{"as_of":"2026-08-10T07:57:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:58c0864ca7cf51dd940f0b2ed36734c966a35034681208394cf5d6dfd99f4f8e","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T15:57:24.475857Z","state":"measured"},{"denominator":60,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":60,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.01262/citation-record","integrity":"/paper/2502.01262/integrity","json":"/paper/2502.01262/citation-record.json","paper":"/paper/2502.01262"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.450308Z","title":"Cospgd: an efficient white-box adversarial attack for pixel-wise prediction tasks","venue":null,"work_id":"c65b94f4-4ae3-4a60-95e1-4fcc5690f86c","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.194573Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7b117fbc742b9963a918c45604607ea020d547649fa1b5fb27cc1fdae91b2d3d","observation_id":"7a21fb2b-6fe1-4bea-9728-9efd6f4a85e8","resolution":{"observed_at":"2026-08-09T15:57:25.455133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.435655Z","title":"Understanding and improving fast adversarial training","venue":null,"work_id":"5e9b83ab-7420-4d32-83d5-b7fb0cb7dd54","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.200458Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:178807e0e9ce1d5000f6775cf89eb70cdbe2191487eee0682cf923fa304986a5","observation_id":"27543e4b-3d8b-48be-853d-766fc41f1f12","resolution":{"observed_at":"2026-08-09T15:57:25.440479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.420157Z","title":"On the robustness of semantic segmentation models to adversarial attacks","venue":null,"work_id":"a89f1384-3dc4-4db4-80cb-a154eb2e2665","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.205755Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:8d1ccac621551c54cac031712476424ab213b05dac60417ef881a9407660e62a","observation_id":"ea8425da-aab9-4cbf-9be2-162e99cba728","resolution":{"observed_at":"2026-08-09T15:57:25.424946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.405011Z","title":"An adaptive model ensemble adversarial attack for boosting adversarial transferability","venue":null,"work_id":"fce4791d-d2e5-42ed-b3cd-f81aa28e1568","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.210994Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:a80b311c9bf8c9d1dd3494e474f8c83ed35b2cdacf6e3802d4c8c19f10aa43f7","observation_id":"004063b8-66c1-4f32-b0c3-73d0834922b4","resolution":{"observed_at":"2026-08-09T15:57:25.409953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.09105","last_updated":"2024-03-04T11:30:06Z","snapshot_observed_at":"2026-08-07T09:14:57.287507Z","submitted_at":"2023-03-16T06:37:16Z","title":"Rethinking Model Ensemble in Transfer-based Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.09105","snapshot_observed_at":"2026-08-09T15:57:24.216566Z","title":"Rethinking model ensemble in transfer-based adversarial attacks","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.216566Z"},"links":{"cited_paper":"/paper/2303.09105","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:0c256bf7834b2897fa5209b39aac5f9b3907485270de1d9dc13fc84b1e3feafa","observation_id":"ae5528c5-2f1c-4115-9605-213bd1895ed4","resolution":{"observed_at":"2026-08-09T15:57:24.216566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.05587","last_updated":"2017-12-05T18:06:21Z","snapshot_observed_at":"2026-08-07T13:44:53.690521Z","submitted_at":"2017-06-17T22:48:57Z","title":"Rethinking Atrous Convolution for Semantic Image Segmentation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.05587","snapshot_observed_at":"2026-08-09T15:57:24.221864Z","title":"Rethinking atrous convolution for semantic image segmentation","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.221864Z"},"links":{"cited_paper":"/paper/1706.05587","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b0d6497392d9f1faccc21f52028206bcd2d193ed5f6af342a52bb4f8ac31b3f9","observation_id":"fdbae40d-ce04-44d4-ba28-8aa84f122fee","resolution":{"observed_at":"2026-08-09T15:57:24.221864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.389757Z","title":"Encoder-decoder with atrous separable convolution for semantic image