{"as_of":"2026-08-08T09:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f194264b949a2251b1d50727b07c98bd73b44ee13936221e2a50447c651f4a61","coverage":[{"denominator":59,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":59,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:05:46.425293Z","state":"measured"},{"denominator":59,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":59,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16402/citation-record","integrity":"/paper/2505.16402/integrity","json":"/paper/2505.16402/citation-record.json","paper":"/paper/2505.16402"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-07T15:05:40.195013Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.195013Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:8495216d6f2ff76b00bda14c17e750a3f4e28b407107db7d459d3fb68641c743","observation_id":"b294fc08-f071-46d5-b22c-c40bdbf064ee","resolution":{"observed_at":"2026-08-07T15:05:40.195013Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.344658Z","title":"Camopatch: An evolutionary strategy for generating camoflauged adversarial patches,","venue":null,"work_id":"e14ee87b-2468-4ce3-aa75-39be419f87cb","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.270485Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b4078467c9a115b17bb69c15ba40548ec816cd412fb99702cbd5507b651fd4ae","observation_id":"59fc76ae-ab2b-4479-84fa-d4269797129a","resolution":{"observed_at":"2026-08-07T15:05:53.378835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.260923Z","title":"Stealthy and effective physical adversarial attacks in autonomous driving,","venue":null,"work_id":"6d05287a-bd05-4a4b-80bc-0fbb5022c0cd","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.395655Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1bb0243acd128e1a90930cdb69995fa52af1d5f35d3ff0e16572f47eefa4b257","observation_id":"e1d4974f-730c-4c68-b844-d27ab7c8952e","resolution":{"observed_at":"2026-08-07T15:05:53.301502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.145941Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":"37492f9d-17d0-41b7-a02c-2ca20d1d6748","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.468281Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:6e011a61e552be225c250c2228839a8a9eb2d8144c0ce0a8ccce66f272b94aaa","observation_id":"df57fa6f-5701-43d9-b45a-5eaf87b5b0f0","resolution":{"observed_at":"2026-08-07T15:05:53.205846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:53.052238Z","title":"Eap: An effective black-box impersonation adversarial patch attack method on face recognition in the physical world,","venue":null,"work_id":"ac38c35b-31c5-4d73-8188-596c9504b63d","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.582156Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:016ce7591730ca6f73f9b116b2c5e090d4af337e4c36270863179f3b1d8784a8","observation_id":"e3a7ba28-e017-4bac-8d63-7e9ff3b7dd26","resolution":{"observed_at":"2026-08-07T15:05:53.090481Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.928756Z","title":"Fooling human detectors via robust and visually natural adversarial patches,","venue":null,"work_id":"b8e17e9d-9160-4ad1-9e9f-21415deb3774","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.684835Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1a6f0c92b78ccff2593da9dda05d7a7e3b567cce227da55fceef67e9f5d2128f","observation_id":"7495cf1f-b8f7-4f5c-a450-7c4d08f4e35f","resolution":{"observed_at":"2026-08-07T15:05:52.978248Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.817845Z","title":"Deep learning-based few-shot person re-identification from top-view rgb and depth images,","venue":null,"work_id":"45d6a771-be42-463a-93e7-ebe0d9de5d9d","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.771046Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:00c5b989f922116510df7507770e99d690abe4b4d2652f27bb1e1c0ccf597e51","observation_id":"1dc2eac2-08ea-4938-87fa-1234bf4cc29e","resolution":{"observed_at":"2026-08-07T15:05:52.870335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.743565Z","title":"Fooling automated surveillance cameras: adversarial patches to attack person