation_id":"31e541cb-e035-42aa-b316-23d425778658","resolution":{"observed_at":"2026-08-10T20:33:11.859672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.838570Z","title":"Adversarial t-shirt! evading person detectors in a physical world,","venue":null,"work_id":"b90c844e-2225-443e-b4a8-ef974eaafa47","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.779564Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1a2fd8a3f8637ede7e05a0ad4eda9c4f36b581e1d812224d0ec6ed0af3223805","observation_id":"208055f8-d4bf-4e7b-9633-9c0a2681230e","resolution":{"observed_at":"2026-08-10T20:33:11.844005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.823924Z","title":null,"venue":null,"work_id":"0992f3ad-aecc-413c-b11e-79505d4ffdf5","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.784445Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:9e15253037fbafcbb66b0f9b19c8bf6b0cc6c5a9bc49e5d00b344eb68d4ae9e1","observation_id":"94019f5d-315e-454e-9ad8-46c567313c29","resolution":{"observed_at":"2026-08-10T20:33:11.828560Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.809257Z","title":"Universal physical camouflage attacks on object detectors,","venue":null,"work_id":"20fb38ba-51c8-4e8f-a407-1bcab5c5b5d9","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.789213Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1bc3c5c9ffb2d8cac58264da16bd809e370ed833417a4e3eca11e745f9a4fe4d","observation_id":"96e0d0c6-91b5-46f3-8667-53d4b96de067","resolution":{"observed_at":"2026-08-10T20:33:11.813869Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.793215Z","title":"Mak- ing an invisibility cloak: Real world adversarial attacks on object detectors,","venue":null,"work_id":"08b11ee5-005a-41d6-b3c1-215da0e13ffe","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.794294Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:2558735a9973427bfdab24e699de199e8782b1270b7a8e4abf9d5b72ead2e6fb","observation_id":"6b450b26-a312-4216-8a0f-f51cee4db456","resolution":{"observed_at":"2026-08-10T20:33:11.798560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.775858Z","title":"The translucent patch: A physical and universal attack on object detectors,","venue":null,"work_id":"61fce233-6d75-4ee1-94f5-93c10cf48f2b","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.799071Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:9ade41b85f787f478a8e2d0900fa8f47dd49ca1b1863a07b84f9a4227e18c01f","observation_id":"2277cac1-7c05-4cad-8bc5-6367a8a8050b","resolution":{"observed_at":"2026-08-10T20:33:11.781539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.757920Z","title":"Too good to be safe: Tricking lane detection in autonomous driving with crafted perturbations,","venue":null,"work_id":"ebc3f01d-38c9-40aa-bee1-b77c529bf856","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.803716Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:4bdcd603065c11b0071769917b8ca45ab8ae26463912cf28570597ed4e092d3b","observation_id":"023a0262-444d-4c3f-b2f3-8f810bd87bed","resolution":{"observed_at":"2026-08-10T20:33:11.764006Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.740696Z","title":"Legitimate adver- sarial patches: Evading human eyes and detection models in the physical world,","venue":null,"work_id":"c6720aa6-0bd6-4a2d-8718-950e35bb31b0","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.808495Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:36bf2933a26aa6e96f0cbd5634ba0bdd485f63a5a42b756183336ee9e41bfb2c","observation_id":"9cccfd70-e988-44eb-8568-1dfb57b1c851","resolution":{"observed_at":"2026-08-10T20:33:11.746120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.722661Z","title":"Dta: Physical camouflage attacks using differentiable transformation network,","venue":null,"work_id":"bbb00c01-ac89-4681-9832-e1a19c4b284b","year":2022},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.813359Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:2188778065a9e03a5403918f14c2feea2a1e09c2d85cd56acef95a2aab9399dd","observation_id":"cd791041-49cd-4023-bee2-b103d26c3dd6","resolution":{"observed_at":"2026-08-10T20:33:11.728508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.705057Z","title":"Adversarial texture for fooling person detectors in the physical world,","venue":null,"work_id":"eff40b60-7e72-4d89-978a-f78408edf188","year":2022},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.817922Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:752a9a324f2bbf74377d563ff8e2b7620f6678475cf2c669c7c19a154bf6dc18","observation_id":"ad820433-b15b-4fae-b19c-f47c495b7821","resolution":{"observed_at":"2026-08-10T20:33:11.710577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.687923Z","title":"The adversarial implications of variable-time