segmentation","venue":null,"work_id":"332cd862-f76c-4248-90ea-45e25e26bd55","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.227614Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:94829673725929e9eacc7e4f2044058dc795205e8d5a2557fcbd2770a5adb2da","observation_id":"5acda7bb-21f0-40e5-ba04-49f39bf26225","resolution":{"observed_at":"2026-08-09T15:57:25.394903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.374799Z","title":"Masked-attention mask transformer for universal image segmentation","venue":null,"work_id":"ee3fd970-6810-411f-8bf2-c541f32221e5","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.232258Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:41c499803173d1c079e5ba80db843e0f3f6f70fd8a2f34d1ccdebc2357822024","observation_id":"09444564-b4e3-44c6-9b8d-4acd05c22639","resolution":{"observed_at":"2026-08-09T15:57:25.379450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.359986Z","title":"The cityscapes dataset for semantic urban scene understanding","venue":null,"work_id":"920a0642-0506-49b7-9619-dfde52953771","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.236941Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f01f20ecceb278af1c8dfa05141f4571bfcfcee16a8be792d4e6e72fc4e4a4c0","observation_id":"c5e5e93b-b13c-4b43-b0d8-892a01ae5caf","resolution":{"observed_at":"2026-08-09T15:57:25.364728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.344560Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"3b499c49-8c1e-42c4-9a27-8c4e06068937","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.241724Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b4140902fd7aa1c3bbb19e5975371940ea1683b41f06017c1a4f9b398b110a5c","observation_id":"138c10e2-e74c-48b9-8c0f-b16ad28b5c76","resolution":{"observed_at":"2026-08-09T15:57:25.349448Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.329286Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks","venue":null,"work_id":"fb8465a1-3bf9-4b28-a885-fd01277ef5d1","year":2019},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.246547Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:eaca9961c23ba4f80c3592028b533895ce038f5d179288ca21889b56fa6210c8","observation_id":"7aff01b0-150e-4780-9184-851528d6673b","resolution":{"observed_at":"2026-08-09T15:57:25.334307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.315032Z","title":"Everingham, L","venue":null,"work_id":"d34881bf-77a4-4b9e-bbb2-6b21846acb7d","year":2012},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.251724Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:94ca44f99b1d005ef88a0ad53faf0224587afffb8c37d5ca6dd580efaa58543b","observation_id":"bf095d7c-348c-4d80-8ce2-623443ea0768","resolution":{"observed_at":"2026-08-09T15:57:25.319455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.300180Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"179711ac-6262-4c46-9ecb-09226e848903","year":2018},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.256472Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:4258cd906d981af6eae932e2160fefa16c396d1a73d2c305327e11aa4fc48bee","observation_id":"3a2843c6-2fc1-4966-a69f-613319a58881","resolution":{"observed_at":"2026-08-09T15:57:25.304855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.286166Z","title":"Generative adversarial networks","venue":null,"work_id":"8decd2a8-6e63-4f46-8507-3ee759a13620","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.261076Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:65380585316f213f4811c5355c20339b2d9d00d0c7cfad55a7926e773d1fb76a","observation_id":"a087d409-994a-4a39-95a7-98f28e0388b1","resolution":{"observed_at":"2026-08-09T15:57:25.290584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-09T15:57:24.265693Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.265693Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:3dc5cb977bbc6e438063a04402d6e0e95dd9df4172a2dfd41b2ab1d1b2f169b8","observation_id":"0eb70d03-6293-4272-950a-1cd065124f1d","resolution":{"observed_at":"2026-08-09T15:57:24.265693Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.10055","last_updated":"2021-02-19T17:35:07Z","snapshot_observed_at":"2026-07-06T10:42:55.841749Z","submitted_at":"2021-02-19T17:35:07Z","title":"Effective and Efficient Vote Attack