detection,","venue":null,"work_id":"f9fbd6a4-696d-4b3d-a5fe-eb13e8a3792d","year":2019},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.889022Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:8a88dd12caedeeb378bc26bcb6df02382fb6d1dc186c6cfc1475711dd8f88516","observation_id":"f9c36cb8-dc4c-44d3-9a7d-3f5e92906262","resolution":{"observed_at":"2026-08-07T15:05:52.769941Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:40.978536Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:40.978536Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:a1e0c9a1670b4f9ca99f31583876335235c350f39ed05f2fd0368825f7872b68","observation_id":"cc2f081d-c734-4c59-bc96-926897c9cbb3","resolution":{"observed_at":"2026-08-07T15:05:40.978536Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:41.200066Z","title":"End-to-end object detection with transformers,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.200066Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4f3530173b8e6cbc7ad037f182e857db2f4c3e7c094a03fef90e33a6bedda596","observation_id":"114e0314-ebb5-4f3f-9630-bf7684f5d134","resolution":{"observed_at":"2026-08-07T15:05:41.200066Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.618172Z","title":"Adversarial texture for fooling person detectors in the physical world,","venue":null,"work_id":"8761f8ed-098c-4183-b3e1-6d363c18b9c3","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.305635Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:33c881557f07c051dea125fb66b26831bda3a2834b14f2291e468e5aeef397ec","observation_id":"554e68b8-91c0-4e1b-8cc7-7faaf10f3255","resolution":{"observed_at":"2026-08-07T15:05:52.665153Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.11101","last_updated":"2021-04-22T14:36:08Z","snapshot_observed_at":"2026-08-05T07:33:49.568937Z","submitted_at":"2021-04-22T14:36:08Z","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","version":1},"cited_work":{"arxiv_id":"2104.11101","doi":null,"metadata_source":"pith","pith_arxiv_id":"2104.11101","snapshot_observed_at":"2026-08-07T15:05:46.679973Z","title":"Learning Transferable 3D Adversarial Cloaks for Deep Trained Detectors","venue":"cs.CV","work_id":"64d4afe4-67e5-4653-b2ab-a5bcaeb83325","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.387001Z"},"links":{"cited_paper":"/paper/2104.11101","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:48cc0a8c4b63fc1d1f4e8c3466d23292a7447f2752842961d78bf0bf13fd8e30","observation_id":"cd94f752-f6a4-44f9-8e9b-3410c9064c62","resolution":{"observed_at":"2026-08-07T15:05:46.808764Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.511852Z","title":"Adversarial t-shirt! evading person detectors in a physical world,","venue":null,"work_id":"1480fac1-840a-41ea-b612-87925556b8dd","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.527215Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:5a93b1f6d98224edd5d886fdbc46f90e43740d48c22866951a93910a295121e8","observation_id":"fe3b3c5d-c593-4925-81e2-07e340fb4a1e","resolution":{"observed_at":"2026-08-07T15:05:52.560124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.393366Z","title":"Adversarial objectness gradient attacks in real-time object detection systems,","venue":null,"work_id":"be04aaa4-2be1-4a3b-9329-a364c3bc51ee","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.630358Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4d45ee686b7e24897603389fba8d581dbcade687f92e7b118c3112eb72a4118c","observation_id":"242908f1-ae85-4829-8ab5-982d2541e876","resolution":{"observed_at":"2026-08-07T15:05:52.457072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.284695Z","title":"Naturalistic physical adversarial patch for object detectors,","venue":null,"work_id":"bbe6d1e0-82fd-4330-a339-710add6042a0","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.679616Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:459e6de1499e66032cf0a1bbd26dbfdb2fb7c37b09b4aa45931a47efdabb8dea","observation_id":"09f68886-057f-4480-a8b0-208c643e8f9d","resolution":{"observed_at":"2026-08-07T15:05:52.331235Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.202747Z","title":"Dap: A dynamic adversarial patch for evading person detectors,","venue":null,"work_id":"a6b3d0c1-fca5-4d89-b557-063f2c1f60d4","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.772759Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b34386c4091c1e5b79e88c3db82ad1ec35d681dc99f1f76c96515d689d6bfa13","observation_id":"102eba8a-d9b9-4206-bfa8-88b0efebe0a3","resolution":{"observed_at":"2026-08-07T15:05:52.241431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.109361Z","title":"Pad: Patch-agnostic defense against adversarial patch