{"as_of":"2026-08-16T19:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f83b1b643c493f9bbf4c14034ad530c3709ea0711c04c58b5ea7cffbd14840ba","coverage":[{"denominator":27,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":27,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-16T04:26:16.688893Z","state":"measured"},{"denominator":28,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":28,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-18T18:04:09.528381Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-18T18:06:42.973254Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"cited_work":{"arxiv_id":"2505.01328","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.01328","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Constrained network adversarial attacks: Validity, robustness, and transferability","venue":null,"work_id":"71a841c4-c2b2-4833-a2b8-d23f546e0d11","year":2025},"citing_paper":{"arxiv_id":"2509.06921","last_updated":"2026-04-15T05:15:58Z","snapshot_observed_at":"2026-08-11T16:57:51.459332Z","submitted_at":"2025-09-08T17:33:59Z","title":"Neuro-Symbolic AI for Cybersecurity: State of the Art, Challenges, and Opportunities","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-18T18:04:09.528381Z"},"links":{"cited_paper":"/paper/2505.01328","citing_paper":"/paper/2509.06921"},"observation_digest":"sha256:212abfa5b97185d783ad15c06acd4edd9fb54da0d4f2d939d8304b4af39f5125","observation_id":"39e20929-5b02-4110-878e-47d6268e880c","resolution":{"observed_at":"2026-05-18T18:06:42.976385Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.01328/citation-record","integrity":"/paper/2505.01328/integrity","json":"/paper/2505.01328/citation-record.json","paper":"/paper/2505.01328"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.179950Z","title":"Insomnia: Towards concept-drift robustness in network intrusion detection,","venue":null,"work_id":"abe08ba8-fd56-4f3d-bee5-7e47ac42cec9","year":2021},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.554629Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:75fbcf20de3d2d1b412f31e3d84e98cc0c1f17a91e4248e52b93cb4b1ee88ba2","observation_id":"50ca185d-4dc7-44b1-8ea1-1a2c9e4d4b92","resolution":{"observed_at":"2026-08-16T04:26:17.185272Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.158184Z","title":"Adversarial machine learning in network intrusion detection systems,","venue":null,"work_id":"b0b7e13b-142a-4228-a725-f5868784ae2b","year":2021},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.560199Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:66104bc47700655da395399efd63811da1eaf12dbb8ba1b8a2854d009a4bbd2a","observation_id":"427d3c7f-c2f5-43d8-aed1-c9dc3a981fd2","resolution":{"observed_at":"2026-08-16T04:26:17.164872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-08-15T16:41:15.505782Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-16T04:26:16.565000Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.565000Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:4770c85cbef53c15679b849a88bd040cd63230e957ee0adbe19addfb778204ce","observation_id":"45326e0d-672e-49c1-b95b-81e1c5b0659f","resolution":{"observed_at":"2026-08-16T04:26:16.565000Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.570204Z","title":"Adver- sarial attacks on machine learning cybersecurity defences in industrial control systems,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.570204Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:297a801b13004ec1132e01dc33c64024d2589ced2cffa3d5fe9077db7e5e0daf","observation_id":"78f348ec-01c1-4e42-a6cb-c001ee49d5a5","resolution":{"observed_at":"2026-08-16T04:26:16.570204Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.125386Z","title":"Ebsnn: Ex- tended byte segment neural network for network traffic classification,","venue":null,"work_id":"ebc1f0ef-0e5d-435f-86bb-55a67320158c","year":2021},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.576578Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:aa34ce0b0d41a6189723766b77f0505ed105f127238b480a678a6a1d6bb6c9a3","observation_id":"b41263e2-aa12-4dc8-bd86-8bccf613868a","resolution":{"observed_at":"2026-08-16T04:26:17.132841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.105418Z","title":"Hpac-ids: A hierarchical packet attention convolution for intrusion detection system,","venue":null,"work_id":"bd1193f9-3e2f-4a78-b058-9efe38906b17","year":2024},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.581345Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:a14d5e047614a1d90cb77d583d7450839dcf6bab330444b485be8512db0689af","observation_id":"e03dbb94-8fd8-4c04-8824-e4b53b7fce31","resolution":{"observed_at":"2026-08-16T04:26:17.111614Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.086645Z","title":"Addressing adversarial attacks against security systems based on machine learning,","venue":null,"work_id":"3a50b2fd-8a05-4034-8f21-78e933752583","year":null},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.586558Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:94ec7300a89c8d3fc2a11c71087014e90a2d21fb0e4a6fd9e0bfb4f08ef352f6","observation_id":"5a0477ba-c94b-47f9-aaa6-ce4f36fbf3d2","resolution":{"observed_at":"2026-08-16T04:26:17.092304Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.056151Z","title":"Adversarial machine learning applied to intrusion