on Capsule Networks","version":1},"cited_work":{"arxiv_id":"2102.10055","doi":null,"metadata_source":"pith","pith_arxiv_id":"2102.10055","snapshot_observed_at":"2026-08-09T15:57:24.693764Z","title":"Effective and Efficient Vote Attack on Capsule Networks","venue":"cs.CV","work_id":"045c2675-0173-4779-9390-58c15b09caae","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.270638Z"},"links":{"cited_paper":"/paper/2102.10055","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:c2c40154d464d798b01ba85c939b124c218c1d3b974df0c42a820bf033827478","observation_id":"b8451284-809e-4e4b-879f-a367d630ed32","resolution":{"observed_at":"2026-08-09T15:57:24.698533Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.271615Z","title":"Segpgd: An effective and efficient adversarial attack for evaluating and boosting segmentation robustness","venue":null,"work_id":"5b7df8b4-5afb-44b7-9e12-9714ed0a830f","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.275577Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:bf7369b49e6f708170fcb7f22e781e02d51d945aa7ec83f8ad0fae3598d4d5d8","observation_id":"1eba4e5d-1ddc-42ef-ad72-6e4e4cde825f","resolution":{"observed_at":"2026-08-09T15:57:25.276625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.256569Z","title":"Lgv: Boosting adversarial example transferability from large geometric vicinity","venue":null,"work_id":"ef4a91e0-0eaa-45da-a824-eb5f93fe8dd1","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.280133Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f93fe92a5bb093680ae67d457af92cd3fa048506de1ff0af9cfc4dabaa5cd07c","observation_id":"da617a6d-3276-46f6-9631-a6366c3b89f6","resolution":{"observed_at":"2026-08-09T15:57:25.261328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.241543Z","title":"Backpropagating linearly improves transferability of adversarial examples","venue":null,"work_id":"23f1b6e4-d7d3-4961-bc6f-8bf819d2b014","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.284750Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:81e00c13cff3661b80f601f9620e313659b74e9b9c3d19d26e3f884529ebd1e8","observation_id":"9a18f822-151c-4105-89c4-811e562e3fea","resolution":{"observed_at":"2026-08-09T15:57:25.246362Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.226498Z","title":"Hypercolumns for object segmentation and fine-grained localization","venue":null,"work_id":"76f332a8-d16d-4e2e-91e4-1476f5b1341e","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.289471Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:fc432f62d2fab3cdb71f67afd6cca5e7113426bb57372c07e7c0ad3d5bef094f","observation_id":"ae62850d-1e94-4b55-b1bc-22dd98c39d5a","resolution":{"observed_at":"2026-08-09T15:57:25.231365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.210526Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"015361a7-d9b4-411e-9e37-ec485c865534","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.294071Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:edc629d106d2dbc123612aa599281fe641cfe153b115ebba5dc2109e902ac6bb","observation_id":"0e5e983e-3ef6-4030-bcdd-2670ba112ce2","resolution":{"observed_at":"2026-08-09T15:57:25.215554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.16572","last_updated":"2023-08-21T11:05:22Z","snapshot_observed_at":"2026-08-07T06:23:43.735184Z","submitted_at":"2023-07-31T11:05:55Z","title":"Transferable Attack for Semantic Segmentation","version":2},"cited_work":{"arxiv_id":"2307.16572","doi":null,"metadata_source":"pith","pith_arxiv_id":"2307.16572","snapshot_observed_at":"2026-08-09T15:57:24.672231Z","title":"Transferable Attack for Semantic Segmentation","venue":"cs.CV","work_id":"775d2bb3-25ba-4e65-a282-e2b965883fe0","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.298590Z"},"links":{"cited_paper":"/paper/2307.16572","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:00cc10a8c96cb0a84d8f5efaef7dc2c806fc3cacd9bed3d187d6ca3e4a32372f","observation_id":"59b1ced0-7572-41f5-a59d-1b57a9503d49","resolution":{"observed_at":"2026-08-09T15:57:24.677433Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.195487Z","title":"Densely connected convolutional