inference,","venue":null,"work_id":"8164dd8d-f592-422f-9180-d855860ed284","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.822819Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:7aeca0f4d7a481bfe49c393b02477772bcaba4f509159a29e1c0a3b8c3fa32ff","observation_id":"68d55338-b4b0-462d-b4fd-be4a240ce413","resolution":{"observed_at":"2026-08-10T20:33:11.693738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.06192","last_updated":"2022-01-17T03:24:31Z","snapshot_observed_at":"2026-08-13T16:58:26.566202Z","submitted_at":"2022-01-17T03:24:31Z","title":"Fooling the Eyes of Autonomous Vehicles: Robust Physical Adversarial Examples Against Traffic Sign Recognition Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.06192","snapshot_observed_at":"2026-08-10T20:33:10.827518Z","title":"Fooling the eyes of autonomous vehicles: Robust phys- ical adversarial examples against traffic sign recognition systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.827518Z"},"links":{"cited_paper":"/paper/2201.06192","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:db4df1e31041b86794b74a6eccaa48e8e69bcfd8887059ec5465b00c3b1ccabb","observation_id":"5fab0a44-1617-4e9c-ad78-0a191fb7c375","resolution":{"observed_at":"2026-08-10T20:33:10.827518Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.667313Z","title":"T-sea: Transfer-based self-ensemble attack on object detection,","venue":null,"work_id":"a4badbab-bae8-4a93-b7fe-7cd0d0b16edf","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.832823Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:b85922242f95004fcd48ef7d92b5a48692de472f7d2f6f5367df4cd94ef6e654","observation_id":"fe3dde72-8c25-4d3c-915e-1733b248f076","resolution":{"observed_at":"2026-08-10T20:33:11.673094Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.649802Z","title":"{TPatch}: A triggered physical adversarial patch,","venue":null,"work_id":"759f0686-1614-426e-9dca-e1d2d7ef4a08","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.837646Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:28ddb30a0dc5404ba6655859e632f16f51e14cbbb69ac7ec0b9cf815d0db75e0","observation_id":"6ad172a0-fc2e-45c2-8c3f-9bb7a35864b9","resolution":{"observed_at":"2026-08-10T20:33:11.654972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.633148Z","title":"Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,","venue":null,"work_id":"b5fc7137-e40f-4d22-a606-fa8b526720cd","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.842602Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:2828449d0024e730cd5e3a87b92331a86b47978fd2b0ae58b447af3c9620bc24","observation_id":"874d77ce-2723-4da6-b473-080a2adb6568","resolution":{"observed_at":"2026-08-10T20:33:11.638108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:10.847640Z","title":"Dap: A dynamic adversarial patch for evading person detectors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.847640Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:3fc538a201a96dc49e6129e6d9de31fe4efb8f54a466e641592694158afabc0b","observation_id":"238c20cf-75cf-46d8-8d3a-d6d52f30dc1d","resolution":{"observed_at":"2026-08-10T20:33:10.847640Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.607994Z","title":"Revisiting adversarial patches for designing camera-agnostic attacks against person detection,","venue":null,"work_id":"e4538a35-6bb9-487c-a231-fcfc218cfc34","year":null},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.852850Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:801325101e55643089b093dc749c1b3f56b21405418bb26c5f09a0549783eaae","observation_id":"fbf8a7b9-23c2-40d7-811c-1621a9eee7ab","resolution":{"observed_at":"2026-08-10T20:33:11.612812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.591315Z","title":"Full-distance evasion of pedestrian detectors in the physical world,","venue":null,"work_id":"f6d53ef6-fd7e-40c8-bf7a-3e868dcb3ac5","year":null},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.857908Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:361783b58570250fbb13f75a0799270acf09fabb8c8a28921a5956e8b9b1bb5b","observation_id":"ea9041d1-64f1-44b8-b1ca-a88e351acf70","resolution":{"observed_at":"2026-08-10T20:33:11.596853Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.574136Z","title":"Infrared invisible clothing: Hiding from infrared detectors at multiple angles in real world,","venue":null,"work_id":"d17e50bd-8358-48df-8db3-f0c77a3112c2","year":2022},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.863350Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:0b20c79b6a9964618f3638955b056ad3209128d3909a0f9f6e185f377c183f98","observation_id":"c6f02dad-2280-407c-9143-55c6dcc185de","resolution":{"observed_at":"2026-08-10T20:33:11.579906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.556538Z","title":"Hotcold block: Fooling thermal infrared detectors with a novel wearable design,","venue":null,"work_id":"abbb49bf-7eff-4359-8cb3-53210834ac9a","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.868203Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:3c9ee4758b22066c7ac122ae71f0d2e9be12feb873f50d74be1e30cdcafeae33","observation_id":"9da5d09d-5f6e-4b8d-9b8e-fde1278f3e3e","resolution":{"observed_at":"2026-08-10T20:33:11.562894Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.537665Z","title":"Infrared