{"as_of":"2026-08-16T10:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:194d1e7af165dc21c024f4bb0119f82299f141a7481a6642519aef7bdd3313fd","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T21:45:13.105399Z","state":"measured"},{"denominator":58,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":58,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-13T17:08:58.831798Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.11532","snapshot_observed_at":"2026-07-13T17:08:58.831798Z","title":"Revisiting adversarial perception attacks and defense methods on autonomous driving systems","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2605.02900","last_updated":"2026-05-24T13:33:45Z","snapshot_observed_at":"2026-08-12T06:42:35.267467Z","submitted_at":"2026-03-28T13:21:44Z","title":"Safety in Embodied AI: A Survey of Risks, Attacks, and Defenses","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-13T17:08:58.831798Z"},"links":{"cited_paper":"/paper/2505.11532","citing_paper":"/paper/2605.02900"},"observation_digest":"sha256:4571a2a5ab0de4022672db2ba437faaa18072b31bb4854c5db35913e71142cc8","observation_id":"cfe3fa2a-947d-4ceb-88da-a7bc22d5faf6","resolution":{"observed_at":"2026-07-13T17:08:58.831798Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"links":{"evidence":"/evidence","html":"/paper/2505.11532/citation-record","integrity":"/paper/2505.11532/integrity","json":"/paper/2505.11532/citation-record.json","paper":"/paper/2505.11532"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:12.898369Z","title":"Autonomous driving system: A comprehensive survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.898369Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:fa0cef30029e39ccaa573714caca04ff208c62524e2d4aca5aebc3b8934bcd2c","observation_id":"315b6922-0fa1-459a-9849-0829e92d10aa","resolution":{"observed_at":"2026-08-15T21:45:12.898369Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.798626Z","title":"(2024) Model y owner’s manual","venue":null,"work_id":"d64b7b2a-18cf-40c8-bc33-e7307f004f19","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.903209Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:556d7a29f0be8b74192b097aae527315ffc3902101a47b61cc1bacb6e36b6b4a","observation_id":"afdd6acd-c282-45a9-8381-204f7eccacc1","resolution":{"observed_at":"2026-08-15T21:45:13.801945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.775865Z","title":"Deep learning-based perception systems for autonomous driving: A comprehensive survey,","venue":null,"work_id":"aba5cb52-3211-41d1-8423-ccc969236928","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.911104Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:af4576a6e9d2c3aa9bf6bbf99c77ad8496c835bc3c366f8a093c978cb9d9e712","observation_id":"7a74a833-72f1-48ad-8ee9-7d7a44c90c2c","resolution":{"observed_at":"2026-08-15T21:45:13.779890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.765084Z","title":"Adversarial sensor attack on lidar-based perception in autonomous driving,","venue":null,"work_id":"ad69e536-5096-4192-bb83-ea5c8e96c764","year":2019},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.915194Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:8995549a376903f5b3bb2bb84446ff466f51720e67f5dfadc287b887d56cb5f7","observation_id":"8e0245a3-e0c3-41c3-a862-d02be5ccd2f1","resolution":{"observed_at":"2026-08-15T21:45:13.768798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.753866Z","title":"Adversarial attacks on autonomous driving systems in the physical world: a survey,","venue":null,"work_id":"107ffd86-5967-4af0-9f0d-9865b13fb0f2","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.918972Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:0797e226459c5be2486d37493e86f0a804a7d355efa33f3ae7240713e30cbd2e","observation_id":"99307ef8-6aed-4d64-b7a5-7c28e93cd9ac","resolution":{"observed_at":"2026-08-15T21:45:13.757627Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.742221Z","title":"Adversarial driving: Attacking end-to-end autonomous driving,","venue":null,"work_id":"c88fa2ce-205c-433f-8f09-a1d642400c3d","year":2023},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.922790Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:91faea8e779e40359b0f247cfd0304b32539286612439688c449f52efd212316","observation_id":"e272b560-fd27-45fd-a65b-e549241c7ea0","resolution":{"observed_at":"2026-08-15T21:45:13.746212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.787069Z","title":"Available: https://www .tesla.com/ownersmanual/modely/ en_us/GUID-2CB60804-9CEA-4F4B-8B04-09B991368DC5 .html","venue":null,"work_id":"46f55b7d-faf4-45d3-9ace-b57bc90e0dc0","year":null},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.907151Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:2835329b7a4a923b0029c97abadb01b4952abee764bc87428689755b2d94d1f5","observation_id":"a3c4fde0-8fa2-4654-ba65-b0a46624c329","resolution":{"observed_at":"2026-08-15T21:45:13.791616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.728724Z","title":"[Online]","venue":null,"work_id":"88421651-47f6-4672-baa3-824337451cd5","year":2025},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.926874Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:ec4edda42cccf9378275a806c8a79199e63f14d703039a058a1312048c2f5553","observation_id":"78173cf2-edec-41a9-a456-ec016b9eb294","resolution":{"observed_at":"2026-08-15T21:45:13.734300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.716428Z","title":"OpenPilot","venue":null,"work_id":"5d973ad1-2e3a-46ba-9e11-5496de3b411c","year":null},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.930599Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:6baa8dbd395e0b9fa72fdf9e35693a80ef2bebf0d470ab0a80dae55df913a94d","observation_id":"d303dbbc-2eea-4aaf-868a-db03b84efe48","resolution":{"observed_at":"2026-08-15T21:45:13.721253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.704282Z","title":"(2024) Gaussian noise - wikipedia","venue":null,"work_id":"c99800c5-7b09-4665-916f-28d5d2ae4317","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.934022Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:99e6f6d1896a02452a49872c54534025406945669e6c056af86f0603521bf154","observation_id":"f69e24e9-bc01-4da1-931d-055a259857cd","resolution":{"observed_at":"2026-08-15T21:45:13.708773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-12T17:13:46.394331Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-15T21:45:12.937460Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.937460Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:08ecdde8908b171b55f5daff9e436edff59705e5d3b9a29d331a5e7d3d138c9d","observation_id":"5d514e7e-7e90-4139-a01c-0fcc6303b071","resolution":{"observed_at":"2026-08-15T21:45:12.937460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2003.01690","last_updated":"2020-08-04T18:31:08Z","snapshot_observed_at":"2026-08-13T05:53:26.580440Z","submitted_at":"2020-03-03T18:15:55Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2003.01690","snapshot_observed_at":"2026-08-15T21:45:12.941320Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.941320Z"},"links":{"cited_paper":"/paper/2003.01690","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:77ee1570af6338ec7b66bdc378521e68a2e7212545d42f3c2e7ae959719c4451","observation_id":"ec9aaa32-a67f-4f3f-b6de-4bd8986fcc55","resolution":{"observed_at":"2026-08-15T21:45:12.941320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1905.07121","last_updated":"2019-08-15T14:12:57Z","snapshot_observed_at":"2026-08-14T16:30:50.567859Z","submitted_at":"2019-05-17T06:00:41Z","title":"Simple Black-box Adversarial Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1905.07121","snapshot_observed_at":"2026-08-15T21:45:12.945407Z","title":"Simple black-box adversarial attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.945407Z"},"links":{"cited_paper":"/paper/1905.07121","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:975439b31bd48c76df21b14b7fbfd9fb78aff5bca0fce61dfa1d203a2f25a386","observation_id":"00fcbbc0-7d2c-4e55-ba64-ca193a18f79e","resolution":{"observed_at":"2026-08-15T21:45:12.945407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:12.949305Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.949305Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:dff521929eda2918dbbaa44d8ea7d1a08d6cfbe54d9a89702164d3a2790049e1","observation_id":"fdf0e87b-2f61-4762-9e2f-66d3ca2402e0","resolution":{"observed_at":"2026-08-15T21:45:12.949305Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.686405Z","title":"Runtime Stealthy Perception Attacks against DNN- Based Adaptive Cruise Control Systems,","venue":null,"work_id":"c123c5f8-0e55-4dc8-bb12-6c2e9b540719","year":2025},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.952789Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:e0ddb777d7606b770847eca921d4b3216f96c1dde878d1b085b62ec9ae5216a4","observation_id":"8b86ea49-78c6-451f-a7a2-d4f35609b6e1","resolution":{"observed_at":"2026-08-15T21:45:13.690200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:12.956308Z","title":"Sensor and sensor fusion technology in autonomous vehicles: A