and malware scenarios: a systematic review,","venue":null,"work_id":"d0784159-d858-45b5-8606-0b9fae46f420","year":2020},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.595888Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:67ecc6abee8c30657bf95d14c15905ba4cb6d17af913eb149f78608b1c598a2a","observation_id":"0608e5ba-7996-4db1-a1e9-2b66f72c6d53","resolution":{"observed_at":"2026-08-16T04:26:17.062104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.038304Z","title":"Adversarial machine learning for cyber security,","venue":null,"work_id":"13424996-b8b1-41c0-8a8e-de92b894d796","year":2019},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.601349Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:f7b9ff7d5826f2f3709202ce093bb07539e798508a5a7338f23e7f2b3906e24d","observation_id":"86c11946-787e-4d4e-b20d-3b11db294cad","resolution":{"observed_at":"2026-08-16T04:26:17.044349Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.019822Z","title":"Adversarial examples against the deep learning based network intrusion detection systems,","venue":null,"work_id":"572b2865-eed5-460b-a2e0-1759e6637013","year":2018},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.606062Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:83c04699c1e39b2c35d2b872c7cca2971a17603176cc9919dabdc17188eb96bb","observation_id":"650a6425-b002-4603-a35d-4bf19e216eb6","resolution":{"observed_at":"2026-08-16T04:26:17.025337Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:17.002497Z","title":"Adversarial deep learning against intrusion detection clas- sifiers,","venue":null,"work_id":"983fc601-fe8b-4d99-b8b9-39184adbe792","year":2017},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.611010Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:239f2c1f3a469e8938a30e82cb3dfbe450aabc322cce296be28dff0afa9cf10d","observation_id":"b8d67250-cc47-453f-bc1d-0b1576a5d8ac","resolution":{"observed_at":"2026-08-16T04:26:17.008180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1809.02077","last_updated":"2022-05-08T03:01:05Z","snapshot_observed_at":"2026-08-14T18:32:04.684035Z","submitted_at":"2018-09-06T16:24:42Z","title":"IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detection","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1809.02077","snapshot_observed_at":"2026-08-16T04:26:16.616073Z","title":"Idsgan: Generative adversarial net- works for attack generation against intrusion detection,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.616073Z"},"links":{"cited_paper":"/paper/1809.02077","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:46a7d77732472e05dd9a8900f66fba76ace54e3eba72cc6a174c2b2dbd41f197","observation_id":"3a4179e7-31cb-4e1f-a220-75ec87f754e3","resolution":{"observed_at":"2026-08-16T04:26:16.616073Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.985782Z","title":"Nids-cbad: Constraint-based adversarial detection in network intrusion detection systems,","venue":null,"work_id":"4acf1d8c-cf5c-4df4-9691-1dbf8a4e9d37","year":2024},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.621257Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:fba81bc737ba33483b200e10bf6e4665301acda4aef32ff19fe93abf196e0f3f","observation_id":"7e2b4611-a525-4e75-abae-b8b2ea65fac8","resolution":{"observed_at":"2026-08-16T04:26:16.991408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.967225Z","title":"A systematic study of adversarial attacks against ml-based network intrusion detection systems in iot environ- ments,","venue":null,"work_id":"6915bca6-337c-4826-8bb0-7f63d2052a9c","year":2024},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.626321Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:a33a1a41d5d645bd38e70ca32a0e6ac4db10095bd3460173f28876f81c23c058","observation_id":"b7d6702f-9e99-47a5-b9ac-297d2f212b94","resolution":{"observed_at":"2026-08-16T04:26:16.973271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.948272Z","title":"On the feasibility of adversarial machine learning in malware and network intrusion detection,","venue":null,"work_id":"f95436ce-c131-42e8-8d1d-f29b29f3b4ce","year":2021},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.631343Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:adadde6c2c2d116fc88eb64751d02a8356f842b1e6569136ef2ca3350c1ec446","observation_id":"21fddc6c-e2e1-4e48-95f2-e4ec185a9e6f","resolution":{"observed_at":"2026-08-16T04:26:16.953592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.930966Z","title":"Towards evaluation of nidss in adversarial setting,","venue":null,"work_id":"0f961ffa-d7d0-4a78-9e41-4019d64d5ab6","year":2019},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.635976Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:2a76b106a6ec805cbaa13123074ef9733e85b58b5be272d8f44674cf3357c985","observation_id":"21d68155-9bf9-495f-ae80-444f35e38b94","resolution":{"observed_at":"2026-08-16T04:26:16.936164Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.913571Z","title":"Subverting network in- trusion detection: Crafting adversarial examples accounting for domain- specific