{"as_of":"2026-08-19T16:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5e973cec10c7159c1a940e870233abfc724c965baea5154947601a5f05be1480","coverage":[{"denominator":75,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":75,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T11:52:01.385507Z","state":"measured"},{"denominator":75,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":75,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-19T06:32:44.657259+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2504.14541/citation-record","integrity":"/paper/2504.14541/integrity","json":"/paper/2504.14541/citation-record.json","paper":"/paper/2504.14541"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.347526Z","title":"Hidemia: Hidden wavelet mining for privacy- enhancing medical image analysis,","venue":null,"work_id":"c02eef29-363e-45bb-9eec-c329fc1f8268","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.136089Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:f110fef23766fb8a4998ed21fd2cbe3c050c4d9c331299a39f091169c4996028","observation_id":"7c32d03a-dcb3-4199-84c1-b1dda30be18a","resolution":{"observed_at":"2026-08-16T11:52:02.350528Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.338580Z","title":"Purify unlearnable examples via rate-constrained variational autoencoders,","venue":null,"work_id":"d4033fba-37d5-4a3e-9239-420a009129d4","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.140173Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:476ceb215c92b55f5feb61cdd2e9d47af727f940424c98108c769e6fbfa046bc","observation_id":"f0685e00-a265-4c72-a36a-57cda659b813","resolution":{"observed_at":"2026-08-16T11:52:02.341616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.329581Z","title":"Semantic deep hiding for robust unlearnable examples,","venue":null,"work_id":"69ec3558-b373-4371-a00b-16532bab28d5","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.143741Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e19b5d50f87476778cfe07b9df4684353ea688601603b9ac129343a9870eb552","observation_id":"22e3e94f-b0c1-40d1-8fe6-894bf47f7f2b","resolution":{"observed_at":"2026-08-16T11:52:02.332743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.321361Z","title":"Towards physical world backdoor attacks against skeleton action recognition,","venue":null,"work_id":"030f537f-b1dd-4978-8e5f-75c4c7cb5bf2","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.147257Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:a46505d7284b1f9ebd0eae0fad088484390737d62ca8d3f6b4971ecad289f23b","observation_id":"6c7a20d8-6ca0-4526-b5db-fcdc7450de8d","resolution":{"observed_at":"2026-08-16T11:52:02.324417Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.311696Z","title":"Robust and transferable backdoor attacks against deep image compression with selective frequency prior,","venue":null,"work_id":"e1857a00-7114-4714-8d7a-87d6cef7ab77","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.150466Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:8fb544fff475e7b9ee213d0c9364396ec141924b73f7cebfb91cff9efc764803","observation_id":"593bf82c-2a92-4de1-8155-4e943ae5da00","resolution":{"observed_at":"2026-08-16T11:52:02.315850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.00383","last_updated":"2025-04-03T05:50:56Z","snapshot_observed_at":"2026-08-16T14:43:09.728195Z","submitted_at":"2025-03-01T07:15:21Z","title":"Theoretical Insights in Model Inversion Robustness and Conditional Entropy Maximization for Collaborative Inference Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.00383","snapshot_observed_at":"2026-08-16T11:52:01.154053Z","title":"Theoretical insights in model inversion robustness and conditional entropy maximization for collaborative inference systems,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.154053Z"},"links":{"cited_paper":"/paper/2503.00383","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:81e51d079bce20bf1ae02b649ed7bad6eaee0ac140e09e212c00b38576505035","observation_id":"e3c05785-3c8c-4606-9aae-aee14e03b424","resolution":{"observed_at":"2026-08-16T11:52:01.154053Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.303268Z","title":"Backdoor attacks against no-reference image quality assessment models via a scalable