networks","venue":null,"work_id":"2fd0784c-0fb2-4da9-8cda-55e46b1551b5","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.303636Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:09c43737cf4ba460ef75d7715bfb6fb0848a345b750125bd526888443892eb5b","observation_id":"7e05b20f-87b3-49b2-94ea-f3ae95678942","resolution":{"observed_at":"2026-08-09T15:57:25.200152Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.180342Z","title":"T-sea: Transfer-based self-ensemble attack on object detection","venue":null,"work_id":"4a1fbdfa-1eaf-47da-b185-eadf23eec6d3","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.308373Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:113f71f104ee0356ec527329132bb6adbba3dd6fab70f8f36413bc5e42a03928","observation_id":"807dbbbd-cef2-4dc8-a9d8-15a864d8e031","resolution":{"observed_at":"2026-08-09T15:57:25.185203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.165573Z","title":"Enhancing adversarial example transferability with an intermediate level attack","venue":null,"work_id":"c8b39ce4-cc20-42a5-b0bd-81997e372fc6","year":null},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.312894Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2f84e5435d2a57eaec73a7aadd604b534ec1bc47f32ffc160a6be26f19ffb771","observation_id":"e5b6e078-24bb-4f4f-a9b9-2772f824cf22","resolution":{"observed_at":"2026-08-09T15:57:25.170358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.02207","last_updated":"2023-12-03T00:48:33Z","snapshot_observed_at":"2026-07-06T16:56:49.877351Z","submitted_at":"2023-12-03T00:48:33Z","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","version":1},"cited_work":{"arxiv_id":"2312.02207","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.02207","snapshot_observed_at":"2026-08-09T15:57:24.649960Z","title":"TranSegPGD: Improving Transferability of Adversarial Examples on Semantic Segmentation","venue":"cs.CV","work_id":"ddccdd21-3410-4539-955e-fa7ec5c09f08","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.317785Z"},"links":{"cited_paper":"/paper/2312.02207","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7a2d57866f0a64d179d6b1e83527145a871d48e62c8e91cf4f881d83b3f3e298","observation_id":"aa92fb1d-0047-4902-a9c5-335d9354b9dc","resolution":{"observed_at":"2026-08-09T15:57:24.655125Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.150025Z","title":"Pearl: Preprocessing enhanced adversarial robust learning of image deraining for semantic segmentation","venue":null,"work_id":"c0fe32ad-84dc-4c31-be23-0880dde53c80","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.322585Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:2dfce1b9ee3abcbddcd523f09924cb8b811ef2a5d5d6f489b595f635bca6523c","observation_id":"47131abe-0990-45aa-b6bc-cd298c9af962","resolution":{"observed_at":"2026-08-09T15:57:25.155217Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.135283Z","title":"Yet another intermediate-level attack","venue":null,"work_id":"043b185a-3dfd-4327-9166-61a9a2ed57d6","year":2020},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.327440Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7997dbeea6f01a8fea61b78fdd921e90fe2f6a7ac61c45211a478f04ac5eecf6","observation_id":"2bc4675d-562b-40bb-aa04-d0e5f792246d","resolution":{"observed_at":"2026-08-09T15:57:25.139975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.119575Z","title":"Making substitute models more bayesian can enhance transferability of adversarial examples","venue":null,"work_id":"3459bdd8-5a19-493d-8d96-1fccf4fe79a4","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.332431Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:0429062d007705dcc168ffbc578451300632933ee01bc4cd3319367330b33ab0","observation_id":"5236ef05-d920-403d-84ed-e061f9c2d451","resolution":{"observed_at":"2026-08-09T15:57:25.124725Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.103733Z","title":"Improving adversarial transferability via intermediate-level perturbation decay","venue":null,"work_id":"bfa12f42-23fb-4a5b-a38b-3b7fe709770f","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.337005Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b4192aa778e682eb97dbee8b311f6b3d7137c9d9f26e0b2819c44e768f0b1621","observation_id":"d5b99d26-9293-4c03-8cb8-7b0b1e28207c","resolution":{"observed_at":"2026-08-09T15:57:25.108599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.088408Z","title":"Styless: boosting the transferability of adversarial examples","venue":null,"work_id":"4fb4be6e-1fcf-492c-bb34-5c245e8b32dd","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.341470Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:5e1845ac53aee0cac7e98fe28df4f6d9bf00c6f4c6bebf2be0b617fd43bceb90","observation_id":"9587e7f4-86f1-4b80-a2a6-3d48826f4e88","resolution":{"observed_at":"2026-08-09T15:57:25.093212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-07-06T08:14:59.387021Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-09T15:57:24.346108Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.346108Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:7411b2edb866dbbad46c10cd6ef1a7ef882370c4bb137aacc43821cd18d4d250","observation_id":"bc606a3d-3acb-4a2e-96ac-28948d9e4aee","resolution":{"observed_at":"2026-08-09T15:57:24.346108Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.072550Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"2a9c3246-c2e0-46d5-8fbd-860ab8a5d3ed","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.350971Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:42021e0cfcaf09a08e94435c1b9117625231f0e0c0b4d1732f8a0460fa6d5640","observation_id":"4c4977b3-8e23-4d96-870f-5ccdf14b4eab","resolution":{"observed_at":"2026-08-09T15:57:25.077774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.056264Z","title":"Fully convolutional networks for semantic segmentation","venue":null,"work_id":"4f36e925-f718-4bb7-bbaf-206a701be1e9","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.355431Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:904dba11b27ab15603e7d63f785ca59fbe507dd7f99671e506fb1be204d63390","observation_id":"1e67d0c3-9c90-4fe2-9b0a-38b4666ec747","resolution":{"observed_at":"2026-08-09T15:57:25.061064Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.041075Z","title":"On the convergence of an adaptive momentum method for adversarial attacks","venue":null,"work_id":"bfa7a73c-1d37-4dd9-a1b8-6bf4d7b646ad","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.359893Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:9495b36e12186bd8279f97a75d135636f93779ac28fe725be0be96ae0a16e01a","observation_id":"27faa0a1-59bb-41bc-9ae9-86e04a4b65e2","resolution":{"observed_at":"2026-08-09T15:57:25.046047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.025790Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"b5d9ad88-27b5-4b04-8a9a-0a52a0e83e6a","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.364461Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:20c9ca8f2f000b3e37d626a6280b7030ac7c67ebedaeb4b1888331415687ad38","observation_id":"2d744001-abb5-4dbe-9b40-b6cbf5f86702","resolution":{"observed_at":"2026-08-09T15:57:25.030864Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:25.010411Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"53d63d27-91a0-452c-aef3-0b2b0ec3f960","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.368959Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f87d15fe6c3ef4609e3f42576828c371143513ee4f6d804e7eeeeac928376e7e","observation_id":"3b3814fa-fee4-460d-9d13-ce8a513f3461","resolution":{"observed_at":"2026-08-09T15:57:25.015415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.03946","last_updated":"2024-11-26T15:17:46Z","snapshot_observed_at":"2026-07-06T18:41:35.995594Z","submitted_at":"2024-07-04T14:02:12Z","title":"TrackPGD: Efficient Adversarial Attack using Object Binary Masks against Robust Transformer Trackers","version":2},"cited_work":{"arxiv_id":"2407.03946","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.03946","snapshot_observed_at":"2026-08-09T15:57:24.612637Z","title":"TrackPGD: Efficient Adversarial Attack using Object Binary Masks against Robust Transformer Trackers","venue":"cs.CV","work_id":"1e439206-1f13-4346-974e-0de4b11724e8","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.373541Z"},"links":{"cited_paper":"/paper/2407.03946","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b14a01476f2e39bad28855d7e65ae77181b0819112ebb5cc106c8c18a944d86b","observation_id":"05e96a04-603f-4f02-ab4b-17b5748f7678","resolution":{"observed_at":"2026-08-09T15:57:24.617686Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.995032Z","title":"A