{"as_of":"2026-08-08T19:02:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:0ad71ac4d5b43ebccbd3ac91e566a3d0b790793158d81f3b87db4baf35f611df","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:49:48.767310Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.17579/citation-record","integrity":"/paper/2505.17579/integrity","json":"/paper/2505.17579/citation-record.json","paper":"/paper/2505.17579"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2304.14613","last_updated":"2023-06-17T09:08:18Z","snapshot_observed_at":"2026-07-06T15:21:04.733820Z","submitted_at":"2023-04-28T03:34:43Z","title":"Deep Intellectual Property Protection: A Survey","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2304.14613","snapshot_observed_at":"2026-08-07T14:49:47.596326Z","title":"Deep intellectual property protection: A survey,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.596326Z"},"links":{"cited_paper":"/paper/2304.14613","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:bfcaf327cf0930605e70c86a863e997435ebec5882f2ac53effa721ae778107f","observation_id":"92a9d4d8-bc2a-4630-8874-99076aca200f","resolution":{"observed_at":"2026-08-07T14:49:47.596326Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-07T14:49:47.707265Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.707265Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:0e49f3619bcfbb5178ca9bd7d1fa4b8bcab07e7c119d5e68c131c8eb4732daa6","observation_id":"6fd12706-7b0e-456c-b913-3035a14c5d8e","resolution":{"observed_at":"2026-08-07T14:49:47.707265Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2208.05477","last_updated":"2022-08-10T08:27:26Z","snapshot_observed_at":"2026-08-04T13:48:12.212319Z","submitted_at":"2022-08-10T08:27:26Z","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","version":1},"cited_work":{"arxiv_id":"2208.05477","doi":null,"metadata_source":"pith","pith_arxiv_id":"2208.05477","snapshot_observed_at":"2026-08-07T14:49:48.985783Z","title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","venue":"cs.CR","work_id":"2a5ee40d-5311-46a5-a76b-3a057c08a6de","year":2022},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.790079Z"},"links":{"cited_paper":"/paper/2208.05477","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:e637c270ffa54307dc26ed64e156acede3e1ccb83629c8726d52bce276204a8c","observation_id":"01caabd8-225a-4e77-9850-26f5b313a41f","resolution":{"observed_at":"2026-08-07T14:49:49.078445Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:50.061379Z","title":"Turning your weakness into a strength: Watermarking deep neural networks by backdooring,","venue":null,"work_id":"daf24266-6a88-403c-bcd3-6491ecc366bf","year":2018},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.899982Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:14120b748b71c105a34dfc7027925a7faa2524c964e61640134d9e67a8577f9d","observation_id":"4ff63cf6-297a-4007-bdc0-3f69813e07c1","resolution":{"observed_at":"2026-08-07T14:49:50.163826Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.14880","last_updated":"2022-02-24T23:04:32Z","snapshot_observed_at":"2026-07-06T12:02:52.936070Z","submitted_at":"2021-10-28T04:36:48Z","title":"AEVA: Black-box Backdoor Detection Using Adversarial Extreme Value Analysis","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2110.14880","snapshot_observed_at":"2026-08-07T14:49:47.975982Z","title":"Aeva: Black-box backdoor detection using adversarial extreme value analysis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.975982Z"},"links":{"cited_paper":"/paper/2110.14880","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:f983ee8a08d8c5b884b2b02c8cb9ae5594a3b264d72f64b9171ecc77648ab1c2","observation_id":"6ef72ba0-d42a-47d5-82ba-db22dce64420","resolution":{"observed_at":"2026-08-07T14:49:47.975982Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2302.03251","last_updated":"2023-02-19T01:32:21Z","snapshot_observed_at":"2026-07-06T14:49:07.867567Z","submitted_at":"2023-02-07T04:33:41Z","title":"SCALE-UP: An Efficient Black-box Input-level Backdoor Detection via Analyzing Scaled Prediction Consistency","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2302.03251","snapshot_observed_at":"2026-08-07T14:49:48.056361Z","title":"Scale- up: Scalable black-box input-level backdoor detection via analyzing predictions across scales,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.056361Z"},"links":{"cited_paper":"/paper/2302.03251","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:b033891ddcc607136244ab1ed75b39db15625f4c52c58bb51e607ff565f0013e","observation_id":"31f05c83-a9b5-4f5b-97d8-5fd97f02afac","resolution":{"observed_at":"2026-08-07T14:49:48.056361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1910.12903","last_updated":"2020-10-31T15:19:17Z","snapshot_observed_at":"2026-07-06T08:32:54.818165Z","submitted_at":"2019-10-28T18:39:49Z","title":"IPGuard: Protecting Intellectual Property of Deep Neural Networks via Fingerprinting the Classification