review,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.956308Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:55c0fb9fe7e30997b4029fc957c5158fe24dea5dac36db82f5573617cb73d0eb","observation_id":"b55656f5-afeb-41f1-a694-72ad5c47ce73","resolution":{"observed_at":"2026-08-15T21:45:12.956308Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.669770Z","title":"Vehicle localization with low cost radar sensors,","venue":null,"work_id":"cd729666-89c7-47cc-8c1a-ac64d2a90d19","year":2016},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.959662Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:78ce254ea651374271e2966e9af34ae28a856fdccadebecc1c624d2b23d5e41b","observation_id":"2b109e6d-1857-42e1-b4b2-daff35d8b49e","resolution":{"observed_at":"2026-08-15T21:45:13.673364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.658642Z","title":"In-vehicle camera traffic sign detection and recognition,","venue":null,"work_id":"1219a434-2239-409a-b5e0-85e167419a17","year":2011},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.963187Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:d8f214166054dc3d8cb3f2c206c2b770198ad5c8819c20449ea8684faa82558c","observation_id":"094422a4-ed5c-495a-87bb-3af06e245363","resolution":{"observed_at":"2026-08-15T21:45:13.662277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.647244Z","title":"A deep learning approach to traffic lights: Detection, tracking, and classification,","venue":null,"work_id":"21e6dc24-635b-4692-a374-3a3f7d8d8c5e","year":2017},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.966739Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:745bf4224fef50d2ca8b728d23ce74d8bbf02b3960e5fbf2c3142916d15950f8","observation_id":"7fffc0c0-3e72-46df-9bd1-3fbac64ce038","resolution":{"observed_at":"2026-08-15T21:45:13.651145Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.634868Z","title":"A real-time computer vision system for vehicle tracking and traffic surveillance,","venue":null,"work_id":"f7bdd302-8415-4965-b05a-f37cd4c1ebe8","year":1998},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.970293Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:6edb1e5c1b07d8335e09f6935afa5b4bd6f90f6361d8d467db2548bc0a4ba948","observation_id":"e046caef-5a93-47fb-b691-e38e66e690e6","resolution":{"observed_at":"2026-08-15T21:45:13.639101Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.622867Z","title":"A review of lidar sensor technologies for perception in automated driving,","venue":null,"work_id":"5c5f57f8-4711-45a5-8229-a01ff2287aa3","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.973945Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:1c6442dfdab647afaa1b9af9e68a2f074e477bfb9180aea01bf9bdaeebb28c7b","observation_id":"550fdc81-a4df-4b3d-a1ae-fde77d2ae9d0","resolution":{"observed_at":"2026-08-15T21:45:13.626901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1911.05268","last_updated":"2019-11-15T23:07:01Z","snapshot_observed_at":"2026-08-13T05:53:29.834753Z","submitted_at":"2019-11-13T03:09:40Z","title":"Adversarial Examples in Modern Machine Learning: A Review","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1911.05268","snapshot_observed_at":"2026-08-15T21:45:12.977695Z","title":"Adversarial examples in modern machine learning: A review,","venue":null,"work_id":null,"year":1911},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.977695Z"},"links":{"cited_paper":"/paper/1911.05268","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:58d29a122417182ca4af4ffe207893c68c665eeaa160d5d56ebf6b8a5d9543cf","observation_id":"f22ba1b4-006d-443c-8e2d-ead9ed6dfa43","resolution":{"observed_at":"2026-08-15T21:45:12.977695Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.610311Z","title":"Adversarial attacks and coun- termeasures on image classification-based deep learning models in autonomous driving systems: A systematic review,","venue":null,"work_id":"8c05dde3-799e-4bce-b35d-9f6fd3b4e5cf","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.981878Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:92c82a11fe471c81242215d3d0d864e887a7abaad294d5266c9ffdba2fe91988","observation_id":"0f508d9c-dd30-4663-857b-14abcf75ea2e","resolution":{"observed_at":"2026-08-15T21:45:13.614882Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.597839Z","title":"Efficient defenses against adversarial