{"as_of":"2026-08-09T06:22:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:595a6e108bc1d0a0f99d7c313b3ca5f3b4b2f6d34ad15a7545ab4f3b9f3fcbea","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:09:00.875854Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16166/citation-record","integrity":"/paper/2505.16166/integrity","json":"/paper/2505.16166/citation-record.json","paper":"/paper/2505.16166"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:09.084520Z","title":"Feature purification: How adversarial training performs robust deep learning","venue":null,"work_id":"ce022679-e996-48d8-a167-ec535f26eb60","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.325451Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:596a3f6dd4363e36d22882406ee3243442d326a1aa28062555cd7478ab47aa0e","observation_id":"73a9b8c0-2172-412f-8c96-5e19b954303d","resolution":{"observed_at":"2026-08-07T15:09:09.123544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1904.06347","last_updated":"2020-03-20T17:59:15Z","snapshot_observed_at":"2026-07-06T07:45:46.835717Z","submitted_at":"2019-04-12T17:59:30Z","title":"Unrestricted Adversarial Examples via Semantic Manipulation","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.06347","snapshot_observed_at":"2026-08-07T15:08:54.449669Z","title":"Unrestricted adversarial examples via semantic manipulation.arXiv preprint arXiv:1904.06347,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.449669Z"},"links":{"cited_paper":"/paper/1904.06347","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:3e1cedb767139a64600cc989d718a8554e2f221e6039e7c995f19cffcf36fcbc","observation_id":"d8aba8de-546e-4df0-8a72-d1642a2991f4","resolution":{"observed_at":"2026-08-07T15:08:54.449669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.923141Z","title":"Diffusion models are certifiably robust classifiers.Advances in Neural Information Processing Systems, 37:50062–50097, 2025","venue":null,"work_id":"5e1e3248-9698-4491-a998-d8868abf25c8","year":2025},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.641068Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:defb62a131c1161323b46d528a2fc8810f3308deb6e5ac2496061fc48d1ff771","observation_id":"ff44c922-c86f-4f6c-98f0-a14008470e79","resolution":{"observed_at":"2026-08-07T15:09:09.011508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.646662Z","title":"Diffusion models for imperceptible and transferable adversarial attack.IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024","venue":null,"work_id":"c4cb6031-4466-4bfa-b60e-641a23b29867","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.745062Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:8dbcb0a961f226053e8e9000f0ec60ee5b429132003d55cd8e5841a7a046023a","observation_id":"749291db-1532-4882-a4aa-2bad68bbe93e","resolution":{"observed_at":"2026-08-07T15:09:08.780813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.425090Z","title":"Content-based unrestricted ad- versarial attack.Advances in Neural Information Processing Systems, 36, 2024","venue":null,"work_id":"583df5e5-b2b3-41d0-a9fd-3527699753f2","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:54.878089Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:d0a22104305f08540566eba2d1e9c2607f0098d57d6f111d0af94733f9a09fbd","observation_id":"450bb7d9-b53d-4f49-8a88-4342e6fdbb4f","resolution":{"observed_at":"2026-08-07T15:09:08.535249Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:08.227214Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"fe9f4430-33b9-4630-984c-717bfa819699","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.049818Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:85597c75172e3ee54a931c1527620fc1513e33f6937d262b9e79d2e454f39334","observation_id":"ee229a87-e568-4418-bbdf-c42dbf4f1a9e","resolution":{"observed_at":"2026-08-07T15:09:08.297307Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T15:08:55.172128Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale.arXiv preprint arXiv:2010.11929, 2020","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.172128Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:a3b2db0a5c4f5e649b5274c0a1c7104f1d2ae9f00ea5fce806eb6b0078b26c34","observation_id":"ccf5737e-8e34-4de8-ba3f-1907520a7ea9","resolution":{"observed_at":"2026-08-07T15:08:55.172128Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.988313Z","title":"Patch-wise