novel generator with auxiliary branch for improving gan performance","venue":null,"work_id":"a72bb993-9b7a-41bc-b10c-b91815f933ef","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.378470Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d95721f13f70ed97c0117493b99829be86ae795ab7254723ec65382af9a36631","observation_id":"84615665-ed08-4c79-a796-84470ec5695c","resolution":{"observed_at":"2026-08-09T15:57:24.999917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.05527","last_updated":"2024-07-08T00:21:17Z","snapshot_observed_at":"2026-07-06T18:42:43.011995Z","submitted_at":"2024-07-08T00:21:17Z","title":"Rethinking Image Skip Connections in StyleGAN2","version":1},"cited_work":{"arxiv_id":"2407.05527","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.05527","snapshot_observed_at":"2026-08-09T15:57:24.590982Z","title":"Rethinking Image Skip Connections in StyleGAN2","venue":"cs.CV","work_id":"95d074b8-b0fe-4057-bc8f-32acb6ee8b2e","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.382999Z"},"links":{"cited_paper":"/paper/2407.05527","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b843aeb1a6443c63e9f2fb7b9f82148e4087a6ef4f9ceef53d11e4115ba48436","observation_id":"498c8f08-6dc7-411a-9340-8513cdfbde2e","resolution":{"observed_at":"2026-08-09T15:57:24.596083Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.387743Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.387743Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d02ba7c4806ab3f910135882d1d57ffecc20aba8c4ae9260083d3af4efa418a7","observation_id":"b9a2d23c-e649-4b9a-b49c-90b17616b859","resolution":{"observed_at":"2026-08-09T15:57:24.387743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.970188Z","title":"Conditional convolution projecting latent vectors on condition- specific space","venue":null,"work_id":"5da68c6f-dd2e-43b6-bd0b-10e1689bcbbd","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.392223Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:b8c8cc02f0f53b4bfdab5f05372b2ee258a51ed503915ba9e15c58e054f71008","observation_id":"adaecaf9-146a-4fc5-a010-d69c1e020411","resolution":{"observed_at":"2026-08-09T15:57:24.974919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.12607","last_updated":"2024-10-16T14:24:51Z","snapshot_observed_at":"2026-07-06T19:34:37.027078Z","submitted_at":"2024-10-16T14:24:51Z","title":"Low-Rank Adversarial PGD Attack","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.12607","snapshot_observed_at":"2026-08-09T15:57:24.396812Z","title":"Low-rank adversarial pgd attack","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.396812Z"},"links":{"cited_paper":"/paper/2410.12607","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:e12cc06d5d42cbbbf26b4e8bd34a4278ba0e2054ee7b29270925d2541badd691","observation_id":"ef6926d1-6882-48c1-acdd-dca08248813e","resolution":{"observed_at":"2026-08-09T15:57:24.396812Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.955292Z","title":"Accessorize to a crime: Real and stealthy attacks on state- of-the-art face recognition","venue":null,"work_id":"5e6ff9da-1f6e-43bf-b8c5-2e80bf4a2b89","year":2016},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.401838Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:08e131e3c0351fa695f3f3c1d5ef1c6e9d75713e1332f0b4dab64887d29fbcff","observation_id":"4c9316d1-10e2-43bb-b812-58ce2737be8c","resolution":{"observed_at":"2026-08-09T15:57:24.960368Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-09T15:57:24.406588Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.406588Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d5043b16bb678888ec50feb8f9eb60d8fd14f3cb3302afd48e13c698467953d0","observation_id":"5c4f5b1f-b09a-4ca0-8af1-f441f558b9e9","resolution":{"observed_at":"2026-08-09T15:57:24.406588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.940316Z","title":"Going deeper with convolutions","venue":null,"work_id":"8eff2940-c159-41db-83ad-74e3702d7943","year":2015},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.411570Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:af7f1ff2e04de6e4fcef1f5d1ce5a4c6661398c64c6f4b832d46f2e5f1b24ce8","observation_id":"182a7606-a2eb-4c4a-a72a-5ed6ec757868","resolution":{"observed_at":"2026-08-09T15:57:24.945062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21073","last_updated":"2024-07-29T09:07:29Z","snapshot_observed_at":"2026-08-05T09:55:43.398103Z","submitted_at":"2024-07-29T09:07:29Z","title":"Enhancing