adversarial patches with learnable shapes and locations in the phys- ical world,","venue":null,"work_id":"84963e53-9d97-4816-9323-f37391df8065","year":1928},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.874003Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1485a8c96758e729f4abdb0d4badeae67872ab7be819594d33cae98ab168b2d9","observation_id":"fcece39a-9de4-43a1-b70e-6c5720a0880d","resolution":{"observed_at":"2026-08-10T20:33:11.543868Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.520679Z","title":"Infrared adversarial car stickers,","venue":null,"work_id":"1bd04285-b110-470d-951d-d43277801451","year":2024},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.878870Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1bbf3a81d8609ce09b42758688075096b6493c1fd8d467faf7a669afd1ab590a","observation_id":"ebe138b8-00da-4066-98fd-4bd5e065c98e","resolution":{"observed_at":"2026-08-10T20:33:11.526148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.502794Z","title":"{SLAP}: Improving physical adver- sarial examples with {Short-Lived} adversarial perturba- tions,","venue":null,"work_id":"6f579d38-7121-48ef-8365-4dcb83a811ad","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.883819Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:7300ba884bf66799702527704058a70641e40d9c9d8eb68e5672416bd0d35193","observation_id":"012052f2-f188-4206-97ac-d0ff8fbf4df2","resolution":{"observed_at":"2026-08-10T20:33:11.508389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.485367Z","title":"Opticloak: Blinding vision-based autonomous driving systems through adversarial optical projection,","venue":null,"work_id":"5b7bbed7-3396-462e-96bc-aa9c925e873b","year":2024},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.888845Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:0d5618aa0af68732b01d178868c5ef0b6d3c0c43df77cc8fee9cef398bcc7193","observation_id":"4f047b19-2e7c-47d5-a338-320dff0f859f","resolution":{"observed_at":"2026-08-10T20:33:11.490963Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.467311Z","title":"Adversarial color projection: A projector-based physical-world attack to dnns,","venue":null,"work_id":"91e64e27-3333-4d2a-bae2-c0d0381c7a90","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.893670Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:3259e805586d3aa003da6818b9517da9158afaf86b30507723d6d31584ead7bc","observation_id":"c092da90-9962-460f-b0b4-d2d89040b80b","resolution":{"observed_at":"2026-08-10T20:33:11.473488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.448778Z","title":"Adversarial patch attacks on deep-learning-based face recognition systems using generative adversarial networks,","venue":null,"work_id":"5ee01b9b-866b-407e-996a-5911e93e6b04","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.898527Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1b580c98be5c11268ce30d1b6815585c6e97fb054a02c45dd17c4eaddd6df001","observation_id":"b33c4651-68b8-4c20-aea3-82a5f8aef5b7","resolution":{"observed_at":"2026-08-10T20:33:11.454200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.430067Z","title":"Advhat: Real-world ad- versarial attack on arcface face id system,","venue":null,"work_id":"157fda23-5f0d-4b8d-96a9-272358fe1f42","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.902783Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:e756bc5ffad41b71aa8ee0de60b843659b200697b2ae8c9340838477a1139627","observation_id":"ba11b16d-babf-4436-a10e-5aedddf7a9d1","resolution":{"observed_at":"2026-08-10T20:33:11.435948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.411808Z","title":"Real- world adversarial examples via makeup,","venue":null,"work_id":"9417c06f-2d26-4d97-8a76-e9485eb37947","year":2022},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.907087Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:4f011366143b9eac03b7d110bccd4ec2932ce43cfaa64c869fb173b398a7cbde","observation_id":"5ac6d640-0460-4c71-98d0-c2d985dfd028","resolution":{"observed_at":"2026-08-10T20:33:11.417785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.393403Z","title":"Unified adversarial patch for cross-modal attacks in the physical world,","venue":null,"work_id":"c013c11b-a5db-4dfc-88cb-88280db0e213","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.911730Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:0b608d81892a1f047eaa01c8804c03ed1de325d4283c6861e81345c21a238288","observation_id":"c24d9dad-b4c5-46b7-b109-5c9960908628","resolution":{"observed_at":"2026-08-10T20:33:11.398566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.376133Z","title":"Phantom of the adas: Secur- ing advanced driver-assistance systems from split-second phantom attacks,","venue":null,"work_id":"6b380992-b84d-4145-a711-36d1a2f65f22","year":2020},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.915830Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:695386804edc271b45d4898762ff2223933683563c9d49c2392efa87f73b8f6c","observation_id":"d2d7206b-4869-40e7-a63d-8fb912351cee","resolution":{"observed_at":"2026-08-10T20:33:11.381644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1807.01069","last_updated":"2019-11-15T15:05:57Z","snapshot_observed_at":"2026-08-14T01:56:34.422392Z","submitted_at":"2018-07-03T10:25:26Z","title":"Adversarial Robustness Toolbox v1.0.0","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.01069","snapshot_observed_at":"2026-08-10T20:33:10.920054Z","title":"Adversarial robustness toolbox v1. 