attacks,","venue":null,"work_id":"fbc775a9-401a-43ff-948a-6b1bd3c45d4b","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.890215Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:861f039d856b2c2f781a67986136668a2aa8b10ea515d480bbd14c025c8b7f46","observation_id":"b11ca903-0953-4b93-8145-a74ec0e9d2fe","resolution":{"observed_at":"2026-08-07T15:05:52.150965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:52.005058Z","title":"Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,","venue":null,"work_id":"0011030e-fa87-4ecb-a523-a7c55c65afc6","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:41.993334Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:512312c6d9b3b07b9d024c15a7a9e43977c1dee2d60a95dafb455c9c66a0d91b","observation_id":"49186be2-5b10-438d-a662-543179f7fa24","resolution":{"observed_at":"2026-08-07T15:05:52.056265Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.786827Z","title":"Reap: a large-scale realistic adversarial patch benchmark,","venue":null,"work_id":"52c76e67-0125-4c44-8c95-ed0a1bb1d3f2","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.098031Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:812385b4fd7ed74e9b264f501df9258a90ad0aa733ae382e16f90dda5eaffb2b","observation_id":"e740d650-c1c0-4c63-90a8-dd34f7ca1b83","resolution":{"observed_at":"2026-08-07T15:05:51.899948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:42.173364Z","title":"nuscenes: A multimodal dataset for autonomous driving,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.173364Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:4dc9b2452f7a1f9a2bb7104d9c43247697d858f63d3fb4abb7e62b176a944549","observation_id":"f518c8ce-8b97-4e85-9f89-6a991bcf2e22","resolution":{"observed_at":"2026-08-07T15:05:42.173364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.477377Z","title":"Yolo9000: better, faster, stronger,","venue":null,"work_id":"626ca862-fb6d-4ac7-bd5d-0ad5499ad59e","year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.285282Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ec239c8b864118a33e5904be0cc4ed66c9f84ced34e66c5de19f0fd6c0008b2c","observation_id":"848b69bf-03a8-45d2-a64b-3b671c43c072","resolution":{"observed_at":"2026-08-07T15:05:51.622021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-06T11:09:16.409556Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-07T15:05:42.373493Z","title":"Yolov3: An incremental improvement,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.373493Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:6bd991105f3753aedd82303a8695a1228da7c111220859589160d722b1e844c2","observation_id":"b3ab7286-07e1-400e-8699-0f2a2efd0b42","resolution":{"observed_at":"2026-08-07T15:05:42.373493Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.258454Z","title":"ultralytics/yolov5: v3. 0,","venue":null,"work_id":"d719775f-8266-4c15-9698-f6822045de4d","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.482773Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:29212a966e45f69219dbc2f04e1fd597aa64b7814c2924c1e282cd435b840062","observation_id":"d1362225-2722-4101-8257-99f1a58ae3ff","resolution":{"observed_at":"2026-08-07T15:05:51.356674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.04159","last_updated":"2021-03-18T03:14:26Z","snapshot_observed_at":"2026-07-06T10:02:45.105181Z","submitted_at":"2020-10-08T17:59:21Z","title":"Deformable DETR: Deformable Transformers for End-to-End Object Detection","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.04159","snapshot_observed_at":"2026-08-07T15:05:42.618623Z","title":"Deformable detr: Deformable transformers for end-to-end object detection,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.618623Z"},"links":{"cited_paper":"/paper/2010.04159","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:3fff2694a8df9a2fdb56905f75d97cf0720f214310a271b0b2c81394d1625d46","observation_id":"ace7d5dd-faad-48bd-8f4d-9aa4aff04f2b","resolution":{"observed_at":"2026-08-07T15:05:42.618623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1506.01497","last_updated":"2016-01-06T06:30:17Z","snapshot_observed_at":"2026-07-06T04:19:53.343717Z","submitted_at":"2015-06-04T07:58:34Z","title":"Faster R-CNN: Towards Real-Time Object Detection with Region Proposal Networks","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1506.01497","snapshot_observed_at":"2026-08-07T15:05:42.756290Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.756290Z"},"links":{"cited_paper":"/paper/1506.01497","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:73455db512f06ae758cad31ac4b2301d32e819923a4432fefd2ec5f7caa568a2","observation_id":"def365d7-bbf4-49c2-8f32-2322f3a281d9","resolution":{"observed_at":"2026-08-07T15:05:42.756290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:51.032523Z","title":"T-sea: Transfer-based self-ensemble attack on object detection,","venue":null,"work_id":"4b18dd12-104f-4cf9-bc29-6e74899edab1","year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:42.890796Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:f7ac17a42c798d6a1c08cb6460a3c50d8b7ff17e9d99a07c0e1a7f58dc831be8","observation_id":"0f7e6527-8efd-4d45-9a3c-ead560581d84","resolution":{"observed_at":"2026-08-07T15:05:51.122815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:43.027320Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.027320Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b3946939dfc99cc64c1ae55d8b5de440f82e83a30a9beac5cdc4503c16e378e0","observation_id":"61dd13cd-68f6-4048-941a-72961d47081d","resolution":{"observed_at":"2026-08-07T15:05:43.027320Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.738634Z","title":"Fca: Learning a 3d full- coverage vehicle camouflage for multi-view physical adversarial attack,","venue":null,"work_id":"803e5c9f-4295-48b1-a5d1-c81dccc651e9","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.092807Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:df8ef4bdb1b83587bd41bdefec7909c2cf40e4f3e79ddfac00629c1d32d6f6b3","observation_id":"a5940445-076a-4a7f-a62e-c5b15659830a","resolution":{"observed_at":"2026-08-07T15:05:50.845301Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.537826Z","title":"Intelligent amphibious ground-aerial vehicles: State of the art technology for future transportation,","venue":null,"work_id":"0b679d15-0917-4a42-b843-c7b3449e6c5c","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.195319Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ed75f2dbc6a664cba5b45db22c7e5c72c4b00d53e9cc7bcaa2e14ca42d690609","observation_id":"bfd95bcf-0783-4e4f-a879-d73c67ad6785","resolution":{"observed_at":"2026-08-07T15:05:50.657559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.338783Z","title":"An ar-based meta vehicle road cooperation testing systems: framework, components modeling and an implementation example,","venue":null,"work_id":"6b6d5a36-3f84-458c-8b81-e4e14ac81c86","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.317688Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:6f5f8ae7f17e7aff44035941ac2427468c9c8f434ae26329dcad2ce9c6903773","observation_id":"9a4cb7b9-bddc-4490-85eb-0ac60e28ea36","resolution":{"observed_at":"2026-08-07T15:05:50.431823Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:43.464564Z","title":"Street-view image generation from a bird’s-eye view layout,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.464564Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:f65d0d01318fc80fcfd7a83b8db52acfc397173a83f0620b4f91ad2d0d83ac65","observation_id":"20e26ac6-407c-4224-91f6-aeb153988d4e","resolution":{"observed_at":"2026-08-07T15:05:43.464564Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:50.125149Z","title":"Advswap: Covert adversarial perturba- tion with high frequency info-swapping for autonomous driving perception,","venue":null,"work_id":"42b7f16f-204c-4775-9493-3feea0a6849a","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.584021Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:951d64f06518d26b6aa7be3a83ca993ec2e01a1718eef4ba403f0be956928331","observation_id":"01a002df-7539-41b7-a323-afb7e2a0a32f","resolution":{"observed_at":"2026-08-07T15:05:50.225805Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.902021Z","title":"Attention-disentangled re-id network for unsupervised domain adaptive person re-identification,","venue":null,"work_id":"4311ef00-5091-4e8e-8eb9-672d527e987f","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.700449Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fb9ffc7d6e1a0bee8b941d67c09de454fa746677a8b102bf981463800e72a586","observation_id":"9dc24e80-b575-488e-89ff-4df1bbd9cb86","resolution":{"observed_at":"2026-08-07T15:05:49.995361Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.661507Z","title":"Adversarial examples for vehicle detection with projection transformation,","venue":null,"work_id":"460883d8-06cf-49e4-80da-fdf2c9d6bcd5","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.823926Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:93f462dd3706b6cd65bdefd42e193683c65dc7f5a7dc29463f899fdef0c10d72","observation_id":"84755ef6-3b19-4b4c-aca8-c51495ca0fd9","resolution":{"observed_at":"2026-08-07T15:05:49.775230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.424377Z","title":"Toward