attack for fooling deep neu- ral network","venue":null,"work_id":"346f6393-3f56-4330-8401-cc00eae586ff","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.331446Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:592f3036f7c58ab2207e15aff9d8517dadedbdc924d6e7b786a5f45926dabaae","observation_id":"9992e66f-cf70-46b7-b773-cb8a1eb469d2","resolution":{"observed_at":"2026-08-07T15:09:08.104560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.744442Z","title":"Boosting adversarial transferability by achieving flat local maxima.Advances in Neural Informa- tion Processing Systems, 36:70141–70161, 2023","venue":null,"work_id":"fa9cd7f9-fa50-4bf8-9e05-055cfb5152ef","year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.528186Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:66a6c939ca676d817f70d609a2ff0cc7dbfee5dc88220bc8f082951cd1a3331e","observation_id":"ac5756e1-c580-490f-a15b-1854220a65e8","resolution":{"observed_at":"2026-08-07T15:09:07.809041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T15:08:55.719449Z","title":"Explaining and harnessing adversarial examples.arXiv preprint arXiv:1412.6572, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.719449Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:63a66b6f752d0c8592db24dd17560f495fe81380c964d047cbf51d7a369d151a","observation_id":"b12cb4f3-5778-4c40-bc63-9e3363747d0a","resolution":{"observed_at":"2026-08-07T15:08:55.719449Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-07T15:08:55.888342Z","title":"Countering adversarial images using input transformations.arXiv preprint arXiv:1711.00117, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:55.888342Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:d36440ec84d80109c6d35768e7d25645da6464aaf1afd9edc6052c10309cdda3","observation_id":"f8695555-5593-4840-a956-026d1bfd28e1","resolution":{"observed_at":"2026-08-07T15:08:55.888342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:56.042852Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.042852Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2d424cbf5d080590b57adeedd47ea9d231f416ebd535f2ceea966e34531c79b0","observation_id":"0dd0631e-a8df-4a09-b40c-473a04e0ad2a","resolution":{"observed_at":"2026-08-07T15:08:56.042852Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:56.106276Z","title":"Denoising dif- fusion probabilistic models.Advances in neural information processing systems, 33:6840–6851, 2020","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.106276Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:77816045152e0a2ac94972154b39064aaae9596a2f9638eb0e9989432c0ea985","observation_id":"685570b4-852a-44c0-b182-dffbfbca4888","resolution":{"observed_at":"2026-08-07T15:08:56.106276Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.426328Z","title":"Semantic adver- sarial examples","venue":null,"work_id":"349c80dd-0177-4e5e-a70e-4cad0a9b1c87","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.322128Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:1ee46f7d195aaf20d2e5618ca1d91039db0d57cb8c3f5ca8bb69aae197afb3fb","observation_id":"110fc522-221c-4982-88c9-0a32eb19d62d","resolution":{"observed_at":"2026-08-07T15:09:07.549842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.220353Z","title":"A new defense against adversarial images: Turning a weakness into a strength.Advances in neural in- formation processing systems, 32, 2019","venue":null,"work_id":"e74507b4-1a63-4660-91cc-67839509bbb3","year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.467185Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ebf697e926cdc1c5e480285e96acda0901ee41e947f0a48ee2b023ba3546e10a","observation_id":"5f03f795-3ca1-467c-ad2a-609a48fb20a7","resolution":{"observed_at":"2026-08-07T15:09:07.293108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:07.002603Z","title":"Densely connected convolutional net- works","venue":null,"work_id":"c33389b9-c71c-4ec2-a4a3-e70639a33f64","year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.584316Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:4e76edd01629a837ac25c6577b44b3c3eeb990155c1113c7bf9e063a5267978e","observation_id":"bc5ecfa7-1414-43d1-8460-66a904872f50","resolution":{"observed_at":"2026-08-07T15:09:07.123288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.724116Z","title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition.Advances