0.0,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.920054Z"},"links":{"cited_paper":"/paper/1807.01069","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:f76600abf10a2cdb804865051096d49f7222ba471f24a2b53f7579b9c84ef48b","observation_id":"39a037c1-e40c-4622-8823-ab62b72bed09","resolution":{"observed_at":"2026-08-10T20:33:10.920054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-06T11:09:16.409556Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-10T20:33:10.925474Z","title":"Yolov3: An incremental improvement,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.925474Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:3cd671f62a32fad3dbd9418b29890ada448dcba692f78d9d3d1a190e461f8c8b","observation_id":"c5020f19-a7bc-4dba-8a4c-2f15861289b0","resolution":{"observed_at":"2026-08-10T20:33:10.925474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:10.930586Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.930586Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:1ed35dca0bc1d31d2919a8b9106191310c68744de6f841baf5ae905d3c8b4230","observation_id":"1f3c2d1c-5997-4b73-8d7e-10539f534b77","resolution":{"observed_at":"2026-08-10T20:33:10.930586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.346843Z","title":"Focal loss for dense object detection,","venue":null,"work_id":"d91859c0-13f4-46c5-9cff-826040b7a704","year":2017},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.935450Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:941719d09813e1fd64cb7e5f0ef861086be533c436bcadb93eaa2a44d7938e47","observation_id":"bb7620b0-5848-42fb-8766-4f810c96ad5d","resolution":{"observed_at":"2026-08-10T20:33:11.352164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.330117Z","title":"Ssd: Single shot multibox detector,","venue":null,"work_id":"b663f1cd-38a2-4d6e-8ee6-745a27f6f49d","year":2016},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.940404Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:101a4db33da44185222a9cd15c14435fae35fd423e0cb5412bdc375377ddad89","observation_id":"f48696d4-5100-4601-9188-80153ab00113","resolution":{"observed_at":"2026-08-10T20:33:11.335718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.03582","last_updated":"2024-01-07T21:22:42Z","snapshot_observed_at":"2026-08-13T04:47:41.488373Z","submitted_at":"2024-01-07T21:22:42Z","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.03582","snapshot_observed_at":"2026-08-10T20:33:10.946325Z","title":"Invisible reflections: Leveraging infrared laser reflections to target traffic sign perception,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.946325Z"},"links":{"cited_paper":"/paper/2401.03582","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:987e2e356b0a4a94bc5d3f3817787b41db710b184cfb34dea03d42aa4419f05b","observation_id":"2265c3c6-0c59-45bf-b885-15fafbdbc54e","resolution":{"observed_at":"2026-08-10T20:33:10.946325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.314126Z","title":"Light can be dangerous: Stealthy and effective physical-world adversarial attack by spot light,","venue":null,"work_id":"7aa44d36-67e8-47c6-affc-e34a12663891","year":2023},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.952495Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:7ce356a676f7a44b269bdee03d5a1482a86d15b8105bd3103b070ace499d39d2","observation_id":"a13d09ba-2a3c-4ed3-a657-a7e4ad00ef8d","resolution":{"observed_at":"2026-08-10T20:33:11.319270Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.298641Z","title":"On adversarial patches: real-world attack on arcface-100 face recognition system,","venue":null,"work_id":"972e988c-c024-421b-bd48-edd6c713a1d1","year":2019},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.958656Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:f90dbc113b78c003ba65293631a3dbf4dd0527d7f36309247721a85e6660c75c","observation_id":"79a8ec7a-62a4-4d47-b0a3-ed5b4da86f27","resolution":{"observed_at":"2026-08-10T20:33:11.303262Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:10.963747Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.963747Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:a3c03f301223286a0a0f61ed0d0530572f8fad69c69319a770ee30413f8a9fd9","observation_id":"4fa29615-c476-4468-8379-81c69a429878","resolution":{"observed_at":"2026-08-10T20:33:10.963747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.269904Z","title":"Generating