robust 3d perception for autonomous vehicles: A review of adversarial attacks and countermeasures,","venue":null,"work_id":"d5c7682d-72af-48b8-ad57-6af32a37de82","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:43.953194Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:10a5ac65fd6daa4a1da9a9a27467c1b0ce1a9ef536207e3a3521cb8744589741","observation_id":"a5f7a010-efa3-4534-99c2-d3cf33c27b95","resolution":{"observed_at":"2026-08-07T15:05:49.525535Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.253283Z","title":"Deep networks with stochastic depth,","venue":null,"work_id":"05112ecb-38d7-4634-89da-52dc04b6995d","year":2016},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.120362Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:74747a489e15bef01f79f410fdae46996b66558dc2268ec7af898bc74179f8b1","observation_id":"fceddb7c-7c76-4c97-b663-5c3b27bcedae","resolution":{"observed_at":"2026-08-07T15:05:49.333990Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.230644Z","title":"Uv-attack: Physical-world adversarial attacks for person detection via dynamic-nerf-based uv mapping,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.230644Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:863e1340e7748108633731f154a17b5de54ffd8a57ea45afb207a64a22015f7a","observation_id":"71765079-8f32-42c9-aa3e-0c9964973e14","resolution":{"observed_at":"2026-08-07T15:05:44.230644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.148420Z","title":"Physical adversarial attack meets computer vision: A decade survey,","venue":null,"work_id":"d7facf16-f48b-4d21-82d1-5eb2e1f4ff96","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.350074Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:89df899cc05f9daa940c81eb3e300ca5b2a8b48b9fca7370ea1758e9711eccd6","observation_id":"106e4986-7ae6-4d1a-8318-6b6ada6f3600","resolution":{"observed_at":"2026-08-07T15:05:49.208048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:49.008162Z","title":"Force-based representation for non-rigid shape and elastic model estimation,","venue":null,"work_id":"087ae44f-fabd-4ad0-a039-a3972be19ebd","year":2017},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.469926Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:cf7e2bec6b14eb9d6af64f0fdedede1b7393713927c1a527a58f9eb954eacdf2","observation_id":"d9f3725f-5d4e-40a3-819b-21066508fb21","resolution":{"observed_at":"2026-08-07T15:05:49.106760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.875837Z","title":"Garnet++: Im- proving fast and accurate static 3d cloth draping by curvature loss,","venue":null,"work_id":"d93db2bf-a726-4eef-b190-89ac47a5a392","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.556523Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b4a21bd4a854f6d60caf7d85cf8f8f5db5ce546958d98f65523f536709a700ff","observation_id":"22111197-4f08-4148-9215-4ce3dd5be2a2","resolution":{"observed_at":"2026-08-07T15:05:48.923296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.661586Z","title":"Ultralytics yolov8,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.661586Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:d302e1c220d31c64933e39040a848e7dd7ab2d9f9f2ae56f75471238168d2a6e","observation_id":"ee707c59-0913-46a5-9721-9770ac02d18b","resolution":{"observed_at":"2026-08-07T15:05:44.661586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.731307Z","title":"Ultralytics yolo11,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.731307Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b5fb16c3485ba693ba8449895d1997369a541fb1e3fbe24f4d022262df3bc1f4","observation_id":"42f645a0-5f2b-4adf-93ee-820fa0574fe3","resolution":{"observed_at":"2026-08-07T15:05:44.731307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.12524","last_updated":"2025-02-18T04:20:14Z","snapshot_observed_at":"2026-07-06T20:38:20.545914Z","submitted_at":"2025-02-18T04:20:14Z","title":"YOLOv12: Attention-Centric Real-Time Object Detectors","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.12524","snapshot_observed_at":"2026-08-07T15:05:44.796167Z","title":"Yolov12: Attention-centric real-time object detectors,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.796167Z"},"links":{"cited_paper":"/paper/2502.12524","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:11b201170121c4b9505ad473d68d2a0512039fed51a30788982ff54283411c7b","observation_id":"790f3a1c-f7f1-468e-ab57-b634577b89cc","resolution":{"observed_at":"2026-08-07T15:05:44.796167Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.750771Z","title":"Shakedrop