{"as_of":"2026-08-11T14:44:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:79cd1efb9aad1af343741eee32b9a81ad071be77c730847bd14eebbf86aedbed","coverage":[{"denominator":78,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":78,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T15:55:07.989455Z","state":"measured"},{"denominator":87,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":87,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":9,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":9,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T14:05:25.727614Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-07-09T00:25:48.506578Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-16T19:29:43.382392Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:91b52d1cb92786b8502898f20b982009d9a1120cd1f7bfd33f97bfa233aea966","observation_id":"404870a7-3020-493e-b62d-8bec5c7dca18","resolution":{"observed_at":"2026-05-16T19:31:13.102619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-08-03T14:05:25.727614Z","title":"Black- box adversarial attack on vision language models for au- tonomous driving.CoRR, abs/2501.13563, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2512.21815","last_updated":"2026-06-29T08:03:34Z","snapshot_observed_at":"2026-08-05T12:33:04.952799Z","submitted_at":"2025-12-26T01:01:25Z","title":"High-Entropy Tokens as Multimodal Failure Points in Vision-Language Models","version":4},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T14:05:25.727614Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2512.21815"},"observation_digest":"sha256:38872763d53ee549e2bed2ab65e8ee10f30177635786b164a75e04811a7d7f10","observation_id":"65d0b44c-40d5-43e9-82c7-b6c59e5bd3b0","resolution":{"observed_at":"2026-08-03T14:05:25.727614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2602.16144","last_updated":"2026-04-20T04:32:07Z","snapshot_observed_at":"2026-07-06T22:46:12.384926Z","submitted_at":"2026-02-18T02:29:33Z","title":"Missing-by-Design: Certifiable Modality Deletion for Revocable Multimodal Sentiment Analysis","version":3},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-15T21:51:59.442261Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2602.16144"},"observation_digest":"sha256:f916944a80a8f60778e612010220a3b638b0f16fe794d32642286de073b81dbe","observation_id":"f5796956-728e-4a50-830e-265f9ab218e1","resolution":{"observed_at":"2026-05-15T21:56:41.027770Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2604.04488","last_updated":"2026-04-06T07:27:04Z","snapshot_observed_at":"2026-08-05T13:21:08.142791Z","submitted_at":"2026-04-06T07:27:04Z","title":"A Patch-based Cross-view Regularized Framework for Backdoor Defense in Multimodal Large Language Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-10T20:14:02.553313Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2604.04488"},"observation_digest":"sha256:b1bfc533b58163516d6741cd957cd6013f9b594339779aac7f6f149e70593c12","observation_id":"a5969ea7-1c79-4fa6-aa0f-bcc7e152a70f","resolution":{"observed_at":"2026-05-10T22:05:49.157166Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.00880","last_updated":"2026-04-26T09:12:32Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2026-04-26T09:12:32Z","title":"Adversarial Flow Matching for Imperceptible Attacks on End-to-End Autonomous Driving","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-09T20:29:23.561292Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.00880"},"observation_digest":"sha256:0c33f6f1fa5b2dccee600b6dc97ea8ebb4e50ddb82256474f1b0ea3a429c647b","observation_id":"df811b8f-f5c3-4060-8513-b4593151b893","resolution":{"observed_at":"2026-05-11T15:11:08.009639Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.10386","last_updated":"2026-05-11T11:28:03Z","snapshot_observed_at":"2026-08-11T13:22:44.135812Z","submitted_at":"2026-05-11T11:28:03Z","title":"GuardAD: Safeguarding Autonomous Driving MLLMs via Markovian Safety Logic","version":1},"reference_index":7,"source":"arxiv_source","source_observed_at":"2026-05-12T05:17:42.003708Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.10386"},"observation_digest":"sha256:d901ba4ae563d3a044f166099d011aad19fa6809b540448ce436fc3ed88e98fa","observation_id":"13534008-7363-4846-bbca-3af763f995bf","resolution":{"observed_at":"2026-05-12T05:21:27.099436Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.23220","last_updated":"2026-05-22T04:31:09Z","snapshot_observed_at":"2026-07-06T23:33:29.550551Z","submitted_at":"2026-05-22T04:31:09Z","title":"WMAttack: Automated Attack Search for Adversarial Evaluation of World-Model Agents","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-25T05:14:59.444339Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.23220"},"observation_digest":"sha256:c1776356b950c175ebe1ecb3dde7dd3252ef6fc0a95ba2e22320f6bdae122aba","observation_id":"78440874-6672-480f-b107-ecef121e912b","resolution":{"observed_at":"2026-05-25T05:15:22.174307Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2605.29114","last_updated":"2026-05-27T21:21:37Z","snapshot_observed_at":"2026-07-06T23:38:37.178378Z","submitted_at":"2026-05-27T21:21:37Z","title":"ReasonBreak: Probing Vulnerabilities in Reasoning-Enabled Vision-Language-Action Models for Autonomous Driving","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-06-29T11:10:46.269185Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2605.29114"},"observation_digest":"sha256:25b13bf6a4bb8f0214b1e513722af8cd7b554d362cc0445493a30b270e15f182","observation_id":"c7dbbf13-0617-49cd-b9c5-5f109929c191","resolution":{"observed_at":"2026-06-29T11:13:20.760382Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"cited_work":{"arxiv_id":"2501.13563","doi":null,"metadata_source":"pith","pith_arxiv_id":"2501.13563","snapshot_observed_at":"2026-07-09T00:25:48.506578Z","title":"Black-box adversarial attack on vision language models for autonomous driving","venue":"cs.CV","work_id":"7b4a8d8c-54dd-4e21-af66-72c1ac9d91ee","year":2025},"citing_paper":{"arxiv_id":"2607.05783","last_updated":"2026-07-07T03:15:00Z","snapshot_observed_at":"2026-08-02T20:47:51.837914Z","submitted_at":"2026-07-07T03:15:00Z","title":"Benchmarking the Robustness of Autonomous Driving to Environmental Illusions: A Lane Perception