adversarial examples by makeup attacks on face recogni- tion,","venue":null,"work_id":"6ad652e4-4108-4310-9d61-38afb9e19bca","year":2019},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.968948Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:69dd2d6ae1d18ab126b43ccc6e728ea6f6c7b5a7cac645411b2758982f91a0ec","observation_id":"bfd04f41-71e5-4b31-a315-23558838f3cc","resolution":{"observed_at":"2026-08-10T20:33:11.275177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.03162","last_updated":"2021-05-07T11:00:35Z","snapshot_observed_at":"2026-08-13T19:27:15.419384Z","submitted_at":"2021-05-07T11:00:35Z","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.03162","snapshot_observed_at":"2026-08-10T20:33:10.974022Z","title":"Adv-makeup: A new imperceptible and transferable attack on face recognition,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.974022Z"},"links":{"cited_paper":"/paper/2105.03162","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:c076b62a6f808d897e981cde193326d1891736d8e5c4b86e3370e86906fb16e4","observation_id":"aff0e862-623e-4e1d-8f1c-21d2324a199a","resolution":{"observed_at":"2026-08-10T20:33:10.974022Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.252248Z","title":"Adversarial laser beam: Effective physical- world attack to dnns in a blink,","venue":null,"work_id":"b69668b7-aa44-4cfd-840c-c74ae72cabab","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.979423Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:ea0b8a0171a7b3b2aff02057ae41299bdc108c14ce61c047934ce2d16810b8eb","observation_id":"f87d31d4-c69c-4ee8-9109-44baf21c17f1","resolution":{"observed_at":"2026-08-10T20:33:11.257502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.04683","last_updated":"2018-03-13T08:51:01Z","snapshot_observed_at":"2026-08-12T13:39:24.777766Z","submitted_at":"2018-03-13T08:51:01Z","title":"Invisible Mask: Practical Attacks on Face Recognition with Infrared","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.04683","snapshot_observed_at":"2026-08-10T20:33:10.984443Z","title":"Invisible mask: Practical attacks on face recognition with infrared,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.984443Z"},"links":{"cited_paper":"/paper/1803.04683","citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:685b33168639f38c828034c020634efd96bb922ace162f2b9b83214e2ae9abc7","observation_id":"72aa6f2c-2c03-4c82-bd38-fa8239d759cc","resolution":{"observed_at":"2026-08-10T20:33:10.984443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.235638Z","title":"Vla: A practical visible light-based attack on face recognition systems in physical world,","venue":null,"work_id":"2058a26a-891c-47d7-9fa5-1048e92fbffe","year":2019},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.990117Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:9e3e649e6415065ef2aaf4c8f0a85e84cb4930e80eb50520113f6c3b1b179d5a","observation_id":"307955e9-89b2-4ba9-98c0-822a111ba40c","resolution":{"observed_at":"2026-08-10T20:33:11.240713Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.216632Z","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs,","venue":null,"work_id":"6d3319d6-df3a-4a08-bca4-1c4bd5b0acab","year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:10.995711Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:d911a8b128b2c0419753440898a32e1aebf87a2c39254d5d233d61c339f4d879","observation_id":"2b4aa974-2134-4c4e-a32c-39f68406e7f0","resolution":{"observed_at":"2026-08-10T20:33:11.223618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-14T06:32:32.682623+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:33:11.000621Z","title":"I can see the light: Attacks on autonomous vehicles using invisible lights,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T20:33:11.000621Z"},"links":{"citing_paper":"/paper/2501.08258"},"observation_digest":"sha256:6ca643a396c915bd5875933297226d5bda6fd4671f50ec5de94d98758d0b15b7","observation_id":"8ab8a053-3df5-4ebf-92ab-22d3c84db0a5","resolution":{"observed_at":"2026-08-10T20:33:11.000621Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2501.08258","last_updated":"2025-01-16T10:55:41Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-13T12:04:01.229130Z","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World"},"reference_resolution":{"displayed":61,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":15,"verified_exact":0,"verified_fuzzy":46},"total_outbound_references":61},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-14T06:32:32.682623+00:00","source":"crossref"},{"observed_at":"2026-08-14T06:32:18.44784+00:00","source":"retraction_watch"}],"thesis":"As of 14 August 2026, this Paper Citation Record lists 61 of 61 outbound references and 0 inbound Pith citation observations for arXiv:2501.08258."}