{"as_of":"2026-08-21T00:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8eaad824d8b0b494672c069bff05beba67b52dc0801c0515ec98aa6c8dd059c5","coverage":[{"denominator":60,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":60,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T14:16:27.294582Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-20T06:33:59.587034+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-22T01:25:06.528845Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-22T01:25:52.696115Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"cited_work":{"arxiv_id":"2505.19613","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2505.19613","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Tesser: Transfer-enhancing adversarial attacks from vision transformers via spectral and semantic regularization","venue":null,"work_id":"8cfb89c8-5012-47a5-a972-27bb1a634f8a","year":2025},"citing_paper":{"arxiv_id":"2605.21541","last_updated":"2026-05-20T08:15:56Z","snapshot_observed_at":"2026-08-18T01:01:03.391068Z","submitted_at":"2026-05-20T08:15:56Z","title":"Frequency-Domain Regularized Adversarial Alignment for Transferable Attacks against Closed-Source MLLMs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-22T01:25:06.528845Z"},"links":{"cited_paper":"/paper/2505.19613","citing_paper":"/paper/2605.21541"},"observation_digest":"sha256:8a08d7747272895ebd648a4579b4457ebdf6810e012ebe724d27ce65cd153bb2","observation_id":"a1982051-7868-4fb4-afcb-9d46c315bd37","resolution":{"observed_at":"2026-05-22T01:25:52.699619Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.19613/citation-record","integrity":"/paper/2505.19613/integrity","json":"/paper/2505.19613/citation-record.json","paper":"/paper/2505.19613"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2005.00928","last_updated":"2020-05-31T16:59:40Z","snapshot_observed_at":"2026-08-14T07:01:16.499526Z","submitted_at":"2020-05-02T21:45:27Z","title":"Quantifying Attention Flow in Transformers","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2005.00928","snapshot_observed_at":"2026-08-07T14:16:20.377706Z","title":"Quantifying attention flow in transformers.arXiv preprint arXiv:2005.00928, 2020","venue":null,"work_id":null,"year":2005},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.377706Z"},"links":{"cited_paper":"/paper/2005.00928","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:6124ff336c5e24c7e263e1e485153733923aa41606183bfee6416b95cccf16f4","observation_id":"8674c74c-2692-43b9-9e95-f0908281cb3b","resolution":{"observed_at":"2026-08-07T14:16:20.377706Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:20.471017Z","title":"Understanding robustness of transformers for image classification","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.471017Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:5a74ce456a69cab2700baf77d29f0c526d68c9a2ae2852f9441a028f48bdb64a","observation_id":"ca97d104-602b-4bee-b39e-b56b931bdb37","resolution":{"observed_at":"2026-08-07T14:16:20.471017Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:20.568019Z","title":"End-to-end object detection with transformers","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.568019Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:28307cd9ed4e10a0f4c16f7f9220e6124c0c1de1bf2f193d17d8e47ec7b5b96c","observation_id":"d1b2a8c4-45eb-4463-a1af-f63eecc55a3b","resolution":{"observed_at":"2026-08-07T14:16:20.568019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:20.661723Z","title":"Visformer: The vision-friendly transformer","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.661723Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:503714a4e61f66d5828ec98f8ac453905533db73b9bf5817be2193c15a153049","observation_id":"a9411de4-3359-4131-80c1-efcd68a7a319","resolution":{"observed_at":"2026-08-07T14:16:20.661723Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.891363Z","title":"A light recipe to train robust vision transformers","venue":null,"work_id":"a47e9031-f922-4c20-9829-e5dc7aa2b8dc","year":2023},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.763314Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:4c0ac2e2c4762627b48704b20a3e3e416d4e9254136cf57ffec64ce16b0b89ac","observation_id":"be34b085-417d-44d9-aeea-11833d22e6f1","resolution":{"observed_at":"2026-08-07T14:16:33.982719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:20.858272Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.858272Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:0d9a9fb248a8c99b3f0c99fd935a8be9a0fd12176c081969f1a2cd8d3bdf301e","observation_id":"d81c3925-11b5-4482-824a-d52a25b89a9f","resolution":{"observed_at":"2026-08-07T14:16:20.858272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.710111Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"fdb87da6-98b6-441c-937c-b532252ddd27