Adversarial Text Attacks on BERT Models with Projected Gradient Descent","version":1},"cited_work":{"arxiv_id":"2407.21073","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.21073","snapshot_observed_at":"2026-08-09T15:57:24.537448Z","title":"Enhancing Adversarial Text Attacks on BERT Models with Projected Gradient Descent","venue":"cs.LG","work_id":"08202c69-d5b7-43c0-bf3d-ed7da3ecd29e","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.416278Z"},"links":{"cited_paper":"/paper/2407.21073","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:4983202442c2112ec8eac7c338ca3662d86832e4c825cb663f231e1af961457f","observation_id":"18665268-0209-4be4-a39d-bbe04d63d38c","resolution":{"observed_at":"2026-08-09T15:57:24.542624Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.925458Z","title":"Boosting adversarial transferability by block shuffle and rotation","venue":null,"work_id":"e99d8369-c355-4a5d-9aeb-277784d72ef6","year":2024},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.421026Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:cea11ecc1a4d142172aa0dbc4951d72e1d631b780d41ab5fbed8f6637c27ec3c","observation_id":"6651c1cc-dae0-4b2b-add1-a4b583b5ea36","resolution":{"observed_at":"2026-08-09T15:57:24.930446Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.910352Z","title":"Admix: Enhancing the transferability of adversarial attacks","venue":null,"work_id":"ce451862-032e-437d-a8bb-5dd0b59a13ed","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.425548Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:eec914ab2b03e3cec2e57b289ed8d5f560deb5ed034823a0ac87b6a2f092a5ad","observation_id":"4d671bba-177f-4f02-b46c-5eb132fabe6b","resolution":{"observed_at":"2026-08-09T15:57:24.915407Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.895416Z","title":"Feature importance-aware transferable adversarial attacks","venue":null,"work_id":"abaf6cde-6e8a-4048-b0a0-b5997d0493a4","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.429873Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:cba71610ae9afe0466ab73abc370a80213b27ebd7f816c9fa736af244711d156","observation_id":"862166a1-234d-4647-a48c-2a0d18be889d","resolution":{"observed_at":"2026-08-09T15:57:24.900190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.01361","last_updated":"2023-07-05T08:59:44Z","snapshot_observed_at":"2026-08-03T18:03:57.665535Z","submitted_at":"2023-05-02T12:27:44Z","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","version":3},"cited_work":{"arxiv_id":"2305.01361","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.01361","snapshot_observed_at":"2026-08-09T15:57:24.513079Z","title":"Boosting Adversarial Transferability via Fusing Logits of Top-1 Decomposed Feature","venue":"cs.CV","work_id":"8b9bd787-e5db-41c0-bb2b-336c80e1cc2a","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.434457Z"},"links":{"cited_paper":"/paper/2305.01361","citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:5ffffa3071df567cfc082462bdd9f0e877dc971635586a60468eb123bf2a34b8","observation_id":"4c87a177-a3d6-4c26-ac3e-c4efd23011ab","resolution":{"observed_at":"2026-08-09T15:57:24.520046Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.879172Z","title":"Rethinking the backward propagation for adversarial transferability","venue":null,"work_id":"d8943ce3-a405-484d-8f2b-a89d4866bd8a","year":1905},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.439397Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:78c0a00746ca4ff899950a37d5c17c4021c067c8f85080c6ec05e1345296a809","observation_id":"24eb3270-bf21-4d3c-aa6e-536f7d2ab34a","resolution":{"observed_at":"2026-08-09T15:57:24.884104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.863662Z","title":"Adversarial examples for semantic segmentation and object