Perspective","version":1},"reference_index":131,"source":"pdf_text","source_observed_at":"2026-07-09T00:16:03.334057Z"},"links":{"cited_paper":"/paper/2501.13563","citing_paper":"/paper/2607.05783"},"observation_digest":"sha256:0422d3e1b3a38fddb848fa54c88a21f623f0db923f3dca8a11b8d03e708061ff","observation_id":"71b217a9-fbd1-430d-b301-c0485eecb121","resolution":{"observed_at":"2026-07-09T00:25:48.507890Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2501.13563/citation-record","integrity":"/paper/2501.13563/integrity","json":"/paper/2501.13563/citation-record.json","paper":"/paper/2501.13563"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-10T15:55:07.698921Z","title":"Gpt-4 technical report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.698921Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:19936aee3008124e64f1a91f22c0d24261c94a460dd666dd5a09e08e2eef48d3","observation_id":"f231ce3f-24b2-41c6-9b7f-5cb45e52dff7","resolution":{"observed_at":"2026-08-10T15:55:07.698921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.704777Z","title":"Flamingo: a visual language model for few-shot learn- ing","venue":null,"work_id":"34cff30d-8237-4bcc-8fef-4873e864dd9b","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.703746Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:22640419810b47f0a6f4cc3893901a8b86d0e144d1c76a71834a941c7166b482","observation_id":"672c8f38-f131-402c-9210-fa2c8cf2fb36","resolution":{"observed_at":"2026-08-10T15:55:08.708222Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.695626Z","title":"Vlmo: Unified vision- language pre-training with mixture-of-modality-experts","venue":null,"work_id":"a94b7697-d8b9-4d10-a751-0943d2e0a58c","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.708305Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:78ffdf7a8ddc12993a3c0c403c44c365cc6b56422ceb005498c37fe6ee9070a8","observation_id":"d9cdc214-c1ea-457a-9030-58c44c1397f9","resolution":{"observed_at":"2026-08-10T15:55:08.698989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.687101Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"85d351d0-b5ef-4fa3-8711-ee4c326d8d8c","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.712007Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:32e1ecf39a979c83f1550fd47e5ab8c9fac2d9ae83feaec3b6a7413f0a97753f","observation_id":"fc9d67ba-0f24-4aad-8ef9-e69f2eb7f43a","resolution":{"observed_at":"2026-08-10T15:55:08.690100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.677776Z","title":"Mp3: A unified model to map, perceive, predict and plan","venue":null,"work_id":"1577c08e-6bd5-4d1b-8e43-4aa703655ad3","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.715637Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fc62d7711245c40d73eac48715fe7026796a9c93411fc8cac11e1f8d564606ab","observation_id":"72b56224-1863-4190-b77d-01e59ef57a54","resolution":{"observed_at":"2026-08-10T15:55:08.681147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.667994Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models","venue":null,"work_id":"74f811d0-9562-4f84-88e2-748bedb36b29","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.719816Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fe81c48616b064c654fcedabd814ad60ea07454de091d2b116d4af2a2f3af7e2","observation_id":"e195ba8a-ff4e-4b00-afcc-7d2a978ddea5","resolution":{"observed_at":"2026-08-10T15:55:08.671538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.658594Z","title":"Adversarial attack on attackers: Post-process to mitigate black-box score- based query attacks","venue":null,"work_id":"0801b41d-ccc1-4a3a-b0dd-96c68e44f2b3","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.723737Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:541b1f266a188f09efa047f0ba1274bd03cc59fe726d6cca310f871892060c8c","observation_id":"e43b68db-c105-4b64-b89c-9c00899137ec","resolution":{"observed_at":"2026-08-10T15:55:08.662140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.649282Z","title":"Detection as regression: Certified object detection with median smoothing","venue":null,"work_id":"61b31087-a54e-40ea-9581-86f10eb97502","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.727162Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1134a6b83f5a55cb4a31e820546eb6516384152ac4851c090987589ca5bfb526","observation_id":"5dbdfcee-536d-4685-ab37-720198574b98","resolution":{"observed_at":"2026-08-10T15:55:08.652671Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.06500","last_updated":"2023-06-15T08:00:18Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-05-11T00:38:10Z","title":"InstructBLIP: Towards General-purpose Vision-Language Models with Instruction Tuning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.06500","snapshot_observed_at":"2026-08-10T15:55:07.730406Z","title":"Instructblip: Towards general-purpose vision-language models with instruc- tion tuning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.730406Z"},"links":{"cited_paper":"/paper/2305.06500","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:6fcf8efc4e6f52d409bc6fad5516dd3cd97926a47bacd0ae598540e76ed77a66","observation_id":"bfa5066f-5d8f-4b5a-909b-0a7c1f689c68","resolution":{"observed_at":"2026-08-10T15:55:07.730406Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.639519Z","title":"Deep learning-based autonomous driving systems: A survey of attacks and defenses","venue":null,"work_id":"fb86725f-b56c-4396-89a4-ef0af25a8d7a","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.734163Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:5b640e986141e7c529f1820ee427217e71af21ac1264e89d8b065c61cf54ef9c","observation_id":"228be00e-ee43-4fd6-a235-ece150060882","resolution":{"observed_at":"2026-08-10T15:55:08.643518Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.629590Z","title":"Driverless vehicle security: Challenges and future research opportunities","venue":null,"work_id":"1253d61b-62da-43a3-804e-5784dfa5e5b1","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.737972Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:27ec6d5d8f0beb0ed8827c36d050b427f60b12ec20ac0e398f467137f0203849","observation_id":"48d7bc60-7885-45e9-8cf0-fa3b751178f1","resolution":{"observed_at":"2026-08-10T15:55:08.633185Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.619712Z","title":"Boosting adversar- ial attacks with