attacks,","venue":null,"work_id":"940f548f-8fbf-4f35-ada5-d18c966dbe9e","year":2017},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.985746Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:862105df016180821a67b4dd484f2fd052c6b85c85535b94d09930643aefdd44","observation_id":"618819aa-78a9-4515-bef2-475aaf96f540","resolution":{"observed_at":"2026-08-15T21:45:13.601625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:12.989483Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.989483Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:4b1e853e162d6aeeaaf7a58d352aaf5e27d3b43514debeda52b9e43131460d88","observation_id":"4833f3f3-8ca5-44eb-aec7-8aa4930b8b9a","resolution":{"observed_at":"2026-08-15T21:45:12.989483Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-14T20:16:33.101754Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-15T21:45:12.993059Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.993059Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:93db230fa980f8ed4d9e8d6a988808d67b1a6a4b3459940bfd77def88527c887","observation_id":"7626ddde-8cdc-4233-bc21-d104a1a7a027","resolution":{"observed_at":"2026-08-15T21:45:12.993059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.15042","last_updated":"2024-10-19T08:57:35Z","snapshot_observed_at":"2026-08-12T22:19:34.340741Z","submitted_at":"2024-10-19T08:57:35Z","title":"Adversarial Training: A Survey","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.15042","snapshot_observed_at":"2026-08-15T21:45:12.996848Z","title":"Adversarial training: A survey,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:12.996848Z"},"links":{"cited_paper":"/paper/2410.15042","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:bf6154753fd98cf60a739ece800dde780474791eda06444a037a95b78a4ce5dc","observation_id":"849d362b-3f5f-48ab-9cca-611925e5bfcc","resolution":{"observed_at":"2026-08-15T21:45:12.996848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.587039Z","title":"Denoising diffusion models for plug-and-play image restoration,","venue":null,"work_id":"1bfc9efb-f65d-4a32-8465-21a59fff065a","year":2023},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.000610Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:7d71e26460c54f48509462dc68c8cac5f2a2c9db029f9cd280b065b12e308c7b","observation_id":"fd452e14-ff8a-4ab8-bffe-ed21a0f55de8","resolution":{"observed_at":"2026-08-15T21:45:13.590822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.05709","last_updated":"2020-07-01T00:09:08Z","snapshot_observed_at":"2026-08-15T20:49:51.676387Z","submitted_at":"2020-02-13T18:50:45Z","title":"A Simple Framework for Contrastive Learning of Visual Representations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.05709","snapshot_observed_at":"2026-08-15T21:45:13.004391Z","title":"A simple framework for contrastive learning of visual representations,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.004391Z"},"links":{"cited_paper":"/paper/2002.05709","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:6331382d8df093449db279213c2c68665b668f815126bfe357475ce22556bde8","observation_id":"14f9874b-7ac2-4e31-9d3a-8c8a5fffdbec","resolution":{"observed_at":"2026-08-15T21:45:13.004391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.574384Z","title":"Car detection dataset,","venue":null,"work_id":"cfb9488d-8d9f-4768-9df0-b0e70d19feb8","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.008266Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:e8c7f18e60f5a65549043827be2764a95483c3cb40781fcd15ca9c8177e8d57e","observation_id":"3e5135ee-0514-4acf-b128-0c6e2744cbf2","resolution":{"observed_at":"2026-08-15T21:45:13.578140Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.563925Z","title":"Strategic resilience evaluation of neural networks within autonomous vehicle software,","venue":null,"work_id":"b6f47b7c-42b1-48aa-916a-304f68165150","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.011839Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:43280f2afad67a1502116fcd8b83b7e01f8294f344c773db7feda0887bfd91e8","observation_id":"5d78c1b8-4d1c-4324-8d06-66fc77c3d291","resolution":{"observed_at":"2026-08-15T21:45:13.567622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.552439Z","title":"Strategic Safety-Critical Attacks against an Advanced Driver Assistance System,","venue":null,"work_id":"209a0eb0-d0a0-40df-abef-bc6f26912001","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.015411Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:cfc31e70144179ab2c8901b4e561c45db510a8beca9cbdebc55a21ba6dbc2627","observation_id":"8987cb88-5fcd-478f-8ef7-5265202dd03c","resolution":{"observed_at":"2026-08-15T21:45:13.557081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.018809Z","title":"A commute in data: The comma2k19 