constraints,","venue":null,"work_id":"621e3c6e-9d32-4164-8a1c-932b5b9b6e8c","year":2020},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.640668Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:14e36916d59cbf7ce7c8dda150904f950613832ba86de10ed5f9ca57cd41cd94","observation_id":"577eacda-5c95-4e31-8c8b-167634dedb8a","resolution":{"observed_at":"2026-08-16T04:26:16.918990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.01183","last_updated":"2022-09-09T17:00:28Z","snapshot_observed_at":"2026-08-16T19:08:39.935358Z","submitted_at":"2020-11-02T18:19:44Z","title":"Adversarial Examples in Constrained Domains","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.01183","snapshot_observed_at":"2026-08-16T04:26:16.646347Z","title":"Adversarial examples in constrained domains,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.646347Z"},"links":{"cited_paper":"/paper/2011.01183","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:cfc7edf67f384c24cae3362f711ab950df5e964d86c5065e738c980682ea0dbb","observation_id":"9daa8586-1f03-408b-a553-b46610307204","resolution":{"observed_at":"2026-08-16T04:26:16.646347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.895434Z","title":"A study on nsl-kdd dataset for intrusion detection system based on classification algorithms,","venue":null,"work_id":"7e17aae4-9b1a-4861-9adb-7f6bb59cbb6e","year":2015},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.651892Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:94cf554c9cffaf0eabc306845527566feaadcd2ad0d6fd37e200fbfbf0c68001","observation_id":"def17aac-be75-4669-bcd4-04e171169560","resolution":{"observed_at":"2026-08-16T04:26:16.900878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-16T04:26:16.657034Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.657034Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:3e52be18a5ef4cbd52f632a6f0861af6959c91676b44357948a808345d73c46b","observation_id":"ed511eb9-506d-487e-a103-592afacf94ef","resolution":{"observed_at":"2026-08-16T04:26:16.657034Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.877528Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"1385a7d4-706f-4160-b0e6-c482651f73c4","year":2017},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.662326Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:bf7636e918777c5851e2b36027a36251831aa311940d0800936c5ae5cbc7e125","observation_id":"c4d1a833-f266-44bc-af73-115eaaebe718","resolution":{"observed_at":"2026-08-16T04:26:16.883335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.667536Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.667536Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:2eb4ae420a16a03deca794202bb8c59e2e02ed61db62bbd437ed0d8a1e244e1e","observation_id":"85a4717c-7605-4fa1-aab6-0313ca0e08d9","resolution":{"observed_at":"2026-08-16T04:26:16.667536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.845594Z","title":"Deepfool: a sim- ple and accurate method to fool deep neural networks,","venue":null,"work_id":"150a5f93-df87-4a50-921d-5ff05c10a83b","year":2016},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.672979Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:08a4968e8a85a2f83d723444fb23994b46a9b0ee3292b2f0e1d7a42c45581ed0","observation_id":"5bebb873-55b6-43ea-a78e-f3e33ea18aed","resolution":{"observed_at":"2026-08-16T04:26:16.852998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-16T04:26:16.678132Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.678132Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:499c31081d1a1289cb2a39435d11d78d92edf2366a4cd180382468fa943ae356","observation_id":"f666942c-fa63-480a-b02b-50f37028441e","resolution":{"observed_at":"2026-08-16T04:26:16.678132Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.683562Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.683562Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:82383fc2f0d84b7e7cc96b8e90d00b1fb163e1b5f674a5549d984448b67035f2","observation_id":"e2f11497-1be6-470f-b6a7-eec877c92303","resolution":{"observed_at":"2026-08-16T04:26:16.683562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-08-14T21:32:01.874634Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-16T04:26:16.688893Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.688893Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:a0266faeec5e439f4a99a5565c4fb4db87065815cb053f6c4186e44934c1cdf6","observation_id":"140a2449-74d3-44b3-8d86-3fd81f3a7430","resolution":{"observed_at":"2026-08-16T04:26:16.688893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-16T04:26:16.591246Z","title":null,"venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability","version":1},"reference_index":900,"source":"pdf_text","source_observed_at":"2026-08-16T04:26:16.591246Z"},"links":{"citing_paper":"/paper/2505.01328"},"observation_digest":"sha256:6cafd164e82f07ac9df9539c54e8507734d9befbc6a4b77916a8b82b7b1a8a34","observation_id":"c331ebd3-7c6a-40a5-890d-438f8d032d8b","resolution":{"observed_at":"2026-08-16T04:26:16.591246Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.01328","last_updated":"2025-05-02T15:01:42Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-16T04:18:26.088983Z","submitted_at":"2025-05-02T15:01:42Z","title":"Constrained Network Adversarial Attacks: Validity, Robustness, and Transferability"},"reference_resolution":{"displayed":27,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":9,"verified_exact":0,"verified_fuzzy":17},"total_outbound_references":27},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 27 of 27 outbound references and 1 inbound Pith citation observation for arXiv:2505.01328."}