momentum","venue":null,"work_id":"c4ac0788-ec7c-4171-8da5-55bff2e7114f","year":2018},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.741597Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:01e398d950f39bc31c732e4cbaef3998e43e84ac81e1113a006703d003d5720c","observation_id":"2ae6c8c5-542d-4ba4-b58a-4766749b4bb9","resolution":{"observed_at":"2026-08-10T15:55:08.623264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.609405Z","title":"Carla: An open urban driving simulator","venue":null,"work_id":"88646bf9-8d16-48ee-ac51-df5b34fff135","year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.745101Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:3572e7a5ed5f43453d78cb15bda0e04d0a40fdb88524e94e0d8c67125ee06fe3","observation_id":"6acdcefb-3d01-4adf-85ad-153fe00407b2","resolution":{"observed_at":"2026-08-10T15:55:08.613109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.599162Z","title":"Boosting transferability in vision-language attacks via diversification along the intersection region of adversarial trajectory","venue":null,"work_id":"47861e3b-65b2-4f83-8d54-cd64d82e7dbf","year":2025},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.748320Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:9f0a9a6d91bfea7fb16c0e0cb8d3dfa36a078a3ebef19dcc313fdb627e34c25a","observation_id":"1959681b-4931-4050-ab41-8a28b82fd39b","resolution":{"observed_at":"2026-08-10T15:55:08.602727Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T15:55:07.752017Z","title":"Explaining and harnessing adversarial exam- ples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.752017Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:18d22b29cb96288bd3bc5074a53bb4c708a14274a4bfccccb38f65cde613c8bc","observation_id":"9520b2c6-199c-4116-8691-677df51ca9bf","resolution":{"observed_at":"2026-08-10T15:55:07.752017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-10T15:55:07.755932Z","title":"Countering adversarial im- ages using input transformations","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.755932Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ed6485aa02b1ba21ad9e7ebc27084f31ddb528ab20d30c2eaea1995c6557aa8f","observation_id":"6c4f6275-a817-43af-a58e-4cd2b5ae05dc","resolution":{"observed_at":"2026-08-10T15:55:07.755932Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.589200Z","title":"A comprehensive evaluation frame- work for deep model robustness","venue":null,"work_id":"2102b798-7438-488f-8da4-d71ff6157682","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.759811Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:373abf1087fc972050b27bdf165611ef3edd1c9c0c0198fc79e561040f82358c","observation_id":"88ec32e5-ff0c-4e78-b507-8aa1112e1e15","resolution":{"observed_at":"2026-08-10T15:55:08.592772Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.579116Z","title":"A comprehensive evaluation frame- work for deep model robustness","venue":null,"work_id":"42770b4d-6e1a-48b2-be65-db22934ecd02","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.763317Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:d17a97e770d62cc8d73b0c0436acbae6a3749c9dcad624adbe36331f0a920e60","observation_id":"ab8150bb-9da2-4bf5-bf67-4a69489e9db3","resolution":{"observed_at":"2026-08-10T15:55:08.582887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.568426Z","title":"St-p3: End-to-end vision- based autonomous driving via spatial-temporal feature learning","venue":null,"work_id":"6281c259-0bfa-4d3c-860d-5df9ebd1655d","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.767048Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:b00d5acd45c4d9b658c2dae70ad21c6348d098eea022af37008cdbee1166dd38","observation_id":"08e257ee-875c-4989-8146-5b5c06960123","resolution":{"observed_at":"2026-08-10T15:55:08.571806Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.770734Z","title":"Planning-oriented autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.770734Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:bc530a3a5b7ae68f83de2290321df5698c6807e315848b49bad6c2da47992302","observation_id":"446b0a52-c9b9-4247-bca5-88b4b378a517","resolution":{"observed_at":"2026-08-10T15:55:07.770734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.22313","last_updated":"2024-10-29T17:53:56Z","snapshot_observed_at":"2026-07-31T01:16:26.372370Z","submitted_at":"2024-10-29T17:53:56Z","title":"Senna: Bridging Large Vision-Language Models and End-to-End Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.22313","snapshot_observed_at":"2026-08-10T15:55:07.774232Z","title":"Senna: Bridging large vision-language models and end-to-end autonomous driving","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.774232Z"},"links":{"cited_paper":"/paper/2410.22313","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:90522af5e0debe6ee9c4e5c244994ad5fd5c990941e2eeeae4d965a70b367edd","observation_id":"af98711f-fbc7-4823-9314-80c5ce1df427","resolution":{"observed_at":"2026-08-10T15:55:07.774232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.778242Z","title":"Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.778242Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:aa80ed4dd05e6283e3f68ebeacab46aaec22596f39aacbb8f3a42cc69bdaa083","observation_id":"23db10a4-575c-4373-86f1-b00cc29a9c5f","resolution":{"observed_at":"2026-08-10T15:55:07.778242Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.781576Z","title":"Blip: Bootstrapping language-image pre-training for unified vision-language understanding and generation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.781576Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:9991e38122cfaca45f20c87a66e6a31300308ff7e9890cd00c630055338809ba","observation_id":"388987b8-e2a5-4269-8c9c-d68560866d9c","resolution":{"observed_at":"2026-08-10T15:55:07.781576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.540117Z","title":"Align before fuse: Vision and language representation learning with momentum distillation.NeurIPS, 34:9694– 9705, 2021","venue":null,"work_id":"d75557f6-df5a-4b9a-9eed-b6ce67c9c8af","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.785011Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1019d28c80e927b523a077366f16115ea884cad336959a615d0e1910a3cd806a","observation_id":"8cad2352-2dc0-4105-b7aa-a84f1b54f245","resolution":{"observed_at":"2026-08-10T15:55:08.543638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.11473","last_updated":"2024-02-18T06:31:05Z","snapshot_observed_at":"2026-08-06T02:43:24.834998Z","submitted_at":"2024-02-18T06:31:05Z","title":"Poisoned Forgery Face: Towards Backdoor Attacks on Face