dataset,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.018809Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:b5b69c08af2bb1e6688961fcb3e649cfc33f70f6872163ec7d7e669f445b1b56","observation_id":"44d64754-c76e-4aad-8ba2-181f94b6d45a","resolution":{"observed_at":"2026-08-15T21:45:13.018809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09515","last_updated":"2021-03-22T14:20:51Z","snapshot_observed_at":"2026-07-06T10:05:47.267562Z","submitted_at":"2020-10-19T13:49:29Z","title":"Improving Transformation Invariance in Contrastive Representation Learning","version":2},"cited_work":{"arxiv_id":"2010.09515","doi":null,"metadata_source":"pith","pith_arxiv_id":"2010.09515","snapshot_observed_at":"2026-08-15T21:45:13.167526Z","title":"Improving Transformation Invariance in Contrastive Representation Learning","venue":"cs.LG","work_id":"a95dc40f-f493-452d-90f8-9d184aa37bd5","year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.022470Z"},"links":{"cited_paper":"/paper/2010.09515","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:6d4f07389cf32d015db413a249fc483e30c4a79c051cb5a3d1a3556d48a375d9","observation_id":"5d5ad899-c516-4315-8213-ca398ddcca63","resolution":{"observed_at":"2026-08-15T21:45:13.171631Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.533124Z","title":"Poba-ga: Pertur- bation optimized black-box adversarial attacks via genetic algorithm,","venue":null,"work_id":"868bab0a-dbc5-40fc-95e0-5bf2970f86f2","year":2019},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.026560Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:5764cbfc8332f3029a588dc5291f19c563c7cbefc0acee256fc536d514c742e2","observation_id":"df187cee-90d0-4c60-bc4b-a90c1d2319bb","resolution":{"observed_at":"2026-08-15T21:45:13.537389Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.521422Z","title":"Robust roadside physical adversarial attack against deep learning in lidar perception modules,","venue":null,"work_id":"12bca800-7472-40fe-85e7-a11a695afd07","year":2021},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.030076Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:7018d8463a533cc7f2249aca1b15a31580a6ce96853a45720bd569b487453587","observation_id":"9595a43f-90a3-4eaa-b56e-49b187f0faaf","resolution":{"observed_at":"2026-08-15T21:45:13.525390Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.033879Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.033879Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:43e81ec23d0b55666c31558885554ca2b956ade66c2a2148aef379daf529e86e","observation_id":"6341b5b9-fb9f-45cd-9ec0-58e305e6bce5","resolution":{"observed_at":"2026-08-15T21:45:13.033879Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.501646Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":"1293687e-4f31-4d8f-be65-eedc497e0788","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.037238Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:b0824be6fefafaa64bee1802305e9f454850920a0f5ca7bf4a5faca0f487c5f7","observation_id":"8adfd14b-c149-43ff-9b85-1829b058928b","resolution":{"observed_at":"2026-08-15T21:45:13.505457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2209.02430","last_updated":"2023-05-23T12:29:21Z","snapshot_observed_at":"2026-08-13T14:34:07.805559Z","submitted_at":"2022-09-02T08:22:32Z","title":"Adversarial Color Film: Effective Physical-World Attack to DNNs","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2209.02430","snapshot_observed_at":"2026-08-15T21:45:13.040945Z","title":"Adversarial color film: Effective physical-world attack to dnns,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.040945Z"},"links":{"cited_paper":"/paper/2209.02430","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:822e1a91fd7bb9c146ffcd4a2a7a7d8c0b93b9d0e2418de1dc5b271b052b0374","observation_id":"2ff9261f-7fcc-491b-b06f-b8e09a4f56e1","resolution":{"observed_at":"2026-08-15T21:45:13.040945Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.044422Z","title":"Targeted attention attack on deep learning models in road sign recognition,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.044422Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:1fe4eac2655af4230dd1c75e36d0ee1fb041c4cbb3ed428b49c28038ceff157c","observation_id":"32b66c86-9b12-4966-a2c4-5ca7c587630e","resolution":{"observed_at":"2026-08-15T21:45:13.044422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.048024Z","title":"Too good to be safe: Tricking lane detection in autonomous driving with crafted