","year":2018},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:20.971681Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:948ce675d55d379f2279311ae8c6102360c887e68201327f5998a9fe02748948","observation_id":"e29bd998-791e-4db9-9b6c-8bd77c23bc46","resolution":{"observed_at":"2026-08-07T14:16:33.797096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-08-16T09:25:53.087782Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T14:16:21.173592Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.173592Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:8947d7a2b6e3390d44046997e66a286cdab26639275b05e626f9e13f03377288","observation_id":"837ca276-691b-43cb-8afd-42f523be1f31","resolution":{"observed_at":"2026-08-07T14:16:21.173592Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.524092Z","title":"Convit: Improving vision transformers with soft convolutional inductive biases","venue":null,"work_id":"acc98b24-c5e0-4b22-9522-83a5cef4b540","year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.284636Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:12d57e25fa50970d6ab1fc0c9772d6bf8e1fef82b498d880ff021fcc3b1fa193","observation_id":"c131479c-8bc4-46e2-b138-b7af6cd30238","resolution":{"observed_at":"2026-08-07T14:16:33.599657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.361585Z","title":"Fda: Feature disruptive attack","venue":null,"work_id":"7f8c3ed0-353b-4d83-af09-693c0b49c300","year":2019},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.364121Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:4accccc89b2a397d0e2f05e3edbe53dbf701ac57cef19b4cc6e7180d8c954c08","observation_id":"11a8d691-ad63-4446-ae0a-8344524db841","resolution":{"observed_at":"2026-08-07T14:16:33.438933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-08-19T07:17:20.004918Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T14:16:21.464580Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.464580Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:f032deaa6db496c5c89a25347586b4509106c51c3bf6789311918658ccfdd55b","observation_id":"5f96ff8a-8f1d-42c2-adf0-e0eee159f9c0","resolution":{"observed_at":"2026-08-07T14:16:21.464580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:21.614969Z","title":"Levit: a vision transformer in convnet’s clothing for faster inference","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.614969Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:918479595fdc54460b0c25320b282826793885a3e383747485aacc1e14588279","observation_id":"54cff937-a08f-47a9-a2ac-f1c81570bbf8","resolution":{"observed_at":"2026-08-07T14:16:21.614969Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2023.33211","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:28.163338Z","title":null,"venue":null,"work_id":"1dc83ee1-573f-43b5-a27c-aa63609fc524","year":2023},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.735051Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:e1e853f44e15770a8a7f90d4e7a40ff2aa5dfa14131cac4546cda0fdd0daed59","observation_id":"dcf4f51d-76d7-46f8-96b4-023076f795e8","resolution":{"observed_at":"2026-08-07T14:16:28.252359Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.218033Z","title":"Dap: A dynamic adversarial patch for evading person detectors","venue":null,"work_id":"d4c0c522-7350-4015-bc06-01982f4c5d39","year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.857234Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:39e75a698973278dc1704059573feda512d0941dad57910fabe8fda9d5f38e31","observation_id":"3028a257-5286-4c5e-a891-1273cb1f7622","resolution":{"observed_at":"2026-08-07T14:16:33.283770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:21.970255Z","title":"Ssap: A shape-sensitive adversarial patch for comprehensive disruption of monocular depth estimation in autonomous navigation applications","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:21.970255Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:f9fc63f60c3d20283b1116eb2f44efdcba29cf4c4a68b427b0df4f7dd0b53ae8","observation_id":"93531995-8677-4330-ba1c-4ea94826566b","resolution":{"observed_at":"2026-08-07T14:16:21.970255Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:22.065643Z","title":"Transformer in transformer","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.065643Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:1410cc68abde427424e828841506d17828b5bbf9e31322d1f4fbf958d25fa67e","observation_id":"412d6102-e796-43bf-9a16-7505fdae029a","resolution":{"observed_at":"2026-08-07T14:16:22.065643Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:22.198588Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.198588Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:c4e8fdd812d9b0d8a33caa0b8277de6477c62002678f2535fa3f6df489786a7f","observation_id":"44286c68-284c-47ef-afd0-f7e09f4e8bf7","resolution":{"observed_at":"2026-08-07T14:16:22.198588Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:22.234617Z","title":"Rethinking