Forgery Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.11473","snapshot_observed_at":"2026-08-10T15:55:07.788512Z","title":"Poisoned forgery face: Towards backdoor attacks on face forgery detec- tion","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.788512Z"},"links":{"cited_paper":"/paper/2402.11473","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a9c7842eb599f73bf3909769bd4dc768683a49aea6e603f706b6d1d15af3f4b9","observation_id":"e1da9c02-fd0a-472f-b290-40fe2ac0205a","resolution":{"observed_at":"2026-08-10T15:55:07.788512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.530492Z","title":"A large- scale multiple-objective method for black-box attack against object detection","venue":null,"work_id":"016f9848-e3bc-4d74-9160-4273e99bac14","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.792189Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:8beaa264780f142a6f156df3390b7edd1c33a1b0d94f362664f51c48d2d778d6","observation_id":"122dc8ed-6cf0-40e4-9eb9-75af5f757d57","resolution":{"observed_at":"2026-08-10T15:55:08.533760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.521593Z","title":"Gener- ate more imperceptible adversarial examples for object detection","venue":null,"work_id":"4033e1ab-39fd-4967-a452-b55206dc4127","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.795914Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:14ecdf30ac3c5598943e38a14fee6b86d36bf1fad19c4063972df3f729e49204","observation_id":"63a04fd3-7cc6-4743-996f-66b25bb48083","resolution":{"observed_at":"2026-08-10T15:55:08.524903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.512047Z","title":"Efficient adversarial attacks for visual object track- ing","venue":null,"work_id":"9805df79-062a-483f-b30e-b163260581a0","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.799483Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:b227d4175fcc81c21b3c7e9cafd368f409ceaa46cdfc1a59e517a75b8150270d","observation_id":"0519a552-35f6-4f1b-b6f1-90bfddf6b432","resolution":{"observed_at":"2026-08-10T15:55:08.515659Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2201.08970","last_updated":"2022-01-22T06:00:17Z","snapshot_observed_at":"2026-08-05T14:04:42.818320Z","submitted_at":"2022-01-22T06:00:17Z","title":"Parallel Rectangle Flip Attack: A Query-based Black-box Attack against Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2201.08970","snapshot_observed_at":"2026-08-10T15:55:07.803181Z","title":"Parallel rectangle flip attack: A query-based black-box attack against object detection","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.803181Z"},"links":{"cited_paper":"/paper/2201.08970","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:df942fe6718a90f00efb9986e2a7bfb167ba6b53475a18d297dd18f796baa65a","observation_id":"8f371331-e5bf-4d02-a72b-545efbb8cc52","resolution":{"observed_at":"2026-08-10T15:55:07.803181Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12075","last_updated":"2024-03-04T13:59:22Z","snapshot_observed_at":"2026-08-06T11:06:04.270520Z","submitted_at":"2023-11-20T02:21:49Z","title":"BadCLIP: Dual-Embedding Guided Backdoor Attack on Multimodal Contrastive Learning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12075","snapshot_observed_at":"2026-08-10T15:55:07.807056Z","title":"Badclip: Dual- embedding guided backdoor attack on multimodal con- trastive learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.807056Z"},"links":{"cited_paper":"/paper/2311.12075","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:e1d22692e1a0b2706d96767bee2cc819a15d310a88cdf139598974377a8b362b","observation_id":"4974dc28-a855-4be2-9a49-22a1b3a6d2ca","resolution":{"observed_at":"2026-08-10T15:55:07.807056Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.502667Z","title":"{X-Adv}: Physical adversarial object attacks against x-ray prohibited item detection","venue":null,"work_id":"6daecd4d-89e9-4fd3-a7e1-15f92800fcb3","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.811279Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:2bc08fe592295578c725ccf4a7c4fe19c31f58ffffd4ecb036bb3d79c4264fd0","observation_id":"9e395fd1-084c-4c7b-9cfc-017a4819fa63","resolution":{"observed_at":"2026-08-10T15:55:08.505870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.814916Z","title":"Spatiotemporal attacks for embodied agents","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.814916Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:745237ad9ccf45aade75763def57b38db9e82e41e72537474e38830b7e541892","observation_id":"b2169595-f52b-4dc3-be6a-36b9f27c52d3","resolution":{"observed_at":"2026-08-10T15:55:07.814916Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.487678Z","title":"Perceptual- sensitive gan for generating adversarial patches","venue":null,"work_id":"62825704-ca6a-4e9f-bdcf-f7f0489b464f","year":2019},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.818450Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ad3ff132bc3b9b995ec393a17abf953d0243d94022722ea8c2fdfc9e464397c2","observation_id":"d2d2b3ae-15eb-4e79-9485-18c9dd733d9c","resolution":{"observed_at":"2026-08-10T15:55:08.491582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.478011Z","title":"Training robust deep neural networks via adversarial noise propagation.IEEE TIP, 2021","venue":null,"work_id":"38fc27d1-0fa9-4749-ab9d-a6ceba377777","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.822017Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:c5ecbb828a1d648b49ad5cf683df7e1f18881c608f713e1ce721ef9829a5336b","observation_id":"bc815605-bbf8-408e-87b5-a865c30bd4fa","resolution":{"observed_at":"2026-08-10T15:55:08.481455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.468167Z","title":"Towards defending multiple lp-norm bounded adversarial pertur- bations via gated batch normalization","venue":null,"work_id":"b4fc3227-cc87-4d14-aba9-41e5aa33d561","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.825833Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:c7d22634fa13d418197061cf137b292fe4189718637400790d042290e516628b","observation_id":"eb3acdcf-37a3-4e1b-a02e-8cc22ca99c8e","resolution":{"observed_at":"2026-08-10T15:55:08.471778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.829646Z","title":"Exploring the relationship between architecture and adversarially robust