in Neural Information Processing Systems, 35:34136–34147, 2022","venue":null,"work_id":"99cce8c3-8eaf-4b35-86c0-370b1aa80c9a","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.732448Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:c449cbbe3de7ce1dfff60dd7677dfba4f5b4b303bd873fea22168959a1368456","observation_id":"00478bd9-2cfe-4e97-adf9-49591bdf1fd4","resolution":{"observed_at":"2026-08-07T15:09:06.861938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.435283Z","title":"Functional adversarial attacks, 2019","venue":null,"work_id":"1f11c1d8-6c86-491b-923c-973257936c39","year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.822953Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:8a560de9cdd662cb8ecc11249f7aa0f1c3367b07c68c7f060f9612bfe9da52b4","observation_id":"18743755-94fa-4ce2-8809-1f2026517ce3","resolution":{"observed_at":"2026-08-07T15:09:06.547291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:06.187152Z","title":"Adaptive estimation of a quadratic functional by model selection.Annals of statis- tics, pages 1302–1338, 2000","venue":null,"work_id":"0103da36-f03c-4ed7-9a8f-ec0f45e62cea","year":2000},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:56.958142Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:5d7facf50ab2323aadf98f04912c97c867cd494e4f0603e19d9ca1ae8e92b712","observation_id":"971d646f-48af-4882-9a92-f3241c5d5fdd","resolution":{"observed_at":"2026-08-07T15:09:06.298186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.934972Z","title":"Adaptive training meets progressive scaling: El- evating efficiency in diffusion models.arXiv e-prints, pages arXiv–2312, 2023","venue":null,"work_id":"88e05d8e-47be-4446-a03f-003e82c6a640","year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.072192Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:3ca0ee8309e856ea80d1909b993e00275859ef0cea4345a69a602dbc12a27ced","observation_id":"72baf321-de31-4037-8731-ff8fe2032cca","resolution":{"observed_at":"2026-08-07T15:09:06.042553Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.11735","last_updated":"2025-02-02T06:47:16Z","snapshot_observed_at":"2026-08-04T23:26:46.827043Z","submitted_at":"2024-12-16T12:56:57Z","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","version":2},"cited_work":{"arxiv_id":"2412.11735","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.11735","snapshot_observed_at":"2026-08-07T15:09:01.477512Z","title":"Transferable Adversarial Face Attack with Text Controlled Attribute","venue":"cs.CV","work_id":"d5482cf6-dba6-4061-b974-6259cb2ee630","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.261991Z"},"links":{"cited_paper":"/paper/2412.11735","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:754ab55bb9a3c3dfc0f058306e38608d48e28ab54254dce98e51522cefadd64b","observation_id":"9d280168-d3f6-4543-8680-06e1bcb4ff9c","resolution":{"observed_at":"2026-08-07T15:09:01.622410Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.693083Z","title":"A comprehensive sur- vey on test-time adaptation under distribution shifts.Inter- national Journal of Computer Vision, 133(1):31–64, 2025","venue":null,"work_id":"19f3645b-d485-4e6d-b638-365a0d9f30e8","year":2025},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.390051Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7e397978872c18e019afc906377930bfaa44f1b0ccfc9a43a3502497652715d6","observation_id":"2fe2749a-03a8-4a81-9876-f48597ae9913","resolution":{"observed_at":"2026-08-07T15:09:05.798672Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.535217Z","title":"Visual instruction tuning, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.535217Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:bcff5f112bc3832da3098d67100fcd2b2c366a42348d1694ae692e420127fa3a","observation_id":"b783a126-7142-4571-ae94-0887b1c8df57","resolution":{"observed_at":"2026-08-07T15:08:57.535217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.665883Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.665883Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:5e11b4ec861b5ed5ed80d918448b7e6c86e892c72269f1f8878d8dbb90738d5f","observation_id":"db4d0422-405d-4a7a-8cda-271f8c87c29d","resolution":{"observed_at":"2026-08-07T15:08:57.665883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:57.803356Z","title":"Fre- quency