perturbations,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.048024Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:fc20a9446e8833078e4b9172eb58fb105a3c5d3f781c1976f82215d8209ce671","observation_id":"75372dea-aae5-4ae2-8b89-4eb9cd89f7eb","resolution":{"observed_at":"2026-08-15T21:45:13.048024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.475182Z","title":"Attacking vision-based perception in end-to-end autonomous driving models,","venue":null,"work_id":"a4f43b9c-74fb-48a2-bb90-d9810b003861","year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.051492Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:db22c05224e6d02eeb419790d1997ef9ee181480a0db0ad86509f3e44a1f5544","observation_id":"d65a58b8-7115-461c-aa10-005fb23f96eb","resolution":{"observed_at":"2026-08-15T21:45:13.479415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.463559Z","title":"Physical hijacking attacks against object trackers,","venue":null,"work_id":"b29c4b0f-78f8-45b4-b09e-2bf32413406e","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.055385Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:4745c0d013777a9c4912ace90aa778b9a12566a5d0e70d3d1183f01207712e2b","observation_id":"137d3261-6ba8-4f44-bed5-0d43bce1e6a7","resolution":{"observed_at":"2026-08-15T21:45:13.467675Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.452318Z","title":"Advdo: Realistic adversarial attacks for trajectory prediction,","venue":null,"work_id":"c4e51e1a-4b4d-4134-ba9f-cc2e25fc3d00","year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.058650Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:d180b83b02b3ad6cd94fe0c94f54fb59cc1a09f538636bfad095922a05a9b898","observation_id":"2e5036bc-0d91-416e-b7b4-85934bb4ffab","resolution":{"observed_at":"2026-08-15T21:45:13.456079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.441094Z","title":"Physically realizable adversarial examples for lidar object detection,","venue":null,"work_id":"c9508f3f-ad5a-4a4a-8e44-cd1d2603f033","year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.062233Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:ad5e988d42fbe98291ac4d1d93339363ca3974452519e1f7d68eea8e3c0dfe3a","observation_id":"9cb13ff6-d376-4902-8ba2-5c9a38983397","resolution":{"observed_at":"2026-08-15T21:45:13.445037Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.065807Z","title":"Beyond digital domain: Fooling deep learning based recognition system in physical world,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.065807Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:7077239178b2c973b02858afb41d6074b0ad2b985efa804e2a7772b0ae3db8ce","observation_id":"dc6537fa-3acb-4f72-a5a4-2c93ed44595d","resolution":{"observed_at":"2026-08-15T21:45:13.065807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.421943Z","title":"Dual attention suppression attack: Generate adversarial camouflage in physical world,","venue":null,"work_id":"ccac5c43-770b-4226-ba41-481374a8257b","year":2021},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.069382Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:572b274d4c0facd4528fa18e00111f77b9f5bbb7be94fe3b856e006078ece652","observation_id":"7a5fd2be-8cd2-4c00-8c8d-61eb43189360","resolution":{"observed_at":"2026-08-15T21:45:13.426139Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.072683Z","title":"Robustness testing of data and knowledge driven anomaly detection in cyber-physical systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.072683Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:fee62bec9fdce2c70af8a88ea9d4c29cbed59244c286e832d0ee22f478a29164","observation_id":"bd146f8b-13d3-41f7-9448-50ae59116293","resolution":{"observed_at":"2026-08-15T21:45:13.072683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2404.19460","last_updated":"2025-05-12T07:37:51Z","snapshot_observed_at":"2026-08-15T01:00:48.267344Z","submitted_at":"2024-04-30T11:19:05Z","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","version":3},"cited_work":{"arxiv_id":"2404.19460","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.19460","snapshot_observed_at":"2026-08-15T21:45:13.137804Z","title":"AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples","venue":"cs.LG","work_id":"65854792-24db-4c24-a876-74efee7ac9b0","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.076068Z"},"links":{"cited_paper":"/paper/2404.19460","citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:0db78c72ff5ee1e0f29211ff3875a0a5d664ff67e23fd7663faf3de5fef4ecf7","observation_id":"5bac037b-3dd4-42ed-9629-1213de3d97ff","resolution":{"observed_at":"2026-08-15T21:45:13.143999Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.079740Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.079740Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:ddf73f0f291c3e3c37d69f90c4584bed7b1685fe51e1041dec7bb2fb79769f78","observation_id":"d4053acd-a361-4e52-a7e1-164712c38541","resolution":{"observed_at":"2026-08-15T21:45:13.079740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.395524Z","title":"Defense