spatial dimensions of vision transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.234617Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:9b7eaeb5e20a69cf55190edcc8ccf7cf393e3a0b8a86d7b4fdd18e7a3fc86414","observation_id":"c525d26e-f874-4cf5-8d89-1cd0f1495ad3","resolution":{"observed_at":"2026-08-07T14:16:22.234617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:22.238379Z","title":"Enhancing adversarial example transferability with an intermediate level attack","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.238379Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:dbe3bb65583b8e5095fbac3959544922da8e4a3d425594b89aca24fab1a9982f","observation_id":"e83ffd02-6127-4dd6-935f-75d76e16fc70","resolution":{"observed_at":"2026-08-07T14:16:22.238379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:33.042030Z","title":"Exploring adversarial robustness of vision transformers in the spectral perspective","venue":null,"work_id":"b9b798ed-1f62-423a-896e-f41b6f8c2821","year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.280911Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:91fee907e7d3dc9e4e2bb05b3c9da82607af1d050f26f258593633f1a32f8817","observation_id":"0350c927-575e-4beb-8879-0723b0e4b3c4","resolution":{"observed_at":"2026-08-07T14:16:33.099870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.10102","last_updated":"2020-10-06T15:15:38Z","snapshot_observed_at":"2026-08-17T21:29:36.678897Z","submitted_at":"2020-04-21T15:22:27Z","title":"Attention is Not Only a Weight: Analyzing Transformers with Vector Norms","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2004.10102","snapshot_observed_at":"2026-08-07T14:16:22.413819Z","title":"Attention is not only a weight: Analyzing transformers with vector norms.arXiv preprint arXiv:2004.10102, 2020","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.413819Z"},"links":{"cited_paper":"/paper/2004.10102","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:20568b7186056615af24a2890e1da21be0e54fdc995ea28bbea2ad62e6e79bc3","observation_id":"68d03629-c23a-4ad1-85ad-b67529024ec4","resolution":{"observed_at":"2026-08-07T14:16:22.413819Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.873231Z","title":"Leveraging visual question answering for image-caption ranking","venue":null,"work_id":"1a618770-f823-42b3-aa35-60ad76a0296c","year":2016},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.570694Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:b3d01c4e1a5244b3c784d84651503612d5b07d6f0fbaa71ea50a54699754078a","observation_id":"1c470977-c747-46aa-9cfa-3b216a7a2a90","resolution":{"observed_at":"2026-08-07T14:16:32.949541Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.692694Z","title":"Beyond attentive tokens: Incorporating token importance and diversity for efficient vision transformers","venue":null,"work_id":"e3a0d560-fb5d-4905-8548-be979e2c9152","year":2023},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.684856Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:0ebf4b81a65a765272f8452dff87ffdf6111a3e59df8afbab8bb73cb93fa9518","observation_id":"c704b85c-a453-4d30-af5d-3a3d223adc59","resolution":{"observed_at":"2026-08-07T14:16:32.772680Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.513434Z","title":"Unified transformer tracker for object tracking","venue":null,"work_id":"37bd93b5-f815-4153-ba0f-43a5f207eb56","year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.820389Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:f67029f1b87939ab0e3c478e6410dc59879ec9094118f25dcba03936f520aecf","observation_id":"073efa48-615f-43f0-b4be-510b8d6a1093","resolution":{"observed_at":"2026-08-07T14:16:32.593408Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T14:16:22.975661Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:22.975661Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:179e72699d43bd1a5c5aa7f59d7b5914b39bfaebbaf0adc689eff3997e9b28d1","observation_id":"30058c2a-df09-441a-83e9-d3ec05293856","resolution":{"observed_at":"2026-08-07T14:16:22.975661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.359383Z","title":"Boosting the transferability of adversarial attack on vision transformer with adaptive token tuning.Advances in Neural Information Processing Systems, 37: 20887–20918, 2024","venue":null,"work_id":"837500e0-c260-4f0c-b308-a6d02efc5e07","year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.123693Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:6ed2c6829f016fed001e1832d34f01cb88c24915f0fd5f22340d13c78fca3b1a","observation_id":"f3c5e014-05bd-4ed7-bf38-8a1de202fd49","resolution":{"observed_at":"2026-08-07T14:16:32.436850Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.144566Z","title":"When adversarial training meets