trigger,","venue":null,"work_id":"d1d3b402-7be2-4a87-9f15-cd57111719ce","year":2025},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.158168Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:7bd3bb34f56a48da8d3414a571edb5866d6114eedfb0d878ece23510ea42e218","observation_id":"21527e1e-f475-438a-8767-2db01d6862f0","resolution":{"observed_at":"2026-08-16T11:52:02.306466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-16T11:52:01.162373Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.162373Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e6f0edef259581ea94d5bb99b403ec52c47ec002925bb97ace7af176b18faf67","observation_id":"3d095904-82c6-4ec7-add8-1996a26f1031","resolution":{"observed_at":"2026-08-16T11:52:01.162373Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.295139Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":"c17d741d-3023-416e-ac2f-16f17ffd562f","year":2015},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.165911Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:192737f95873bc89f76ae07f3d72ec105bb33fd133ec7d7fc45cef0d43d28c18","observation_id":"2ac2595a-5000-44ac-8aa0-1ad53777bdc6","resolution":{"observed_at":"2026-08-16T11:52:02.298277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.286547Z","title":"Mitigating the curse of dimensionality for certified robustness via dual randomized smoothing,","venue":null,"work_id":"10adff0c-81d4-4273-b622-c1045f04f929","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.169588Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:219e7d86beda7425478ae442c44553328c5f1c580e21da0b04705ad6c9527cd5","observation_id":"9cf5afd2-a2b8-4bf9-a0e2-58f4238901f1","resolution":{"observed_at":"2026-08-16T11:52:02.289568Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.277879Z","title":"Transferable adversarial attacks on sam and its downstream models,","venue":null,"work_id":"3967491c-71c9-415b-b0d2-784a9dda4cd6","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.172864Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:387389d284f5c43b2e9d211610d55a5f2410a3addc00a2d7c8e825f19825fc79","observation_id":"8afbd7f2-9d7a-4918-aa9f-eaa19ba8991d","resolution":{"observed_at":"2026-08-16T11:52:02.281209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.268666Z","title":"Adversarial attack vulnerability of medical image analysis systems: Unexplored factors,","venue":null,"work_id":"55be6f81-ffe9-422e-b134-13af05a61cdd","year":2021},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.176508Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:37ed1faf93025b2c27e6e8f6df49b3c759361ad78efeb552660ab84e4e73d183","observation_id":"9d2a6459-0b64-4e0a-982d-66ca6aa63184","resolution":{"observed_at":"2026-08-16T11:52:02.271900Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14250","last_updated":"2024-03-21T09:22:23Z","snapshot_observed_at":"2026-08-16T14:43:07.895150Z","submitted_at":"2024-03-21T09:22:23Z","title":"Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14250","snapshot_observed_at":"2026-08-16T11:52:01.179577Z","title":"Safeguarding medical image segmentation datasets against unauthorized training via contour-and texture-aware perturbations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.179577Z"},"links":{"cited_paper":"/paper/2403.14250","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:d89f79dfdadd5d7fc6abb90df6854a122d1014b1345b6547a4d0946503958fae","observation_id":"5df6bdbf-855a-4707-822b-09debc1c3e46","resolution":{"observed_at":"2026-08-16T11:52:01.179577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.259424Z","title":"Evaluating adversarial evasion attacks in the context of wireless communications,","venue":null,"work_id":"2e0e9d79-95d5-46f8-ba03-fd07216d1e62","year":null},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.182972Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:c2233f477d2ab53e873fc26933519b0db15e60b11a566f3c46bcd91c8b346c13","observation_id":"b3dae4af-40bf-416e-aa3c-3d5fb5c2e42d","resolution":{"observed_at":"2026-08-16T11:52:02.262817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.249587Z","title":"Interpretable learning for self-driving cars by visualizing causal attention,","venue":null,"work_id":"3e6a15cf-bb14-4421-abff-22d553ce4347","year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.189753Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:c5f2d8f89c959626bcdb0303da1d3f9b5f0786a3558a3cb9b02444d075b766ac","observation_id":"552dc0c8-cbde-420e-8a3d-a9d90a500613","resolution":{"observed_at":"2026-08-16T11:52:02.253274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.240531Z","title":"Towards robust rain removal against adversarial attacks: A comprehensive benchmark analysis and beyond,","venue":null,"work_id":"0de21913-a81c-45ba-93dd-dfe06ebb91b4","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.192995Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:4c38faa74e007cf705700c27a167705bbacf249a567f122478f2916c9e579524","observation_id":"96f2b861-1c50-430c-a9d2-fb1ee997c0af","resolution":{"observed_at":"2026-08-16T11:52:02.244137Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.231827Z","title":"Benchmarking adversarial robustness of image shadow removal with shadow-adaptive attacks,","venue":null,"work_id":"afab3464-ade7-46d4-ab3b-ffeb8c61f7a5","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.196113Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:01dcea52c22347322800f4a2405a1d029a8d9913c654b3518f304434b6070718","observation_id":"8d2d3ad8-048c-4c7b-93f5-1d0c5f077364","resolution":{"observed_at":"2026-08-16T11:52:02.235063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.222774Z","title":"Backdoor