generalization","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.829646Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:68bc8bfbd172bd9fe55167c23985b2c254415bcce1b7d64f3e153b5109f28a75","observation_id":"9190cd26-72fe-42f0-8158-99d3f573f256","resolution":{"observed_at":"2026-08-10T15:55:07.829646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.452302Z","title":"Bias-based universal adversarial patch attack for automatic check-out","venue":null,"work_id":"cff6e52c-e9f2-48bc-9902-67a50fe8282f","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.833368Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fb77376b751409d07b96462da1516037f957f580a4d6afca2d7da1fd661234ec","observation_id":"8b0ed1d0-5b86-4b67-bba7-0952d28ca974","resolution":{"observed_at":"2026-08-10T15:55:08.455813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.837107Z","title":"Visual instruction tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.837107Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:02e1fb734180d6b6e9823e51d968b8d7a651b920843e31191fedcaa8bcaf1cd0","observation_id":"76c6966b-3928-408a-bac8-3125e4bb7e5c","resolution":{"observed_at":"2026-08-10T15:55:07.837107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2311.11017","last_updated":"2023-11-18T09:10:07Z","snapshot_observed_at":"2026-08-07T13:04:48.148655Z","submitted_at":"2023-11-18T09:10:07Z","title":"Improving Adversarial Transferability by Stable Diffusion","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.11017","snapshot_observed_at":"2026-08-10T15:55:07.840809Z","title":"Improving adversarial transferability by stable diffusion","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.840809Z"},"links":{"cited_paper":"/paper/2311.11017","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:7016641af8123287092a5dcf7467a9d53c7db09d3b0b2500063c930b8d2d6c6e","observation_id":"29a51c1b-fc86-4d7a-a8cf-0e7586455398","resolution":{"observed_at":"2026-08-10T15:55:07.840809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:07.844858Z","title":"Harnessing perceptual adversarial patches for crowd counting","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.844858Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:fa8deddb69d35563c39378bdc65a384dd6140209d0e284383df6af636d4c93f7","observation_id":"a5971ab3-fad6-4956-b6f5-f87037d7f4f1","resolution":{"observed_at":"2026-08-10T15:55:07.844858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.433151Z","title":"Set-level guidance attack: Boosting adversarial transferability of vision- language pre-training models","venue":null,"work_id":"45b4c875-71a5-420d-8f14-acae4361d288","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.848606Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:20d6cfcd7c5b1259f15f5975ae605cd8dbd6bcb71de2bb820cdcbd94e895bea4","observation_id":"48e80d84-073f-4d04-abf7-0e60319ee681","resolution":{"observed_at":"2026-08-10T15:55:08.436529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.00438","last_updated":"2023-12-01T09:10:33Z","snapshot_observed_at":"2026-08-10T14:43:54.873284Z","submitted_at":"2023-12-01T09:10:33Z","title":"Dolphins: Multimodal Language Model for Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.00438","snapshot_observed_at":"2026-08-10T15:55:07.852163Z","title":"Dolphins: Multimodal language model for driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.852163Z"},"links":{"cited_paper":"/paper/2312.00438","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:32fa2479666049d28a0e95c8d71fc6aba00e2841ef67d4260da5d5aa3e479684","observation_id":"9999d067-60d3-4ceb-ad95-aa859421de92","resolution":{"observed_at":"2026-08-10T15:55:07.852163Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-10T15:55:07.856480Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.856480Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1593d98591e73f78c857a62f0272f46ecf12b72f9e75b8fa531c5cf1d010edb0","observation_id":"c0dc3f6d-704e-4819-9923-56938e6020e0","resolution":{"observed_at":"2026-08-10T15:55:07.856480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.01415","last_updated":"2023-12-05T05:26:29Z","snapshot_observed_at":"2026-07-06T16:26:38.284922Z","submitted_at":"2023-10-02T17:59:57Z","title":"GPT-Driver: Learning to Drive with GPT","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.01415","snapshot_observed_at":"2026-08-10T15:55:07.860362Z","title":"Gpt-driver: Learning to drive with gpt","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.860362Z"},"links":{"cited_paper":"/paper/2310.01415","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:76b5b850bdc252360564af63154fe2f3f34f8065bc90b5ab975624b51af949e2","observation_id":"5d275c25-fe59-46e7-b68b-7d8149d265b3","resolution":{"observed_at":"2026-08-10T15:55:07.860362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14115","last_updated":"2024-09-26T15:30:00Z","snapshot_observed_at":"2026-08-05T01:20:20.561142Z","submitted_at":"2023-12-21T18:40:34Z","title":"LingoQA: Visual Question Answering for Autonomous Driving","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14115","snapshot_observed_at":"2026-08-10T15:55:07.864225Z","title":"Lingoqa: Video question an- swering for autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.864225Z"},"links":{"cited_paper":"/paper/2312.14115","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1afbcf31eb9cb968a362d566967fdceee73e3bf4879d67ed528d66176ad686d8","observation_id":"9d8d3da1-e395-4cd3-819c-b7bcc2514ac8","resolution":{"observed_at":"2026-08-10T15:55:07.864225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.424088Z","title":"A self-supervised approach for adversarial robustness","venue":null,"work_id":"96b9ce20-badd-4ff1-899c-734ab38434b5","year":2020},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.868361Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:58ca0a1d394f11b03d98e0807978e3ec44eb483bd200127e13c21f5e4699bcde","observation_id":"91dff88f-ac45-423c-9e6c-e3333d464a47","resolution":{"observed_at":"2026-08-10T15:55:08.427693Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03661","last_updated":"2024-07-20T15:59:53Z","snapshot_observed_at":"2026-08-09T00:34:05.232407Z","submitted_at":"2023-12-06T18:32:33Z","title":"Reason2Drive: Towards Interpretable and Chain-based Reasoning for Autonomous Driving","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.03661","snapshot_observed_at":"2026-08-10T15:55:07.871862Z","title":"Reason2drive: Towards interpretable and chain-based reasoning for autonomous