detection","venue":null,"work_id":"93d1f2c1-a07f-4be5-8cf4-e54036217938","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.444333Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:dc742fbbc850e852a91298c19e28c159106ff9903cbbae1b8ece7c31a28f9d2a","observation_id":"e52be68e-896d-48af-a06d-17702030b4df","resolution":{"observed_at":"2026-08-09T15:57:24.868509Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.848426Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":"bddbedcc-56b8-4a69-a81f-2049fddcd5db","year":2019},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.448801Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d8d2bb469e592c0183de7cb6664ad7df6bbb719f834f69f706fe54f4c5c750a8","observation_id":"2b95ade5-a924-4fb3-a833-b8b442b0c616","resolution":{"observed_at":"2026-08-09T15:57:24.853312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.832531Z","title":"Segformer: Simple and efficient design for semantic segmentation with transformers","venue":null,"work_id":"af9e644c-cad5-4817-a925-c762d0476a5d","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.453453Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:d1773eb7f45d44719850aa65452d59514d498fccbe28c26437e1a1680fa93a79","observation_id":"f4b6ba74-8939-4a30-9ce5-6def289a93d5","resolution":{"observed_at":"2026-08-09T15:57:24.837892Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.815584Z","title":"Improving adversarial transferability via neuron attribution-based attacks","venue":null,"work_id":"c5edc787-6b88-46f9-b08a-a02d7552951b","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.457770Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:9fe498eb4cf926d6fdf0223d6072c660f381e214cae08dd4ed87791914e60fa5","observation_id":"02b3681d-8b61-43e6-a820-55308249720f","resolution":{"observed_at":"2026-08-09T15:57:24.820523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.801073Z","title":"Improving the transferability of adversarial samples by path-augmented method","venue":null,"work_id":"c16193b5-adbd-4bf4-ad9f-8020f41e6654","year":2023},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.462198Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:a30a455b94970d4199b9ce59f4e03b28ae595b21fc604660808f138fb6098537","observation_id":"2469bd2e-f39c-43c0-9ed3-8ca5e745802f","resolution":{"observed_at":"2026-08-09T15:57:24.805731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.786368Z","title":"Pyramid scene parsing network","venue":null,"work_id":"396fa3ef-1a5f-49a9-8e87-e1eed5021861","year":2017},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.466564Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:4f89599312398c6bbf8322c9c922e1df9875de6e2d67f86ae8510d73ee1056a2","observation_id":"b501c132-ddff-4e74-8b68-8edae6c6125e","resolution":{"observed_at":"2026-08-09T15:57:24.791219Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.771315Z","title":"Rethinking adversarial transferability from a data distribution perspective","venue":null,"work_id":"b0b05401-cce9-4218-94ae-07e6800d3908","year":2021},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.471139Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:f64b5479b3df0ca4444041a28b656f464b554dc7dcdee435720f4d9073cbe833","observation_id":"d6cf20e2-fe30-46ab-94f0-60e441f17b1f","resolution":{"observed_at":"2026-08-09T15:57:24.776190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T15:57:24.756434Z","title":"Toward understanding and boosting adversarial transferability from a distribution perspective","venue":null,"work_id":"9ef1db7b-e549-4683-9aa7-cc8517cab30d","year":2022},"citing_paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-09T15:57:24.475857Z"},"links":{"citing_paper":"/paper/2502.01262"},"observation_digest":"sha256:e19ddc828d978669628f219b3ddbba0069213b17189a131cdadb04afda23531b","observation_id":"33633b29-6eee-4840-af73-940b2038199a","resolution":{"observed_at":"2026-08-09T15:57:24.761271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.01262","last_updated":"2025-03-06T14:50:58Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-10T01:41:31.700890Z","submitted_at":"2025-02-03T11:36:01Z","title":"FSPGD: Rethinking Black-box Attacks on Semantic Segmentation"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":7,"verified_exact":7,"verified_fuzzy":46},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 0 inbound Pith citation observations for arXiv:2502.01262."}