attacks against deep image compression via adaptive frequency trigger,","venue":null,"work_id":"869bbb36-262b-470a-a668-19b5b6fb721a","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.199384Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:30226c9bd311ff6c3b48c253952e9b87b3b64e3f83a46f60cfacd09886a642fa","observation_id":"e50f30cd-de36-48d5-a813-c0feaf70d7f8","resolution":{"observed_at":"2026-08-16T11:52:02.226078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.213541Z","title":"Black-box adversarial attacks with limited queries and information,","venue":null,"work_id":"f51f413e-259f-4991-be07-2a93e1408448","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.202634Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:6de8910a2acfeb919a090affdb432042fe21fb5d215485458e7d4e79c6e49005","observation_id":"f2dedbc4-7d96-4f77-9f5f-9925ae2af892","resolution":{"observed_at":"2026-08-16T11:52:02.216807Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.204599Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":"bfe8b3c6-6d33-4dc3-9031-daa952ab912b","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.206269Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:4697f08279c39198eb394ee77efcba4235a26f47aba90383fb6c3f753c8f8018","observation_id":"122bb0a2-aaf2-4968-bc3d-8feb7c8aec61","resolution":{"observed_at":"2026-08-16T11:52:02.208004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.195827Z","title":"Improving black- box adversarial attacks with a transfer-based prior,","venue":null,"work_id":"9a3fbba2-c0be-4841-86b2-e8da9aaaa726","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.209550Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:5271cf2c4b68f07733f4bcc3ff4ad90dc948e683b310a46d2463d0ffda3078ec","observation_id":"f9ecd215-7f58-4035-aa21-725fc78d28d2","resolution":{"observed_at":"2026-08-16T11:52:02.199203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.33335","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.682267Z","title":"Coreset learning-based sparse black-box adversarial attack for video recognition,","venue":null,"work_id":"b44a5230-a219-49fa-9cb4-b62bd7dd6a32","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.212399Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:59929f978e70667147638498d2b470d1ddfdecac6ccebfdfc7d42b0d04f5c507","observation_id":"42ffcd70-e568-4236-b5e6-7053069365f1","resolution":{"observed_at":"2026-08-16T11:52:01.688885Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.215434Z","title":"Query-efficient decision-based black-box patch attack,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.215434Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:5f6ef6e0c013d6916fc4513e463c38e79eda7e81fee2209909d3900db6231ce5","observation_id":"5d9effb0-5580-443c-9c54-5651e6db442c","resolution":{"observed_at":"2026-08-16T11:52:01.215434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.218351Z","title":"Quantization aware attack: Enhancing transferable adversarial attacks by model quantization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.218351Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:6b6843fa0d6680796dce2d5ec4f43fbb944cf1f589d4175b9fe3f6202f4f5a70","observation_id":"2a54efc7-e266-4a77-9594-9ffe24c02c2c","resolution":{"observed_at":"2026-08-16T11:52:01.218351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.221268Z","title":"Logit margin matters: Improving transferable targeted adversarial attack by logit calibration,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.221268Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:d69ef93faced034027be508096596ea9a367f08606c89be7c4cb050c3e45f09a","observation_id":"110f8b43-9792-4a9b-905a-a92f48290ab9","resolution":{"observed_at":"2026-08-16T11:52:01.221268Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07277","last_updated":"2016-05-24T03:27:48Z","snapshot_observed_at":"2026-08-19T02:49:49.891766Z","submitted_at":"2016-05-24T03:27:48Z","title":"Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07277","snapshot_observed_at":"2026-08-16T11:52:01.224224Z","title":"Transferability in ma- chine learning: from phenomena to black-box attacks using adversarial samples,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.224224Z"},"links":{"cited_paper":"/paper/1605.07277","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:54a3a6460b508c06a1f92c41ab6182428b45017c0e6c8645c5ac22c8b99f5e57","observation_id":"da193967-a920-4a86-b882-98241f5574fa","resolution":{"observed_at":"2026-08-16T11:52:01.224224Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.186739Z","title":"Improving the transferability of adversarial samples by path-augmented