against adversarial attacks using high-level representation guided denoiser,","venue":null,"work_id":"6ed460a4-c39f-489c-91df-63fe056db000","year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.083111Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:9630b7328cce693b614b996e3b3eb7e2b6533b9c9bd5b36fa90a75425340ea89","observation_id":"d4a88d96-970d-4373-8ba6-3c3f3c144e8b","resolution":{"observed_at":"2026-08-15T21:45:13.399714Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.383050Z","title":"Adversarial defense by stratified convolutional sparse coding,","venue":null,"work_id":"a82d11fb-86e4-48da-a08f-8fd96997379a","year":2019},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.086880Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:03ce5ea64d05766518f98c762aa2d101fbf4ffac261b2ca570e7b476e9eedf95","observation_id":"c75132c2-ac28-429f-a10e-9c066dfc422c","resolution":{"observed_at":"2026-08-15T21:45:13.387365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.371310Z","title":"Defense against universal adversarial perturbations,","venue":null,"work_id":"37f78167-0cf8-4b06-82aa-5da1e72d29ca","year":2018},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.090741Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:ff679f6bc06ce76b7a889603b6b79df345025e7cf6330791a22af2cebdd90dbc","observation_id":"7bdd5fe8-dc00-47c6-93ac-7ce56d1da89b","resolution":{"observed_at":"2026-08-15T21:45:13.375299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.359484Z","title":"Hybrid knowledge and data driven synthesis of runtime monitors for cyber- physical systems,","venue":null,"work_id":"b99712ab-31d6-494c-9f74-60b471362cb9","year":2023},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.094387Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:6a12b6d26fcb8deac49b29ffd4e1260dfa5c3b79117b7081164478e66661bd6c","observation_id":"a647adce-e53b-4dbd-9b37-ad6d4d13976c","resolution":{"observed_at":"2026-08-15T21:45:13.363547Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.347910Z","title":"Data-driven design of context-aware monitors for hazard pre- diction in artificial pancreas systems,","venue":null,"work_id":"a4bbfa97-4423-4d63-8913-6bfef2c6328c","year":2021},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.097867Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:99bbbd03447953e5559b740a1a2c450ac08009ecd40ae017d711a2b345b85ba7","observation_id":"7d1649cb-04ad-4da6-a796-8fd156a63b2e","resolution":{"observed_at":"2026-08-15T21:45:13.351826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.336445Z","title":"Safety interventions against adversarial patches in an open-source driver assistance system,","venue":null,"work_id":"898c486a-54be-4bf7-8fd6-4ac209ca793b","year":2025},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.101713Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:d41c92406d7f91da0f307934565892c0109af2d1e55bdaec669f7d5c00e82001","observation_id":"1f6d6be1-9123-4156-bb5f-2b1183858621","resolution":{"observed_at":"2026-08-15T21:45:13.340481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-15T21:45:13.323904Z","title":"Adversarial attacks and defenses in deep learning for autonomous vehicles: A systematic review from a safety perspective,","venue":null,"work_id":"bbcf8c90-f890-4780-a05b-30bd3aaa5c13","year":2024},"citing_paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-15T21:45:13.105399Z"},"links":{"citing_paper":"/paper/2505.11532"},"observation_digest":"sha256:e50ec301896e5ff117299c0cb4929ebf88df21fa2fcfc77911ca06f39bd47ee0","observation_id":"cf4c6b94-eaea-42f8-9e40-543df026db0b","resolution":{"observed_at":"2026-08-15T21:45:13.328440Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.11532","last_updated":"2025-05-23T17:44:21Z","latest_version":2,"primary_category":"cs.RO","snapshot_observed_at":"2026-08-15T21:38:44.735111Z","submitted_at":"2025-05-14T02:05:34Z","title":"Revisiting Adversarial Perception Attacks and Defense Methods on Autonomous Driving Systems"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":19,"verified_exact":2,"verified_fuzzy":36},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 1 inbound Pith citation observation for arXiv:2505.11532."}