domain model augmentation for adversarial attack","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.803356Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:67384d02a48e4ce7eb120d6637b0f2aa9f079b3c4afcaab33836be483853b2f9","observation_id":"053e95a7-d5f2-426f-ad45-c47f10b3fbfd","resolution":{"observed_at":"2026-08-07T15:08:57.803356Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T15:08:57.930077Z","title":"Towards deep learning models resis- tant to adversarial attacks.arXiv preprint arXiv:1706.06083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:57.930077Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:f58e1b1d4a8e558d0e7b3438a4ba644f8913526f043e4d0cc038a7c965718bec","observation_id":"c2dd03d8-194f-425b-a674-468a6afeb0fd","resolution":{"observed_at":"2026-08-07T15:08:57.930077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.356402Z","title":"A self-supervised approach for adversarial robustness","venue":null,"work_id":"82646a3e-4f0b-438a-ac6c-0ca1eac32f5e","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.104611Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:06d6587dc69b10a587f150885e00c35316df0da8826c78284ec683bfb380441e","observation_id":"bfcce371-3267-4e3a-a5bd-069b57aca3f5","resolution":{"observed_at":"2026-08-07T15:09:05.462210Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2112.10741","last_updated":"2022-03-08T18:18:49Z","snapshot_observed_at":"2026-08-07T12:21:17.790675Z","submitted_at":"2021-12-20T18:42:55Z","title":"GLIDE: Towards Photorealistic Image Generation and Editing with Text-Guided Diffusion Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.10741","snapshot_observed_at":"2026-08-07T15:08:58.219446Z","title":"Glide: Towards photorealistic image generation and editing with text-guided diffusion models.arXiv preprint arXiv:2112.10741, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.219446Z"},"links":{"cited_paper":"/paper/2112.10741","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:fb012bd6d2fa900133cfb9e040958db2f3720eaab62e1546d53ec42d3312f496","observation_id":"860b2124-c329-40c2-af50-e488aff1968d","resolution":{"observed_at":"2026-08-07T15:08:58.219446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-04T18:06:26.992880Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-07T15:08:58.305777Z","title":"Diffusion models for adversarial purification.arXiv preprint arXiv:2205.07460,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.305777Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:eb6ce412af6b030f08d95653271df41c7d5d80372bea5b31de29110a75c93240","observation_id":"f816d41b-8613-423a-a657-24322fa6a08f","resolution":{"observed_at":"2026-08-07T15:08:58.305777Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.393446Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.393446Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7a36cc4880cf9bc8c75d528ffce11b56b81d0a1fb4e8aead42764e6c7c343593","observation_id":"91447e25-08d8-4a3e-b1ca-053e77f77019","resolution":{"observed_at":"2026-08-07T15:08:58.393446Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.488950Z","title":"Scalable diffusion models with transformers","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.488950Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0d6b565d33ae7b0df70bbd7ee04a77d5d2162dc48274367dd01f86f2c3be7b6d","observation_id":"90bd0b75-44c4-420a-a233-ee22dff99559","resolution":{"observed_at":"2026-08-07T15:08:58.488950Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:05.049135Z","title":"Semanticadv: Generating adver- sarial examples via attribute-conditioned image editing","venue":null,"work_id":"a122840d-7f06-4287-976e-cc61b8aa2dcd","year":2020},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.579096Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:e5741dc0b5c4a0226613f714d432ea7c922828761b4f28884132b164970038b3","observation_id":"ff03310e-5d45-4ff7-8c2e-73450e80cf3c","resolution":{"observed_at":"2026-08-07T15:09:05.147305Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.786604Z","title":"Learning transferable visual models from natural language