method,","venue":null,"work_id":"40a17888-9299-4247-83c6-8e6c1b7301bb","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.228295Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:78afa5f9daa49d72fe6792dc1ee7e5240ab5fddaa84424fd838cd823bfb37476","observation_id":"e496e18e-24bd-4004-b9f4-5403acc585b3","resolution":{"observed_at":"2026-08-16T11:52:02.189848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.177267Z","title":"Transferable adversarial attacks on vision transformers with token gradient regularization,","venue":null,"work_id":"0beb4071-86ef-4705-8ea4-09d3b147fb0b","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.231199Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:5a12b159ec0553e137902ae6e8cc68fd0ad32e423ffae2a0d406455c6268ae32","observation_id":"9b4fbda6-fc78-4334-bde2-01573ee32bae","resolution":{"observed_at":"2026-08-16T11:52:02.180599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.167691Z","title":"Delving into transferable ad- versarial examples and black-box attacks,","venue":null,"work_id":"f1838142-f981-40ad-a6a1-431a4e24f2ba","year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.233921Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:9985d3ffb7a8fa660d4b1d7041d1b5c04b4316c3d0fcff7bda63cb393188144a","observation_id":"e1b157b7-3543-4f69-8e79-fcb4277f34ed","resolution":{"observed_at":"2026-08-16T11:52:02.171308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.237039Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.237039Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:09e0d0f579f82fd4714bc6fe39016cf2713978dba2e1c839f818a8cb8b02725a","observation_id":"c245fde6-e686-432c-8d23-43cdb6e51f85","resolution":{"observed_at":"2026-08-16T11:52:01.237039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.151844Z","title":"Ensemble adversarial training: Attacks and defenses,","venue":null,"work_id":"0997a253-060e-45e7-9c5e-5e69d081ce19","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.240073Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:8da5d5167b1d117485e3de8c3485c4c1bf45b018b8144bc3a44f902d9a510759","observation_id":"f9b9cb13-f141-47f8-9eb9-36939daac471","resolution":{"observed_at":"2026-08-16T11:52:02.154898Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.142527Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":"9281f551-92d4-4539-aca9-270b81eccf44","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.243488Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:ae545b2e8372bbaa239af52d3d0c3c957a41fd15de513af917e635416bdb8251","observation_id":"0ada615f-00a2-42d2-b266-e4a1cbbcf1a1","resolution":{"observed_at":"2026-08-16T11:52:02.145983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.133806Z","title":"Ima- genet: A large-scale hierarchical image database,","venue":null,"work_id":"023aa7c6-8155-4db1-9df2-f72bcc346c50","year":2009},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.246683Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e852b76bd5be01edd6a831b9e1f8720251835161afc72d9cbfbfb39a0a413667","observation_id":"70e55f5a-8541-4922-8582-4e2b70dd12c2","resolution":{"observed_at":"2026-08-16T11:52:02.136950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.124810Z","title":"Theoretically principled trade-off between robustness and accuracy,","venue":null,"work_id":"149e7c1e-5cb8-4a2a-9173-3dcaefdb009b","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.249902Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:a74c5ce6afbae965b21e6b2dfd035223bc1e652853d89e5569bec1417cf7581e","observation_id":"818bbd92-20df-43b7-a227-686c65f6bb7d","resolution":{"observed_at":"2026-08-16T11:52:02.128015Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.115398Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":"ee6f70a9-1820-4f62-b573-fbd8c99dcbed","year":2016},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.254557Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e7e66da736bb10dfa958330389f059b03cab59140e57cb939fe7646fa8c68491","observation_id":"7e2aeed3-5080-476c-8937-d10eee11fd52","resolution":{"observed_at":"2026-08-16T11:52:02.118786Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.106535Z","title":"Countering adver- sarial images using input transformations,","venue":null,"work_id":"070fb9dc-0362-40ba-a4c8-45e62849edfc","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.257992Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:adf6b6fbe13a6065bf2fc4e19b05da2b7f51ee2e75f1c3a20ca462228a06421e","observation_id":"d74d4f9e-a9f8-4c44-9942-a0d7e09f4288","resolution":{"observed_at":"2026-08-16T11:52:02.109934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.096678Z","title":"Deflecting adversarial attacks with pixel