driving","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.871862Z"},"links":{"cited_paper":"/paper/2312.03661","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:72548c8666acc0b21961befd32a7377a7fcfd589dea742fe770d80dbca655553","observation_id":"3990462b-aea8-4613-b884-6c3eef060d55","resolution":{"observed_at":"2026-08-10T15:55:07.871862Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.415629Z","title":"Jetbot, 2021","venue":null,"work_id":"ef758962-ca05-4ef1-8a0a-4c41bc7f9fac","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.875732Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:144da34ab51e872ade346efebc1e8bfa6ef75ad18210774a7b8ec0dd12324109","observation_id":"60a7bac4-2806-4e1d-9243-00d702e2c4ee","resolution":{"observed_at":"2026-08-10T15:55:08.418641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.407146Z","title":"Chatgpt, 2023","venue":null,"work_id":"5381309e-1e22-4acb-9e72-6f91b9cc3303","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.879480Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:573d466969c13219a40595332f4e26641a323a7852ad1a8e4aa32583c92bae20","observation_id":"fef55696-9155-4d69-bf5e-7d93e28d9427","resolution":{"observed_at":"2026-08-10T15:55:08.410168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.397564Z","title":"Adaptive adversarial videos on 15 roadside billboards: Dynamically modifying trajectories of autonomous vehicles","venue":null,"work_id":"fcd03086-b5c0-49ee-aac3-fbc335adf2cc","year":2019},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.883254Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:1d5204d2e6b015b361b8b81bdc7e4a36e7740f66e405628f30a912bc0b5ffc6e","observation_id":"952a5195-3e98-4a77-bdfa-16cee2c240cf","resolution":{"observed_at":"2026-08-10T15:55:08.400901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.388285Z","title":"Learning transferable visual models from natural lan- guage supervision","venue":null,"work_id":"f78f3b53-e53d-48d8-b1c0-f65bd170a5bd","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.887224Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:2d186ea0be304fa95dc392a46391210aadd4f980e949670b28adc98500ef8735","observation_id":"f0e3548f-c313-4ce4-9e91-5112c04c9492","resolution":{"observed_at":"2026-08-10T15:55:08.391882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.378872Z","title":"Limo, 2021","venue":null,"work_id":"1db2bb90-f04e-4812-9836-ac4d2afd6463","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.890812Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:67adf305918dc271364d56cc20217c788fa980c2ace79396e7dfa997bd5d6e6d","observation_id":"2ec1842f-6203-4c39-8bcd-514633aa81fc","resolution":{"observed_at":"2026-08-10T15:55:08.382114Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.369029Z","title":"Dirty road can attack: Security of deep learning based automated lane center- ing under {Physical-World} attack","venue":null,"work_id":"716d2287-999f-4ab7-8ac3-4a3dbb7d81af","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.894387Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:92d7f089261769d0f897041aec5633051dcaf6913cfde09021a818163b71845c","observation_id":"0eb8e327-4774-4b47-b266-7b607c8c38b3","resolution":{"observed_at":"2026-08-10T15:55:08.372582Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.359683Z","title":"Lm- drive: Closed-loop end-to-end driving with large lan- guage models","venue":null,"work_id":"47557be2-b94e-48d8-9288-b69585e30dfc","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.898266Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a6cd2e57a8eabecdb168a34f2e188067b825f95f16e46ff9a9a600be77280495","observation_id":"78fa2458-9e59-424e-80f5-464abfebb9cc","resolution":{"observed_at":"2026-08-10T15:55:08.363183Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.14150","last_updated":"2025-01-16T10:57:44Z","snapshot_observed_at":"2026-08-10T19:14:31.295716Z","submitted_at":"2023-12-21T18:59:12Z","title":"DriveLM: Driving with Graph Visual Question Answering","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.14150","snapshot_observed_at":"2026-08-10T15:55:07.901795Z","title":"Drivelm: Driving with graph visual question answering","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.901795Z"},"links":{"cited_paper":"/paper/2312.14150","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:2b1846d7a5f077cb8c19560218e50ecbdb366f7cfc554d833b1c8a65e05a6b38","observation_id":"3e083219-b9c8-45a8-a73b-6e47469bc84a","resolution":{"observed_at":"2026-08-10T15:55:07.901795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-10T15:55:07.905766Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.905766Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:56e8e14abc9ab9a73ef259cecf6442c49a525225e67d593c439ea3acdbc3483f","observation_id":"74ba45f5-8ffa-4a58-9a17-fa47ce378122","resolution":{"observed_at":"2026-08-10T15:55:07.905766Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.350259Z","title":"Robustart: Benchmarking ro- bustness on architecture design and training techniques","venue":null,"work_id":"ddd36b51-8a1c-4174-8dee-7197be6fee90","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.909758Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:da4b4e439a5d555d1f1beeb99e4946a29cddffbc772e2b49e199c21d9c4594b4","observation_id":"711ff9f1-3de0-4e76-a139-8d5acf63fe35","resolution":{"observed_at":"2026-08-10T15:55:08.354013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.341304Z","title":"Carla autonomous driving leaderboard.,","venue":null,"work_id":"d18744af-2a0c-4445-ae06-fd8afde9261e","year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.913574Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:51952b042f2abc025c78e89b922e0b0911662ffc2a4923f516459b3d1a4ef1d3","observation_id":"4e8ae261-6345-4618-a3ab-5e6a5e66eaba","resolution":{"observed_at":"2026-08-10T15:55:08.344552Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.12289","last_updated":"2024-06-25T17:55:35Z","snapshot_observed_at":"2026-08-10T03:38:23.239399Z","submitted_at":"2024-02-19T17:04:04Z","title":"DriveVLM: The Convergence of Autonomous Driving and Large Vision-Language Models","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.12289","snapshot_observed_at":"2026-08-10T15:55:07.922093Z","title":"Drivevlm: The convergence of autonomous driving and large