vision transformers: Recipes from training to architecture.Advances in Neural Information Processing Systems, 35:18599–18611, 2022","venue":null,"work_id":"a89c94f6-f25c-4c99-bd3e-8dfe3419e92a","year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.295793Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:f2fa90d411b93ed089c9df26e28582bb7f979d871a2d44b018b7ab079def3b97","observation_id":"0600beba-5f9f-4cef-b567-fed0fd165afe","resolution":{"observed_at":"2026-08-07T14:16:32.261433Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.03286","last_updated":"2022-05-06T15:13:34Z","snapshot_observed_at":"2026-08-16T17:02:05.801737Z","submitted_at":"2022-05-06T15:13:34Z","title":"GlobEnc: Quantifying Global Token Attribution by Incorporating the Whole Encoder Layer in Transformers","version":1},"cited_work":{"arxiv_id":"2205.03286","doi":null,"metadata_source":"pith","pith_arxiv_id":"2205.03286","snapshot_observed_at":"2026-08-07T14:16:27.605830Z","title":"GlobEnc: Quantifying Global Token Attribution by Incorporating the Whole Encoder Layer in Transformers","venue":"cs.CL","work_id":"5add2391-c236-4fd0-8573-7ec6a5e3660a","year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.562222Z"},"links":{"cited_paper":"/paper/2205.03286","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:c86e3926f97e9e0ea2cd40bffc9d0bf24243f5ded4c32eabc9ea04a34f33ed17","observation_id":"7ba69767-aa0e-462d-94c0-6fed107a9135","resolution":{"observed_at":"2026-08-07T14:16:27.684842Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.04169","last_updated":"2022-03-03T12:08:18Z","snapshot_observed_at":"2026-08-18T01:04:33.026640Z","submitted_at":"2021-06-08T08:20:38Z","title":"On Improving Adversarial Transferability of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2106.04169","snapshot_observed_at":"2026-08-07T14:16:23.740062Z","title":"On improving adversarial transferability of vision transformers.arXiv preprint arXiv:2106.04169, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.740062Z"},"links":{"cited_paper":"/paper/2106.04169","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:7b11e4b2315d44db52096982a03c783e79281c6cdfcc3ce647b8c9553215b59e","observation_id":"323d1daa-8c16-481c-a26a-5b1badc08008","resolution":{"observed_at":"2026-08-07T14:16:23.740062Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:23.861371Z","title":"Do vision transformers see like convolutional neural networks?Advances in neural information processing systems, 34:12116–12128, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.861371Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:d18dfedd4340181838eef0a295a06300eb26ea947a3a198a623f7f5504a0ba4f","observation_id":"40a080bc-4fce-43b7-ae70-852391353568","resolution":{"observed_at":"2026-08-07T14:16:23.861371Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2503.15404","last_updated":"2025-03-19T16:44:23Z","snapshot_observed_at":"2026-08-16T12:48:32.077715Z","submitted_at":"2025-03-19T16:44:23Z","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","version":1},"cited_work":{"arxiv_id":"2503.15404","doi":null,"metadata_source":"pith","pith_arxiv_id":"2503.15404","snapshot_observed_at":"2026-08-07T14:16:27.425555Z","title":"Improving Adversarial Transferability on Vision Transformers via Forward Propagation Refinement","venue":"cs.CV","work_id":"4b2f9b79-fe62-4f4f-a280-2a4369a8a223","year":2025},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:23.988738Z"},"links":{"cited_paper":"/paper/2503.15404","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:2389353bdb8a5ae43d8f620a6f1eb9d5ae2d5e185dcff97ab2d7aae513027c65","observation_id":"0020fa74-e6d8-4a98-ad4c-41621f38b26a","resolution":{"observed_at":"2026-08-07T14:16:27.509495Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:32.013677Z","title":"Imagenet large scale visual recognition challenge","venue":null,"work_id":"ccdb5e72-5638-444d-a7e6-2c76869452ed","year":2015},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.116742Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:63deb1ca6fbabe65282804e4bdb8b736bfae228a6770bc30575b9473f5d41696","observation_id":"91aa761d-ce1c-4dc4-81b9-28c58d7a89ef","resolution":{"observed_at":"2026-08-07T14:16:32.070825Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:24.258920Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.258920Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:8d4191155882f7057c7254695cc74406c9ed5f1e603de24b73db2499cd707f8d","observation_id":"ce085039-e393-4911-971d-66dd0e20df3a","resolution":{"observed_at":"2026-08-07T14:16:24.258920Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:24.401436Z","title":"Rethinking the inception architecture for computer