deflection,","venue":null,"work_id":"acc68374-a5e8-4009-bfe4-d554c4ffa832","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.261613Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e53104b31c0b5bd5881aa7f87a0bc37ee4220613e0710f53b4e2b24a77c1c45a","observation_id":"fe22caaf-9455-456a-9356-1bf3290bc366","resolution":{"observed_at":"2026-08-16T11:52:02.100618Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.087072Z","title":"Pixelde- fend: Leveraging generative models to understand and defend against adversarial examples,","venue":null,"work_id":"9f2ff3be-c65e-4cb2-8912-9ab7d57cebee","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.265038Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:89b3338dafe7da84d69233718635e50d058ff9ea82adf3b080057e6c69d8aa2b","observation_id":"fedd0a8e-1c3a-49b5-9a03-1467a6ad9b91","resolution":{"observed_at":"2026-08-16T11:52:02.090563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.077554Z","title":"Defense against adversarial attacks using high-level representation guided denoiser,","venue":null,"work_id":"281ae28f-af78-47cd-8cb1-6ed7e2e3d85c","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.269092Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:a12396b253a9ce22cc8c2031e8db95d12f6dacc6db0309c7ace029386e3483da","observation_id":"7e165738-fcce-4279-9014-4f2ec270585d","resolution":{"observed_at":"2026-08-16T11:52:02.080902Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.067441Z","title":"Comdefend: An efficient image compression model to defend adversarial examples,","venue":null,"work_id":"b2da697d-7093-4c3d-8c8b-6305aeef1450","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.273006Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:a6af5adb607efba6d423853a309c77ecd417efb6fcfd343e7d7608e8d7e958b1","observation_id":"3c08fd58-4c23-4073-bc83-9238045ae233","resolution":{"observed_at":"2026-08-16T11:52:02.071012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.057892Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":"41599e91-13c1-41ed-80ec-87eb190f6430","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.276289Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:236415c3e080659144731e0deab2b64c95f5246853750f1c357607d8725bad59","observation_id":"f1f7ac06-6164-4833-94ae-1f79a378e828","resolution":{"observed_at":"2026-08-16T11:52:02.061113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.047699Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":"f524007c-d3ea-4432-b5a1-73ab2cf889d8","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.279230Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:3dd3c396f255e287786f3a3174fc2f5e334d29707246dd351aa1cf798566588a","observation_id":"583fdd90-0a08-4079-8aba-033a8160c0fe","resolution":{"observed_at":"2026-08-16T11:52:02.051794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.282876Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.282876Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:25eb4e982cc72bafcb91899bd39f590f51ca4ade4735700f121ea248f21dfbe6","observation_id":"a3ecde08-d4dc-4089-abe3-7543818f9a6a","resolution":{"observed_at":"2026-08-16T11:52:01.282876Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.13152","last_updated":"2022-05-26T04:59:28Z","snapshot_observed_at":"2026-08-16T16:57:34.285903Z","submitted_at":"2022-05-26T04:59:28Z","title":"Transferable Adversarial Attack based on Integrated Gradients","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.13152","snapshot_observed_at":"2026-08-16T11:52:01.286018Z","title":"Transferable adversarial attack based on integrated gradients,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.286018Z"},"links":{"cited_paper":"/paper/2205.13152","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:dce1bed85e9b69253c72631e94aa90f7442ae125fdeaf10c5086950e3da6f3f2","observation_id":"136bfdbb-fab7-4f48-9aec-f16ba94044dd","resolution":{"observed_at":"2026-08-16T11:52:01.286018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1807.04457","last_updated":"2018-07-12T08:04:27Z","snapshot_observed_at":"2026-08-18T17:12:07.994111Z","submitted_at":"2018-07-12T08:04:27Z","title":"Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1807.04457","snapshot_observed_at":"2026-08-16T11:52:01.289289Z","title":"Query- efficient hard-label black-box attack: An optimization-based approach,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.289289Z"},"links":{"cited_paper":"/paper/1807.04457","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:0071936516fe04d44cf4f751c0aafb8c87562f239c7a35ee87fa227daa935875","observation_id":"6f95b162-f1d3-4635-a944-08c6d03cf686","resolution":{"observed_at":"2026-08-16T11:52:01.289289Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.032460Z","title":"Decision-based black-box attack against vision transformers via patch-wise adversarial removal,","venue":null,"work_id":"d1046bfc-0f83-485a-b624-ca51df59d3d6","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.292653Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:2eaffe5befd0b850e3e13426264aff706dde4819808fc88525d1e60a342f66cb","observation_id":"2870c608-4f54-4ee2-8934-3aa547df7ec7","resolution":{"observed_at":"2026-08-16T11:52:02.035860Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.022276Z","title":"Can