regularization,","venue":null,"work_id":"b5f6048c-b020-4ea1-b3c9-76d2225d2d9b","year":2018},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.860992Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:96750e4f9b6476159e7cb424a11662f71ae6aad051ed3d1bb0ffa6f6f90f3279","observation_id":"7840e154-0acc-4f2a-8af2-17cf1638efbd","resolution":{"observed_at":"2026-08-07T15:05:48.805087Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:44.921988Z","title":"Histograms of oriented gradients for human detection,","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.921988Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:37e13688f797fa4e791d10b0a0a2dbca8945532286d3c6c2ea368676f207d611","observation_id":"8cdeca79-48e2-4533-9a04-0f4b245e98c8","resolution":{"observed_at":"2026-08-07T15:05:44.921988Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.578343Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":"a603bcbc-09e1-4303-a13b-c49e926b3d4d","year":2014},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:44.980496Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:7bb4c7d318d102abdc6d6a05682b0b4edb5135a56d86022aff346716372f7196","observation_id":"6fbe4ae7-1e66-4215-b176-a8b9f9de5bfb","resolution":{"observed_at":"2026-08-07T15:05:48.648073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.440268Z","title":"Black-box adversarial attacks against image quality assessment models,","venue":null,"work_id":"bb37f283-6e2f-43b8-aa3b-67e141fc56aa","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.099324Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:1b9a4c5f530d64c82793d02f3a9ff6e4b366c1b130363717acacae092c58185e","observation_id":"f9167b61-5d56-4769-9372-a773e59888d4","resolution":{"observed_at":"2026-08-07T15:05:48.503484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.278275Z","title":"So-yolov8: A novel deep learning-based approach for small object detection with yolo beyond coco,","venue":null,"work_id":"da4a7257-a41f-4add-a764-b69c58398986","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.205692Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c017a1b5d6668a8821328ab0fffab16b7fc7f744c900d73b06b3c5b643a3fe7c","observation_id":"ff36c0fd-fe3a-4652-ad3b-fb9a5d078809","resolution":{"observed_at":"2026-08-07T15:05:48.371808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.137752Z","title":"State-of-the-art optical-based physical adversarial attacks for deep learning computer vision systems,","venue":null,"work_id":"8497e870-6827-4ee2-995c-93e2a0f3e920","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.360199Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:d8d0c2d44b1e90ab8bd778b2ee106f25d25c94984471c0023159d9cf7c196fa6","observation_id":"f162f3dd-a02c-46d6-bd9b-99ebbaef581d","resolution":{"observed_at":"2026-08-07T15:05:48.201497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:48.007180Z","title":"Evaluating adversarial attacks on driving safety in vision- based autonomous vehicles,","venue":null,"work_id":"bc8488d0-2d4e-4335-8d4c-4513a8f93d61","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.460515Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:622bd1971474b32fbfd3ebd1e95ca3027f46aac306ef7cf218355f89cab1e014","observation_id":"0349f20b-b7ef-4910-af76-a1d06083bcd9","resolution":{"observed_at":"2026-08-07T15:05:48.067872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.851171Z","title":"A transformer-based adversarial network frame- work for steganography,","venue":null,"work_id":"a4ae4ed0-9321-4585-8101-c968215e859a","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.594649Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c4bad609aa0c0c9d74de9bb8f031a625a4c36ccc2b9cc2c076133cdc097f43bf","observation_id":"a585fe4f-5253-4c26-b067-e9e2a921214f","resolution":{"observed_at":"2026-08-07T15:05:47.922213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.659473Z","title":"Mining the benefits of two-stage and one-stage hoi detection,","venue":null,"work_id":"1c2810aa-d3cf-4a88-be5d-e56e06f6051f","year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.691112Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:613e99a45cad815a6f2f66d4f1c94e56bccec786547cfa66a4446bb8d93483af","observation_id":"c2412b11-76a0-4664-ae77-8a372b919a92","resolution":{"observed_at":"2026-08-07T15:05:47.734463Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.489622Z","title":"A survey and evaluation of adversarial attacks in object