vision","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.401436Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:5024185c3c3e0c733fef030147b6b7be1b8baaaf207b1588998b4fa128f252f8","observation_id":"10f2f07b-c4d9-4c62-80fc-91d737c9faf8","resolution":{"observed_at":"2026-08-07T14:16:24.401436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:31.852984Z","title":"Inception-v4, inception-resnet and the impact of residual connections on learning","venue":null,"work_id":"d834b332-31f1-4655-bb85-632890d805d9","year":2017},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.563847Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:e9111da7c2c66252d6471ce142b57e55df06ff5aaf5b35e2f8cca3497891a29c","observation_id":"ae43bb10-c790-4341-b135-0ac3b33f8caf","resolution":{"observed_at":"2026-08-07T14:16:31.907166Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:24.766957Z","title":"Training data-efficient image transformers & distillation through attention","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.766957Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:add1db9428749b05f7b195b178a82cf81479aa3005b6a3fd061901791ce28624","observation_id":"c922a8cb-eda4-4943-b07b-bb925fe12982","resolution":{"observed_at":"2026-08-07T14:16:24.766957Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:24.891651Z","title":"Going deeper with image transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:24.891651Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:7f97b0376c94c402f569fd5d9e7f896c29e9e5ff909ca94779f4603dc941d0cc","observation_id":"9c444c9f-1933-47e3-aee1-b799a5287231","resolution":{"observed_at":"2026-08-07T14:16:24.891651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:31.575470Z","title":"Ro- bustness may be at odds with accuracy.arXiv: Machine Learning, 2018","venue":null,"work_id":"2f1f6299-9afd-448f-8da3-bf1387c5ca47","year":2018},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.049710Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:28428bb31105cd54c7fe878f72f43b98fb79388fca9cbc12d3fa977cd9e30a15","observation_id":"f54e1a84-2f78-4a3b-937f-7dfb0b04ca0c","resolution":{"observed_at":"2026-08-07T14:16:31.674470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:25.162590Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":null,"year":1924},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.162590Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:9010d8e85ba42886fc4df9f876da4ac56b9b8aa2e917d45fb1c495538c0e742e","observation_id":"dbdb5d37-9a0b-4cb2-849d-97b9515ccd4d","resolution":{"observed_at":"2026-08-07T14:16:25.162590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:31.368730Z","title":"Feature importance- aware transferable adversarial attacks","venue":null,"work_id":"327c3241-a3cd-4433-8c20-2cb60accdaf3","year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.266671Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:638920577c949fe7a3c3b3223a22c533ba01f696c9bef307eeadbf3f4a759b1f","observation_id":"363c505c-cf01-4b1c-9d77-b8f584ce5f8d","resolution":{"observed_at":"2026-08-07T14:16:31.466588Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:31.155349Z","title":"Towards transferable adversarial attacks on vision transformers","venue":null,"work_id":"e508c63f-a912-436e-8c05-66d5e88ebe14","year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.363345Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:535ef105f696481761e507b45c1030f57471137607ed504c21aa781cf8041119","observation_id":"c5faa825-98e7-486d-97f3-d18972c2bdca","resolution":{"observed_at":"2026-08-07T14:16:31.231944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2002.05990","last_updated":"2020-02-14T12:09:21Z","snapshot_observed_at":"2026-08-15T13:03:00.221180Z","submitted_at":"2020-02-14T12:09:21Z","title":"Skip Connections Matter: On the Transferability of Adversarial Examples Generated with ResNets","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2002.05990","snapshot_observed_at":"2026-08-07T14:16:25.516863Z","title":"Skip connections matter: On the transferability of adversarial examples generated with resnets.arXiv preprint arXiv:2002.05990, 2020","venue":null,"work_id":null,"year":2002},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.516863Z"},"links":{"cited_paper":"/paper/2002.05990","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:108d48aa147dc3d0cff3b1463dcd1a19ba6aa6c7215b859aede309f860fce031","observation_id":"486e6fd3-37a1-47f8-9e32-84f965209477","resolution":{"observed_at":"2026-08-07T14:16:25.516863Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:30.942024Z","title":"Token transformation matters: Towards faithful post-hoc explanation for vision transformer","venue":null,"work_id":"0592249b-22bd-45f7-ae3e-32e36de1bf1d","year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.614138Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:c12eb95666885fa25635e9b5e4596c3cdaa7307168c2618fb80740a985b09114","observation_id":"c760c53e-dda0-428c-9a4d-200d28d13d4b","resolution":{"observed_at":"2026-08-07T14:16:31.063957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:30.726296Z","title":"Rethinking