supervi- sion","venue":null,"work_id":"cd63686a-b3bf-4f44-8235-0da5e06b311a","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.696906Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:c0595d57a62728bc0299600e929dfd7939b1100c54758b47b545ec3b52e218ff","observation_id":"0a750cce-0b4d-4801-9768-cc84ce7145f3","resolution":{"observed_at":"2026-08-07T15:09:04.927842Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.773160Z","title":"High-resolution image synthesis with latent diffusion models","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.773160Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:25cabe12da10e321715b37ce3b0a9ed74d135e877296fb28bb93b57e665dd103","observation_id":"0905c5a2-72d8-4453-b920-b0eeba9fd18c","resolution":{"observed_at":"2026-08-07T15:08:58.773160Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:58.886922Z","title":"Photorealistic text-to-image diffusion models with deep language understanding.Advances in neural information processing systems, 35:36479–36494, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:58.886922Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:46bdb21bcd0508da2bc58d796411c924f9f55f16b648502f5070938865dd9093","observation_id":"78365cfa-3203-4b6e-a2ab-0fab7306dbc7","resolution":{"observed_at":"2026-08-07T15:08:58.886922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.427687Z","title":"Mobilenetv2: Inverted residuals and linear bottlenecks","venue":null,"work_id":"729f0cfc-79fe-4709-a609-2e5b9513fbf4","year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.000808Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:93235716699d3f7cb8c57fd11248464d4151c0831a3ef1e958ec15fafe63e498","observation_id":"34bfaddd-e22b-4e60-a808-9f74e7064767","resolution":{"observed_at":"2026-08-07T15:09:04.574838Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:04.195002Z","title":"Colorfool: Semantic adversarial coloriza- tion","venue":null,"work_id":"c6725a5a-195e-4b86-bf01-f2cfe780e338","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.073903Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:eea6f0261c39ce4ce0af141181759308a8024a98540b0d6a30d20aac360458f0","observation_id":"b317852b-df28-4242-92a7-aa3f9015fab3","resolution":{"observed_at":"2026-08-07T15:09:04.294291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.158461Z","title":"Generative modeling by esti- mating gradients of the data distribution.Advances in neural information processing systems, 32, 2019","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.158461Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2035428938261b2d1cfa1d149dd9295e1d5e5cca093ac67b8849f354d453f3e1","observation_id":"3dc2f530-503a-48e1-9580-011da365b3b1","resolution":{"observed_at":"2026-08-07T15:08:59.158461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-08-07T15:08:59.331189Z","title":"Score-based generative modeling through stochastic differential equa- tions.arXiv preprint arXiv:2011.13456, 2020","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.331189Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:f5bb7789e0e0e9a38362fbfbc3e09e6de30cdd142804b701f1a54057ce5b1520","observation_id":"db7035ef-3d9d-49c0-89ac-57986fb73e65","resolution":{"observed_at":"2026-08-07T15:08:59.331189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T15:08:59.452646Z","title":"Intriguing properties of neural networks.arXiv preprint arXiv:1312.6199, 2013","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.452646Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0975bb4eab9547bc5326a8a1f25af98ec6191426017d049591953b1e4fd2c963","observation_id":"47079308-1cfd-4e55-9760-cdf61fa0a67d","resolution":{"observed_at":"2026-08-07T15:08:59.452646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.547653Z","title":"Rethinking the inception archi- tecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.547653Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ca3ed81055cc63ee28e8339b166e047a2280c6b2d567ccb7abc2b1eb7b8177f2","observation_id":"e7125f1f-113f-45a0-ac76-249dd433a2c9","resolution":{"observed_at":"2026-08-07T15:08:59.547653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.656565Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.656565Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:916cd643e1dd0ad714742c2109c59735a4e2e41d56e7014a8f726026552e396a","observation_id":"11b252ea-d3a5-4463-abdd-8937384ddbdf","resolution":{"observed_at":"2026-08-07T15:08:59.656565Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.894892Z","title":"Detect- ing