Boundary","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1910.12903","snapshot_observed_at":"2026-08-07T14:49:48.145267Z","title":"IPGuard: Protecting intellectual property of deep neural networks via fingerprinting the classification boundary,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.145267Z"},"links":{"cited_paper":"/paper/1910.12903","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:e50c8386a3c4caf98c4b46fbf2a2f3404ea8d9d3aadcdc2c5531efbb60c64f0b","observation_id":"5f1e14f7-a77a-4e3e-af38-d40ce50294c2","resolution":{"observed_at":"2026-08-07T14:49:48.145267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T14:49:48.240706Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.240706Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:0e8e2bf28216d0b42d0297c1714e38567a68004764e3c1ad25f6474e84267355","observation_id":"5c4dadde-51c4-4e42-b275-30a1f844a2cd","resolution":{"observed_at":"2026-08-07T14:49:48.240706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.917355Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"bcd0eefd-9b07-4607-979d-af545b347bbd","year":2009},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.323491Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:46e192d567ee0f6919f2bd796ee32bbc5fbf46635aef6dc0329e2e0ed37dde93","observation_id":"7d8f2a72-b4c2-40fd-a5b1-dfffd21511d2","resolution":{"observed_at":"2026-08-07T14:49:49.974792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:48.412336Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.412336Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:96d04af3e00fbb2848bbee0d3e141d12070597f207c735a0c5dac2efcf235c8a","observation_id":"ac6b6620-32a0-4d65-859a-a5b05000009b","resolution":{"observed_at":"2026-08-07T14:49:48.412336Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.765273Z","title":"Pytorch: An imperative style, high-performance deep learning library,","venue":null,"work_id":"7f4f31c0-dd21-4c93-834c-77364b34237e","year":2019},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.477252Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:b6867f3d10d284b89ff036b171859ca1334c008cba80ab833d87e9871c47762d","observation_id":"043e974b-9e07-4088-b90a-98ace881b77e","resolution":{"observed_at":"2026-08-07T14:49:49.819612Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.612999Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":"05594e01-1270-487b-9c7d-da61687ed8e1","year":2004},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.583138Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:b81ca42f5f07288c26e8630379250b9590b601c15fcb757a607c36be12966e8b","observation_id":"571b673c-05e6-4070-a9ca-3d4bfdcd83d8","resolution":{"observed_at":"2026-08-07T14:49:49.692500Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-07T14:49:48.692444Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.692444Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:ef6e86ce479c4bf3957e43d5c843e567c4d48eed98244eff99d87ee27cddc19d","observation_id":"58ed454f-22e5-4624-aed4-baa53c1a9787","resolution":{"observed_at":"2026-08-07T14:49:48.692444Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:49:49.439237Z","title":"ADV oIP: Adver- sarial detection of encrypted and concealed voip,","venue":null,"work_id":"a627fd69-dae3-4931-b757-aca4511573d8","year":2020},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:48.767310Z"},"links":{"citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:650125e0af19d5d3eb20400bd834123d6a914517a7e78745a8e480d7046e1e38","observation_id":"5e122db0-c38a-414f-a253-0fdda2d7a59d","resolution":{"observed_at":"2026-08-07T14:49:49.526734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.09274","last_updated":"2021-03-16T18:35:07Z","snapshot_observed_at":"2026-07-06T10:50:31.261444Z","submitted_at":"2021-03-16T18:35:07Z","title":"A survey of deep neural network watermarking techniques","version":1},"cited_work":{"arxiv_id":"2103.09274","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.09274","snapshot_observed_at":"2026-08-07T14:49:49.266359Z","title":"A survey of deep neural network watermarking techniques","venue":"cs.CR","work_id":"95c54b31-4a07-4579-b66a-51165549ea7f","year":2021},"citing_paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","version":3},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T14:49:47.525966Z"},"links":{"cited_paper":"/paper/2103.09274","citing_paper":"/paper/2505.17579"},"observation_digest":"sha256:ff42a3f0d51c1902e27d1a62eca8430a1439befeace048d2f402e06b903b4986","observation_id":"8e14c429-f86b-48d2-ab0e-3b9477076ef2","resolution":{"observed_at":"2026-08-07T14:49:49.343823Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.17579","last_updated":"2025-07-30T09:06:26Z","latest_version":3,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T14:42:04.103834Z","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":8,"verified_exact":1,"verified_fuzzy":5},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2505.17579."}