the backward propagation for adversarial transferability.Advances in Neural Information Processing Systems, 36:1905–1922, 2023","venue":null,"work_id":"7e4d10de-6014-48ec-8d17-dce1e1bd14aa","year":1905},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.712732Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:06a5e35b5d6a74bc17907c6c4a16e26cbcd1249b6b293d6e28fc5edbce2f12d5","observation_id":"4147fe32-7034-4d91-899b-5f803a9c7d3e","resolution":{"observed_at":"2026-08-07T14:16:30.807638Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:25.809657Z","title":"Improving transferability of adversarial examples with input diversity","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.809657Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:65d5b3b64238b86a5bc38f1b2aab90fa2267e1b7bb927246e74db0d047f0324a","observation_id":"92562b92-e4b3-4004-a236-6ae61bbd8699","resolution":{"observed_at":"2026-08-07T14:16:25.809657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:25.913030Z","title":"Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.913030Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:649518576704ca100d1a06eb115551a30271c6d69054bd8e7a419d55819b2823","observation_id":"f41dbc59-55f5-4974-a0d1-cc73be66db4c","resolution":{"observed_at":"2026-08-07T14:16:25.913030Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:30.445100Z","title":"A2: Efficient automated attacker for boosting adversarial training.Advances in Neural Information Processing Systems, 35:22844–22855, 2022","venue":null,"work_id":"94bf04cf-d4d6-4c04-8604-a69c9751b8f4","year":2022},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:25.982150Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:015c5c83d28b524d5747d8bbb9afdeb4489f949469c590da11bc67b30703278f","observation_id":"cebcfefb-1907-4097-b2d5-99c1f0f8e32c","resolution":{"observed_at":"2026-08-07T14:16:30.602752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:30.209942Z","title":"A fourier perspective on model robustness in computer vision.Advances in Neural Information Processing Systems, 32, 2019","venue":null,"work_id":"84cc6fca-54f8-4203-9354-335b4ae1f209","year":2019},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.067604Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:a27093ec867ab77911aa34dc10e160ce960441c17ccc02e182245870fe1d266e","observation_id":"6694ee73-0439-4e9f-a997-7b6641e39c5a","resolution":{"observed_at":"2026-08-07T14:16:30.328159Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:26.113190Z","title":"How transferable are features in deep neural networks?Advances in neural information processing systems, 27, 2014","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.113190Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:141e5b55cd968cfa73dbf634a044b69f17081a3683daef0e459368ec740bc4a7","observation_id":"6a487940-9585-4bdd-8fe2-eddee5e5e67b","resolution":{"observed_at":"2026-08-07T14:16:26.113190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:26.162055Z","title":"Transferable adversarial attacks on vision transformers with token gradient regularization","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.162055Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:372f383b874935972fee34e193d8481c81d3558f8d1059a864c667637cfa3284","observation_id":"a99ce015-eb2f-49c3-93e2-6b6f78e8c191","resolution":{"observed_at":"2026-08-07T14:16:26.162055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:29.969337Z","title":"A unified efficient pyramid transformer for semantic segmentation","venue":null,"work_id":"132979a5-a0c4-43f0-838c-e5df0036a82f","year":2021},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.254375Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:ecb69bdd9cccab70f57f3a236b6126f2ad3dc82fdd3a8504ae7a5804cca78d60","observation_id":"2106c9be-c85f-4566-980a-6922dad4113e","resolution":{"observed_at":"2026-08-07T14:16:30.052322Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.09417","last_updated":"2024-11-14T02:00:33Z","snapshot_observed_at":"2026-08-14T11:12:31.002605Z","submitted_at":"2024-01-17T18:56:18Z","title":"Vision Mamba: Efficient Visual Representation Learning with Bidirectional State Space Model","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.09417","snapshot_observed_at":"2026-08-07T14:16:26.347939Z","title":"Vision mamba: Efficient visual representation learning with bidirectional state space model.arXiv preprint arXiv:2401.09417, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.347939Z"},"links":{"cited_paper":"/paper/2401.09417","citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:97fa04b545b0c9e654e9dfee1de473fb6783809e96996286df25722d8cdd858c","observation_id":"e14e3fe6-b16d-4965-a1ab-0e3f3dd10b4e","resolution":{"observed_at":"2026-08-07T14:16:26.347939Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:29.800992Z","title":"This