vision-language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.922093Z"},"links":{"cited_paper":"/paper/2402.12289","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:ad3683e44e4533fc59efe9cd163b8b8f202b47ebd2d28d875d4a953bde7b5a82","observation_id":"f7db3976-61a2-437e-8020-387d1513065a","resolution":{"observed_at":"2026-08-10T15:55:07.922093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-08-10T15:55:07.926296Z","title":"Llama: Open and efficient foundation language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.926296Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:57126be140f6df90b5d70fca4b8b2983320fa58e03c4e018f43236f567b97280","observation_id":"0623bbef-69ce-460d-8afa-7c9744cd505e","resolution":{"observed_at":"2026-08-10T15:55:07.926296Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.322353Z","title":"Transferable multimodal attack on vision-language pre- training models","venue":null,"work_id":"2a670d77-832e-48d8-84d6-090f2455db81","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.930007Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:f3684f0805e674c5502337470cdc233d319758ef79b0b6319c353227bce78a65","observation_id":"17ed0d44-4289-4c60-b55c-ec3f03b83d6b","resolution":{"observed_at":"2026-08-10T15:55:08.325788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.312594Z","title":"Dual attention suppres- sion attack: Generate adversarial camouflage in physical world","venue":null,"work_id":"b8d82efc-d473-4d99-8f90-fd4352db9c72","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.933857Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:a0bfa3477c0f782c1fdb35f5e17333b48e8a6b6654c7001eb20a0096d8f454af","observation_id":"33e4cad2-684f-4527-bdff-8a5722965940","resolution":{"observed_at":"2026-08-10T15:55:08.316054Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10136","last_updated":"2023-09-15T02:14:34Z","snapshot_observed_at":"2026-07-06T15:17:48.587665Z","submitted_at":"2023-04-20T07:44:59Z","title":"Diversifying the High-level Features for better Adversarial Transferability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10136","snapshot_observed_at":"2026-08-10T15:55:07.937330Z","title":"Diversifying the high-level features for better adversarial transferability","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.937330Z"},"links":{"cited_paper":"/paper/2304.10136","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:72b10a2216fabdba6003f7787d0933d8c0bfa284864d169f28812f8020153668","observation_id":"8520eb34-ca97-42d2-ac8b-24281697b944","resolution":{"observed_at":"2026-08-10T15:55:07.937330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1811.12641","last_updated":"2019-05-13T07:22:16Z","snapshot_observed_at":"2026-07-06T07:18:09.568026Z","submitted_at":"2018-11-30T06:55:22Z","title":"Transferable Adversarial Attacks for Image and Video Object Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1811.12641","snapshot_observed_at":"2026-08-10T15:55:07.941193Z","title":"Transferable adversarial attacks for image and video object detection","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.941193Z"},"links":{"cited_paper":"/paper/1811.12641","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:92f685d299c8bb85a888cf9e0fe2b4240a6505bd09db4653b6bfc3d25d74e20f","observation_id":"e16cd594-65a8-4991-a135-8c90081a970e","resolution":{"observed_at":"2026-08-10T15:55:07.941193Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1704.01155","last_updated":"2017-12-05T23:45:08Z","snapshot_observed_at":"2026-07-06T05:36:32.792127Z","submitted_at":"2017-04-04T18:56:53Z","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.01155","snapshot_observed_at":"2026-08-10T15:55:07.944996Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.944996Z"},"links":{"cited_paper":"/paper/1704.01155","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:00ee86909c7b6bba469d111fff40dd3707e5856cb92aa323b804fae5fc919e0b","observation_id":"ca47a575-6139-4011-a86c-cc76772f1d48","resolution":{"observed_at":"2026-08-10T15:55:07.944996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.302869Z","title":"Drivegpt4: Interpretable end-to-end autonomous driving via large language model","venue":null,"work_id":"d5db6f22-7ac3-4c3d-be4d-a5335bd3fb85","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.949651Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:146a0ec95db798af7465c41e09ca2465689c29e455fd40a77ad1a1c052dba1be","observation_id":"5042f3a5-0cc7-4215-af9e-5cfe52509bc6","resolution":{"observed_at":"2026-08-10T15:55:08.306737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.292386Z","title":"Vlattack: Multimodal adversarial attacks on vision-language tasks via pre-trained models","venue":null,"work_id":"425e5273-5eb0-4a63-b093-1f0de148548b","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.953066Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:14b292968817fa9ac02f0cb945750bd543ef53533f5fd558a00ffac8d882f2e7","observation_id":"896b5aa8-bf0e-47cd-963b-b1de79bd22c0","resolution":{"observed_at":"2026-08-10T15:55:08.296105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.01917","last_updated":"2022-06-14T00:48:04Z","snapshot_observed_at":"2026-08-10T15:05:25.558818Z","submitted_at":"2022-05-04T07:01:14Z","title":"CoCa: Contrastive Captioners are Image-Text Foundation Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.01917","snapshot_observed_at":"2026-08-10T15:55:07.956544Z","title":"Coca: Con- trastive captioners are image-text foundation models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.956544Z"},"links":{"cited_paper":"/paper/2205.01917","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:3c142cc926cabf6581d8f1da45147c0892617669b2feb18aaf355f725496a70b","observation_id":"b0ef4525-5d20-4cfc-8388-7223b45b464b","resolution":{"observed_at":"2026-08-10T15:55:07.956544Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.282216Z","title":"Interpreting and improving adversarial robustness of deep neural net- works with neuron sensitivity","venue":null,"work_id":"81fb9e51-813d-458e-b49e-87430ff37d2d","year":2021},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.960236Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:5afb1f00d3b1dccddb398308cb0e9cdbbb522f796429e451e3239fc481e7b2a9","observation_id":"749c5739-a25c-4d9a-b2b7-a401af56ef5d","resolution":{"observed_at":"2026-08-10T15:55:08.285722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.05346","last_updated":"2025-03-28T02:55:23Z","snapshot_observed_at":"2026-08-09T22:03:41.572623Z","submitted_at":"2024-10-07T09:45:18Z","title":"AnyAttack: Towards Large-scale Self-supervised Adversarial Attacks on Vision-language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.05346","snapshot_observed_at":"2026-08-10T15:55:07.963512Z","title":"Anyattack: Towards large-scale self-supervised generation of tar- geted adversarial examples for vision-language models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.963512Z"},"links":{"cited_paper":"/paper/2410.05346","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:40e96ad2b2b2dc4a8ce41684a17823fb8d6e123748cbd5171586b8c7797ad475","observation_id":"551fc15f-bbc7-43ac-8633-fd17060ac177","resolution":{"observed_at":"2026-08-10T15:55:07.963512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.272121Z","title":"Towards adver- sarial attack on vision-language pre-training models","venue":null,"work_id":"4f118a57-d50c-4990-84ef-f6000e8e1c91","year":2022},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.967562Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:298f2a5275b3a437737ed3e8ea931e262fa03e4c1b78a562b4513cb7062f829a","observation_id":"5de9e521-3937-498d-8f95-d9ee82e1766a","resolution":{"observed_at":"2026-08-10T15:55:08.275714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2409.07321","last_updated":"2024-09-11T15:00:18Z","snapshot_observed_at":"2026-07-06T19:13:46.489307Z","submitted_at":"2024-09-11T15:00:18Z","title":"Module-wise Adaptive Adversarial Training for End-to-end Autonomous Driving","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.07321","snapshot_observed_at":"2026-08-10T15:55:07.971153Z","title":"Module-wise adaptive adversarial training for end-to-end autonomous driving","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.971153Z"},"links":{"cited_paper":"/paper/2409.07321","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:eec246ef11af061a54d02ba5d9561825ee9fbeb4ba80213294adb89219658da7","observation_id":"e50a104b-5689-4d74-bfd7-5c032227d206","resolution":{"observed_at":"2026-08-10T15:55:07.971153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.261678Z","title":"Lanevil: Benchmarking the robustness of lane detection to environmental illusions","venue":null,"work_id":"b0dadb85-5ced-4a27-90c1-ce729f76a2f6","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.974779Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:879c378dd7008bbe58f29f7b614ce4ba3a6a735d7467cbf376c6f31e4a58849e","observation_id":"dc8366ce-9095-4ad6-9dd6-a14f9854c545","resolution":{"observed_at":"2026-08-10T15:55:08.265691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2411.18275","last_updated":"2026-04-21T10:31:24Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2024-11-27T12:09:43Z","title":"Visual Adversarial Attack on Vision-Language Models for Autonomous Driving","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2411.18275","snapshot_observed_at":"2026-08-10T15:55:07.978515Z","title":"Visual adversar- ial attack on vision-language models for autonomous driving","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.978515Z"},"links":{"cited_paper":"/paper/2411.18275","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:75f2c58b564f725765743456029a0aa946b287bb1c04fca85216276ca5814cff","observation_id":"bcf9bf43-b77a-48ee-8668-12d23549705e","resolution":{"observed_at":"2026-08-10T15:55:07.978515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.251591Z","title":"On evaluating adversarial robustness of large vision- language models","venue":null,"work_id":"6afaa4a1-8ac3-4a21-9e8f-4e8be2f05284","year":2024},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.982246Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:f3b7db7ecc8271f4f02f22377e2781feb356f161fbd6b5c1526bbc4d32898d4b","observation_id":"3585a7d5-75b7-4620-b1e6-68630b0bf73b","resolution":{"observed_at":"2026-08-10T15:55:08.255104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.238817Z","title":"Advclip: Downstream- agnostic adversarial examples in multimodal contrastive learning","venue":null,"work_id":"695cf6b2-ee8b-41b7-b489-af6e34468e95","year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.985803Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:3e58534cdf12ce8a9a39e185a93e94de6462e66a938051fb6322d8393f419647","observation_id":"3e351456-b2b2-4cab-9a6d-74c54edca875","resolution":{"observed_at":"2026-08-10T15:55:08.244091Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.10592","last_updated":"2023-10-02T16:38:35Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-04-20T18:25:35Z","title":"MiniGPT-4: Enhancing Vision-Language Understanding with Advanced Large Language Models","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.10592","snapshot_observed_at":"2026-08-10T15:55:07.989455Z","title":"Minigpt-4: Enhancing vision- language understanding with advanced large language models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.989455Z"},"links":{"cited_paper":"/paper/2304.10592","citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:53817e2cf670dc8de50c317e00225325d01946fc36b9853da2074918653221db","observation_id":"bbc7a042-2ede-49d2-841a-397887c0eeb2","resolution":{"observed_at":"2026-08-10T15:55:07.989455Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T15:55:08.332072Z","title":null,"venue":null,"work_id":"121483b0-03ce-4379-872d-dba2236e01c1","year":null},"citing_paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-10T15:55:07.917782Z"},"links":{"citing_paper":"/paper/2501.13563"},"observation_digest":"sha256:7e195a9c6276c4ca39101679dad5c18ee6215b1882eabba20b0ed0aa9d4766db","observation_id":"fe308bde-4a34-44da-a885-d43d0db358b9","resolution":{"observed_at":"2026-08-10T15:55:08.335315Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.13563","last_updated":"2025-01-23T11:10:02Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T15:47:23.054028Z","submitted_at":"2025-01-23T11:10:02Z","title":"Black-Box Adversarial Attack on Vision Language Models for Autonomous Driving"},"reference_resolution":{"displayed":78,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":34,"verified_exact":0,"verified_fuzzy":44},"total_outbound_references":78},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 11 August 2026, this Paper Citation Record lists 78 of 78 outbound references and 9 inbound Pith citation observations for arXiv:2501.13563."}