neural nets learn the same model twice? investigating reproducibility and double descent from the decision boundary perspective,","venue":null,"work_id":"2007ceba-62e8-44d1-a689-c78037da62c1","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.296149Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:d6d30622f00917c6d6fa9ea0635ed591176d8ae1f04dd44f0f09d2ebfcd9a801","observation_id":"3cc4bf50-4687-4300-89dd-9ea88ab50c68","resolution":{"observed_at":"2026-08-16T11:52:02.026657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.299447Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.299447Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:d843f8f0f368250d40a0d5999017363ffaf2acdacd572357fb810edc302ae05f","observation_id":"6fc9336e-4f94-48db-88cd-fc4605ad6fdf","resolution":{"observed_at":"2026-08-16T11:52:01.299447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:02.005983Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":"7ae72920-e549-4aa6-8203-9be5ccc4bafb","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.302797Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e52b29b3ed8979295010e6cdb7a94340fd07d1dd231bd7e4d2f863225699faf5","observation_id":"59d63bce-5173-49b6-94f2-1cba76a4c0b0","resolution":{"observed_at":"2026-08-16T11:52:02.009454Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-08-16T03:15:37.843175Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-16T11:52:01.306099Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.306099Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:ab97754d60627bf2712792ef70d5c098aadb4c13b08b7fe2f85dde48e1712868","observation_id":"ab93f839-f3c2-45d6-8baf-a4f939131b47","resolution":{"observed_at":"2026-08-16T11:52:01.306099Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.996294Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":"ee88b773-c302-4d37-8f9a-63a1512d7543","year":2021},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.309564Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:0c44496138e7374963b395e12dfaccfdc0c581e8f4ebccf4661d2fd49619f4bf","observation_id":"389e377a-f5d4-4bac-8f6e-908fbd394de8","resolution":{"observed_at":"2026-08-16T11:52:01.999660Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.986850Z","title":"Boosting adversar- ial transferability via gradient relevance attack,","venue":null,"work_id":"1e458546-7042-454a-8bf1-8b5bb9e35e18","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.313283Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:49605a0606c69d753ad42128be9eb7d0630e3df240d26f4727d78876dc76bd0b","observation_id":"7b6499d7-eb98-4062-8117-2ef356890cbe","resolution":{"observed_at":"2026-08-16T11:52:01.990467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.976268Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":"a75925eb-7450-4d16-b5f0-6da3698752fa","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.317581Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:82c01f7d7539099f20318dc563f6b2af5a8111f3c7babe7e719bdd2df85bda1b","observation_id":"415f8366-b95b-4d6f-b63d-1e2870c248d2","resolution":{"observed_at":"2026-08-16T11:52:01.980698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.967252Z","title":"Admix: Enhancing the trans- ferability of adversarial attacks,","venue":null,"work_id":"a3b431f7-f3c5-4f24-85c3-dc7cfac7459b","year":2021},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.320816Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:95b05fbefa089c0cf692aa929264d6f9daaf88a8ec3a2446ad0a6d4c050b1f5d","observation_id":"201f76bf-5e53-4a23-afa9-db3b5b02da4a","resolution":{"observed_at":"2026-08-16T11:52:01.970645Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.958525Z","title":"Boosting Adversarial Transferability by Block Shuffle and Rotation,","venue":null,"work_id":"40a04440-5f8d-49c7-98ed-6c797461a565","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.324115Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:e25e247d77694ac72a105f67c708337d936a1a7f94f8bfb1ba0b0f127e94fa4f","observation_id":"352aebe3-e19a-4f8c-9683-1e101fa0482a","resolution":{"observed_at":"2026-08-16T11:52:01.961762Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.948137Z","title":"Learning to transform dynamically for better adversarial transferability,","venue":null,"work_id":"03c8ec75-07ca-4d97-b89f-d919b4844351","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.327521Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:002e5dae6460c92ef1bb193a7895cc4b7f389e8e4ed89255ab48e2db6786853d","observation_id":"a19fbda3-8349-43ee-a5d4-c650553e7144","resolution":{"observed_at":"2026-08-16T11:52:01.952837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.939295Z","title":"Fda: Feature disruptive attack,","venue":null,"work_id":"d9eb5f17-13b8-4853-bbd0-38fbaeda0791","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.330742Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:5d5a698163ac8c55737b3c77d0f59d5dd0c02ebbb1624d310b081b39a9cbee38","observation_id":"3432be2e-6da7-4dc2-b99c-534a915be15a","resolution":{"observed_at":"2026-08-16T11:52:01.942397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.930561Z","title":"Feature importance-aware transferable adversarial attacks,","venue":null,"work_id":"ec2056fa-0010-44dd-8f21-168536945953","year":2021},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.334077Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:dd42a2e88cd4e24f0248b8f81fc3ec261f16dd8a369c6b3d5ac8a820952fce12","observation_id":"29bcbad2-8a68-40f8-8dd6-f75feb02c4dd","resolution":{"observed_at":"2026-08-16T11:52:01.933718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.920776Z","title":"Improving adversarial transferability via neuron attribution- based attacks,","venue":null,"work_id":"e2e391c3-1b3d-4820-9be2-8d7cca679988","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.337434Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:f13fc8efb279424d6faf4ba1da25610a773e8e29ae4f5f6925c9c14c08e0b23b","observation_id":"f748d9da-4862-40d9-9268-09f973049e63","resolution":{"observed_at":"2026-08-16T11:52:01.923792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.911949Z","title":"Enhancing the transferability of adversarial examples with random patch","venue":null,"work_id":"53107b2c-6a8a-4a91-8637-65a6e9bf0b45","year":2022},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.340558Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:005dad6609c4f064b78b6fdb14f40804ae65e6aa3d3d36f34337421fa153b0a4","observation_id":"b190e87b-3a35-45bf-a74b-2cc424c761af","resolution":{"observed_at":"2026-08-16T11:52:01.915245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.902882Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability,","venue":null,"work_id":"b34e9fd6-e876-4c3f-b112-dd9bc49509bd","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.343773Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:0c6095160e8e2dff2fe2269c93cb9d3b34b9a0ac5ef6e871ce9b4a98942ee788","observation_id":"10db594a-3ca7-408e-9907-d0ae0775e47a","resolution":{"observed_at":"2026-08-16T11:52:01.906252Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.893288Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":"b058fa2a-a8de-401a-8350-033830ff7bbf","year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.346899Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:82f6a8ff1fcff758f44c84be21b00cc77f6e6c96bce58a2a51425c8a5fa99aed","observation_id":"49033a04-1d33-405e-a1d3-354fa3ea71fb","resolution":{"observed_at":"2026-08-16T11:52:01.896760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.884193Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks,","venue":null,"work_id":"3466e53b-d07f-4c28-9566-b24b027e286e","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.349913Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:8397892d6cdb9e700b1e030e1d7938d62b5efcff6a1c3fca44fa6eaf53103631","observation_id":"1d1d2834-d3aa-4ee7-87ad-142759c33845","resolution":{"observed_at":"2026-08-16T11:52:01.887350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.874038Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":"658cad11-edbd-4dad-bde6-b1b5453b5c84","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.353196Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:d6eae1c7508a606706bd4f73b338fa1f721f63763272451aa45b41192a481d52","observation_id":"4b13b4c7-ba19-471c-9060-bdbf7165e8c9","resolution":{"observed_at":"2026-08-16T11:52:01.877953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.863888Z","title":"Feature distillation: Dnn-oriented jpeg compression against adversarial examples,","venue":null,"work_id":"0021a9e5-1e12-4283-9406-4c651f80604d","year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.356124Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:58f29f1d0644e6684cf37a8bd0a7a480d4fc64cb03a0d1b7288e3ee8c4375788","observation_id":"cd355bc0-6f89-4960-ba1b-1b9284e9f9b6","resolution":{"observed_at":"2026-08-16T11:52:01.867794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.853869Z","title":"A self- supervised approach for adversarial robustness,","venue":null,"work_id":"f9b1a1a9-6283-41b9-aeb3-58b374471453","year":2020},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.359871Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:7ac22e1881083dcb9ee32fc7412880c5eecca2e3a0f6793bc12cb55c63e19190","observation_id":"f5d14aaa-c94f-4700-83ce-bedbd30540d2","resolution":{"observed_at":"2026-08-16T11:52:01.857254Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.843761Z","title":"Score-based generative modeling through stochastic