captures prior knowledge about the sensitivity of each module","venue":null,"work_id":"4956dc00-d626-4a5e-9a84-3ade37b04a1c","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.442976Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:da1d0585ac78432926f1bb06f2527efcca330920ee71a0ec2b44123bce576bf1","observation_id":"1571c9fb-37af-43b3-978c-17206241cb8e","resolution":{"observed_at":"2026-08-07T14:16:29.856065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:29.527522Z","title":"FSGS promotes perturbation alignment with semantically salient features while suppressing low-level, architecture-specific signals that degrade cross-model transferability","venue":null,"work_id":"1db5bbdc-3664-4efe-8031-d94ade2cab7c","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.523359Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:0d0b2a5e1f81d3c59b8146211e592174bb246d9c5947531f9bf54704fdd6475d","observation_id":"f67d287a-7ad8-4590-82d3-4d252310fd14","resolution":{"observed_at":"2026-08-07T14:16:29.667544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:29.254509Z","title":null,"venue":null,"work_id":"da191002-a69b-434a-8a8f-09f50f913bb0","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.686836Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:20df12fb86637bc50e6d60dc1102f658d57a7b35c556932a56aa6a7a0aa7236f","observation_id":"1e2ff7c1-7fa0-472b-bcf9-0bcea5eee3a1","resolution":{"observed_at":"2026-08-07T14:16:29.399872Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:29.037516Z","title":null,"venue":null,"work_id":"2d4356fd-6911-4f9c-9a64-b6d04b7ff9e2","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.849030Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:c3fe316cac8a23a94b1ec412cfd337771ceeb2a9350f663b41da609d5aba6ecf","observation_id":"244f4933-b29f-405c-b067-ca769e0cb2e3","resolution":{"observed_at":"2026-08-07T14:16:29.145859Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:28.839756Z","title":", L}do foreachmodulem∈ {qkv,attn,mlp}do 3.1 Extract token features and gradients: Z(l,m) = [z(l,m) 1 ,","venue":null,"work_id":"a3dbe22f-391c-4ef1-9f16-77ee83ea3f3b","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:26.966512Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:f2e9fdf93351148d142994e3fb54c35941e7021303b16457182f4f0bd7a9e7f4","observation_id":"d1455d1a-5cb9-4377-b2a0-40a95691ab04","resolution":{"observed_at":"2026-08-07T14:16:28.930917Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:28.668642Z","title":null,"venue":null,"work_id":"b89b27a3-ee8d-4090-bcad-e0901bce6750","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:27.076048Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:34dc9c5d9030dbc51f9fd7f2e411444532955f49b661520fc4894904e9359a1b","observation_id":"fdf07850-3485-4310-ba71-3ba70ff92313","resolution":{"observed_at":"2026-08-07T14:16:28.746348Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:28.483724Z","title":null,"venue":null,"work_id":"4645702a-2e63-40b4-b9e5-c1531843553d","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:27.183820Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:72a4e7c69f2ef5d71fb5387e8127ae370df5a065defc97af899eb2f689619d28","observation_id":"54d2b860-0f41-4d7c-ada1-8082748ed94d","resolution":{"observed_at":"2026-08-07T14:16:28.555637Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T14:16:28.360391Z","title":null,"venue":null,"work_id":"e7aba78d-ac0b-48c9-bad7-a88e635371e1","year":null},"citing_paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T14:16:27.294582Z"},"links":{"citing_paper":"/paper/2505.19613"},"observation_digest":"sha256:4541bc3ad5e24890859f462d3bd4ee7fe041e4105c594bf8f328369b072b2fd5","observation_id":"17c04454-bada-4c2d-88eb-f35e699ac519","resolution":{"observed_at":"2026-08-07T14:16:28.408940Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.19613","last_updated":"2025-09-11T08:58:20Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T00:03:08.749655Z","submitted_at":"2025-05-26T07:30:00Z","title":"TESSER: Transfer-Enhancing Adversarial Attacks from Vision Transformers via Spectral and Semantic Regularization"},"reference_resolution":{"displayed":60,"state_counts":{"malformed_identifier":1,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":32,"verified_exact":2,"verified_fuzzy":24},"total_outbound_references":60},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-20T06:33:59.587034+00:00","source":"crossref"},{"observed_at":"2026-08-20T06:33:54.927442+00:00","source":"retraction_watch"}],"thesis":"As of 21 August 2026, this Paper Citation Record lists 60 of 60 outbound references and 1 inbound Pith citation observation for arXiv:2505.19613."}