adversarial examples from sensitivity inconsistency of spatial-transform domain","venue":null,"work_id":"ca202d7b-4f60-4776-bbc2-1ea48311853f","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.715181Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:cf32309a51008a4493aa94a412fb8af61b8904197141afb72a0c063e1aaac5e2","observation_id":"f61e751a-6aad-45bc-8b13-5f8a7c63ae56","resolution":{"observed_at":"2026-08-07T15:09:04.036938Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.602325Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":"fcb7f515-f572-4fd2-985b-7eb4fe64eb9c","year":1924},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.774420Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:ef80680611349c8b062e0b271f086feb7c5ffea1d6d4dfa811de58039f5af20c","observation_id":"7cde248f-1c85-497d-8aa2-1657f5ec9d54","resolution":{"observed_at":"2026-08-07T15:09:03.726416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.322122Z","title":"Admix: Enhancing the transferability of adversarial attacks","venue":null,"work_id":"bbe0b6e2-1283-47cb-b8de-46362b1e5a81","year":2021},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.847141Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:778caedc19449062827303b60ef6559c30e1f8e108c21ced96fbe87ba9a44aa6","observation_id":"41818089-5530-4e58-8bfd-ed6c1cfd7214","resolution":{"observed_at":"2026-08-07T15:09:03.444372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:59.911938Z","title":"Image quality assessment: from error visibility to structural similarity.IEEE transactions on image processing, 13(4):600–612, 2004","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.911938Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:eb173bfa7ee7ea7342adf80576ff74c1596fb2e933592508e1c9bf077fb27663","observation_id":"bc37b932-7d28-4874-b2b6-c6c8dc5b98b2","resolution":{"observed_at":"2026-08-07T15:08:59.911938Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-07T08:42:27.035615Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-07T15:08:59.975153Z","title":"Generating adversarial examples with adversarial networks.arXiv preprint arXiv:1801.02610,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:08:59.975153Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:5725affbc8c413b618ee29ce988e066afaea868d584ab6e051edf08e1ba5fb9c","observation_id":"cb549de0-e160-4ca9-8980-6d29c1cf4c6c","resolution":{"observed_at":"2026-08-07T15:08:59.975153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02612","last_updated":"2018-01-09T19:03:32Z","snapshot_observed_at":"2026-08-01T18:22:09.370200Z","submitted_at":"2018-01-08T18:51:59Z","title":"Spatially Transformed Adversarial Examples","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02612","snapshot_observed_at":"2026-08-07T15:09:00.067979Z","title":"Spatially transformed adversarial ex- amples.arXiv preprint arXiv:1801.02612, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.067979Z"},"links":{"cited_paper":"/paper/1801.02612","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:e47e10fbeb6c3224c54dd78d9133eadaf26e422368ed60852dbdcf2acc5013b2","observation_id":"67b8c7bf-698d-4c0d-bc2c-b99e8a8be63f","resolution":{"observed_at":"2026-08-07T15:09:00.067979Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T15:09:00.155566Z","title":"Mitigating adversarial effects through random- ization.arXiv preprint arXiv:1711.01991, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.155566Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:aa6c62f45d80d06650dda6572352ae79011cff1b936e60989bfd3a36b516c1c9","observation_id":"f033d2e6-0868-4e15-bb0d-a9b5babf24c1","resolution":{"observed_at":"2026-08-07T15:09:00.155566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:03.047828Z","title":"Stochastic variance reduced ensemble adver- sarial attack for boosting the adversarial transferability","venue":null,"work_id":"6123a54b-0cd0-4617-9d76-2b834fffa51f","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.281807Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:7ba6c4cbec338b3d6487bf110040a80d5f010106fac662672fc1a25ff6a948b0","observation_id":"0c570694-6f2d-4b0a-8039-0edf1ceab3f2","resolution":{"observed_at":"2026-08-07T15:09:03.190756Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:00.362408Z","title":"Imagere- ward: Learning and evaluating human preferences for text- to-image generation.Advances in Neural Information Pro- cessing Systems, 36:15903–15935, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.362408Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:0d9fe628aeee9ca97e535a7d0c7fe70aa01f8cc4da3f91244b38a192d41dca1c","observation_id":"8d04f5b9-c43b-4cf6-b367-736d42ee9d29","resolution":{"observed_at":"2026-08-07T15:09:00.362408Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.731388Z","title":"Quantization aware attack: Enhancing transferable ad- versarial attacks by model quantization.IEEE Transactions on Information Forensics and Security, 19:3265–3278, 2024","venue":null,"work_id":"a934c21d-753c-4ccd-bf40-2143291f77e7","year":2024},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.457765Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:5aa442bab8bbb674fbd23ab4eeebc4748c9a2294c94456c3de78b523cec317e1","observation_id":"aa5d6a97-ea68-44fb-b1c2-f898578c17b9","resolution":{"observed_at":"2026-08-07T15:09:02.868225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.446418Z","title":"Natural color fool: Towards boosting black-box unrestricted attacks.Advances in Neural Informa- tion Processing Systems, 35:7546–7560, 2022","venue":null,"work_id":"132c0279-6e68-4484-816c-d1cfda619a9a","year":2022},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.557557Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:feb6d5353f625c70e952cb8776d271e7981a5688031b6d3d59fdcf083cefda4e","observation_id":"6921f7a7-c833-4133-b057-7d98dc405fe8","resolution":{"observed_at":"2026-08-07T15:09:02.590980Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.01008","last_updated":"2020-08-09T18:23:24Z","snapshot_observed_at":"2026-07-30T12:04:07.202668Z","submitted_at":"2020-02-03T20:44:29Z","title":"Adversarial Color Enhancement: Generating Unrestricted Adversarial Images by Optimizing a Color Filter","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.01008","snapshot_observed_at":"2026-08-07T15:09:00.687141Z","title":"Adver- sarial color enhancement: Generating unrestricted adver- sarial images by optimizing a color filter.arXiv preprint arXiv:2002.01008, 2020","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.687141Z"},"links":{"cited_paper":"/paper/2002.01008","citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:2f194e9f1c9df089caa9ba0e92994e3b2558a428a0120cf5583bb6c191a8c200","observation_id":"0360e510-0234-4bbd-b1e8-dcf3b49e6250","resolution":{"observed_at":"2026-08-07T15:09:00.687141Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:02.218380Z","title":"[39] estab- lished a connection between the DDPM [13] process and stochastic differential equations (SDEs [38]), showing that DDPM can be expressed as a specific form of SDE","venue":null,"work_id":"ce3d9539-3820-460c-b2a5-068b6fdf28ed","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.826204Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:37f57a9c8506de658a31d8b2be506bd2b4769202e336b6fdd1eb38d42bf735e0","observation_id":"39ef3971-0d9d-4937-832c-6f3907004406","resolution":{"observed_at":"2026-08-07T15:09:02.332628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:09:01.995416Z","title":"In the experiments of Section 4.2, we also used Swin-B as the surrogate model, as shown in Table 4","venue":null,"work_id":"1533ea45-6998-445a-9a56-1a68761efee5","year":null},"citing_paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:09:00.875854Z"},"links":{"citing_paper":"/paper/2505.16166"},"observation_digest":"sha256:b1fc0ff84ff2e3c35eb0d1176daa565336b3418f8cd990edb225345864914afe","observation_id":"274649c4-3eb6-4cf9-91e5-2e7265a909b5","resolution":{"observed_at":"2026-08-07T15:09:02.066658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.16166","last_updated":"2025-05-22T03:11:35Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T15:03:56.180607Z","submitted_at":"2025-05-22T03:11:35Z","title":"TRAIL: Transferable Robust Adversarial Images via Latent diffusion"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":27,"verified_exact":1,"verified_fuzzy":28},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2505.16166."}