differ- ential equations,","venue":null,"work_id":"5fb9fea8-3d25-474e-9659-90f8a1d87f08","year":2021},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.363282Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:16ae49d28ce48476a9aa7db49502ac968ea390a574ebe1ab82fe2b770a5ce2d2","observation_id":"945f4db5-b672-40ac-b6e4-1bef18f50b93","resolution":{"observed_at":"2026-08-16T11:52:01.847381Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.833366Z","title":"Randomized adversarial training via taylor expansion,","venue":null,"work_id":"43597fd0-41f6-4601-8fbb-dcd6b63dfa40","year":2023},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.366447Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:a418640565955bd6a60a5c46a5df2b619b22f0587188bf1f712200fa8e358413","observation_id":"72ba5001-4028-42bc-b5f8-a368132718d1","resolution":{"observed_at":"2026-08-16T11:52:01.837165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.823320Z","title":"Taxonomy driven fast adversarial training,","venue":null,"work_id":"ddbd6d99-2741-44ee-8998-8786f4a206de","year":2024},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.369510Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:763531ee64a258c447f93a0f7101cfb7fcab8cb64400eb5d2c6054377d96a402","observation_id":"47d4030a-15aa-4a12-b59c-ac58c19127b9","resolution":{"observed_at":"2026-08-16T11:52:01.826656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.372710Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.372710Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:98039d79891d6870975d16f7202dabf5fbebe9923d99aeaf1f2d0b9d5ffcab37","observation_id":"3d09af20-b5eb-49f2-860e-c9dca367f4e2","resolution":{"observed_at":"2026-08-16T11:52:01.372710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-08-17T19:17:06.411141Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-16T11:52:01.376046Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.376046Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:f9d1846d5191fbf4b82c2b766d04552012dd1eae09bc539a7a862693557e85cb","observation_id":"04a5de6d-aef2-42df-b85a-7b6974d50bff","resolution":{"observed_at":"2026-08-16T11:52:01.376046Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.808197Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks,","venue":null,"work_id":"84cbfc8d-fa45-41e5-8bf5-4ea9ca65097c","year":2018},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.379506Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:4be2869c6e17174cad565d4ffb1e6af33412ec3f4378f2db731702315390d654","observation_id":"2e1542c2-4eea-4f80-b100-7c682b983afa","resolution":{"observed_at":"2026-08-16T11:52:01.811573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.798233Z","title":"Densely connected convolutional networks,","venue":null,"work_id":"642ef606-ce31-472c-a869-da825ebe34dc","year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.382504Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:68834469107d5700a4daefc22270afa9744f4417b62cc430188ec4d5329b817a","observation_id":"5c038606-3231-4cb0-9ce6-9c26d4cefce3","resolution":{"observed_at":"2026-08-16T11:52:01.802031Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.788305Z","title":"Inception-v4, inception-resnet and the impact of residual connections on learning,","venue":null,"work_id":"9d5a34b1-0a3d-447b-beff-1555bcd0d262","year":2017},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.385507Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:f44b03baeeaed1d93839314650017d27043a13fd27a48849b8ef99aab3381718","observation_id":"2be4e5d1-d323-4055-b468-383e05983596","resolution":{"observed_at":"2026-08-16T11:52:01.791857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T11:52:01.186498Z","title":"Available: https://doi.org/10.1109/TIFS.2019.2934069","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-16T11:52:01.186498Z"},"links":{"citing_paper":"/paper/2504.14541"},"observation_digest":"sha256:5d3a575537e9374ead946d99fcc587a51ae76bf590718aee77ee62913f9b592d","observation_id":"722368ab-419e-4712-b5ce-221789c28449","resolution":{"observed_at":"2026-08-16T11:52:01.186498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2504.14541","last_updated":"2025-04-20T09:07:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-19T14:32:31.308286Z","submitted_at":"2025-04-20T09:07:10Z","title":"Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation"},"reference_resolution":{"displayed":75,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":16,"verified_exact":0,"verified_fuzzy":58},"total_outbound_references":75},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-19T06:32:44.657259+00:00","source":"crossref"},{"observed_at":"2026-08-19T06:32:39.956319+00:00","source":"retraction_watch"}],"thesis":"As of 19 August 2026, this Paper Citation Record lists 75 of 75 outbound references and 0 inbound Pith citation observations for arXiv:2504.14541."}