detection,","venue":null,"work_id":"1d8021db-4804-4aa7-9d19-305da7a51e63","year":2025},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.807114Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:c1419c862a6a6594571d5a3c4d376f92f1d4f6e9ad85bac167acf19f00cc75a9","observation_id":"6cf9bf9d-2c24-491c-89af-1d3c8eea45b0","resolution":{"observed_at":"2026-08-07T15:05:47.562651Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.320993Z","title":"Adversarial attack and defense of yolo detectors in autonomous driving scenarios,","venue":null,"work_id":"f76d9f7f-f436-4c18-8b9b-5db96d87a478","year":2022},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:45.898556Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:b83a4baa82594c276a14b864249de88f6caed4906d31ba44a2a6d84afb5b6efd","observation_id":"199e4b7a-13ad-4e3c-b244-ed196d2bada1","resolution":{"observed_at":"2026-08-07T15:05:47.415285Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:47.151010Z","title":"Adversarial attacks on faster r-cnn object detector,","venue":null,"work_id":"cee4c27b-4899-41f0-9a48-8af0bf63a431","year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.022683Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:ff2eb0a2b4384c062f98cdc03ae452d648c56f9cb5cccbf1a7d0af6e544c4fb4","observation_id":"507b7116-ba43-4db8-b553-d44d494586ae","resolution":{"observed_at":"2026-08-07T15:05:47.236197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15670","last_updated":"2022-11-02T18:57:19Z","snapshot_observed_at":"2026-07-06T10:54:28.918714Z","submitted_at":"2021-03-29T14:48:24Z","title":"On the Adversarial Robustness of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.15670","snapshot_observed_at":"2026-08-07T15:05:46.120059Z","title":"On the adversarial robustness of vision transformers,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.120059Z"},"links":{"cited_paper":"/paper/2103.15670","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:61a5d2fedbfe2fffdc7fe0372248d84ad146085665f338295b5b3e6fa0dc52ae","observation_id":"744b3f33-fe80-4b88-93dd-5f710e820754","resolution":{"observed_at":"2026-08-07T15:05:46.120059Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:46.221545Z","title":"From patches to pictures (paq-2-piq): Mapping the perceptual space of picture quality,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.221545Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:fc1af0ca2db338b0ceed48508e608fd5bc8e4b06cc48a054700427742260e117","observation_id":"0109a09b-f852-4b79-889e-c5e432b5d8cb","resolution":{"observed_at":"2026-08-07T15:05:46.221545Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:05:46.964312Z","title":"Napguard: Towards detecting naturalistic adversarial patches,","venue":null,"work_id":"8f6fcb61-8cf2-4f55-9e1d-03d23b7e06fd","year":2024},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.318842Z"},"links":{"citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:d1bd5b6e6469f6e7630ac41fed443c83331319ae0eeb9694122de15d797b8e7f","observation_id":"c7a150a0-ddc7-42e2-8dfe-80d743ab5c5c","resolution":{"observed_at":"2026-08-07T15:05:47.043488Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.01473","last_updated":"2024-08-22T04:12:59Z","snapshot_observed_at":"2026-07-06T16:42:19.938941Z","submitted_at":"2023-11-01T06:55:09Z","title":"Adversarial Examples in the Physical World: A Survey","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.01473","snapshot_observed_at":"2026-08-07T15:05:46.425293Z","title":"Adversarial examples in the physical world: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T15:05:46.425293Z"},"links":{"cited_paper":"/paper/2311.01473","citing_paper":"/paper/2505.16402"},"observation_digest":"sha256:a473849520aa4048697f2951b69ad246cb28cbc46b79c1b053a880acfe5cd4db","observation_id":"8575730e-53bd-49d0-9576-09323b6f50f4","resolution":{"observed_at":"2026-08-07T15:05:46.425293Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.16402","last_updated":"2025-09-11T02:07:01Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T14:59:29.944643Z","submitted_at":"2025-05-22T08:54:03Z","title":"AdvReal: Physical Adversarial Patch Generation Framework for Security Evaluation of Object Detection Systems"},"reference_resolution":{"displayed":59,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":1,"verified_fuzzy":41},"total_outbound_references":59},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 59 of 59 outbound references and 0 inbound Pith citation observations for arXiv:2505.16402."}