{"as_of":"2026-08-08T12:46:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:6b939752adedfce877e4d5c2095c4462c27350303fd09b79739e12f76c624694","coverage":[{"denominator":61,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":61,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T12:55:12.834660Z","state":"measured"},{"denominator":61,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":61,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.23313/citation-record","integrity":"/paper/2505.23313/integrity","json":"/paper/2505.23313/citation-record.json","paper":"/paper/2505.23313"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:20.297378Z","title":"Pedestrian attribute recognition: A survey,","venue":null,"work_id":"4cc6e96f-cc20-4cb1-aac1-478b649c1931","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:07.806900Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:979105be69acdda79b2564e695fd7150af5b7dcacd782bd2d991d68c8035dbbd","observation_id":"d2d49b07-43d4-4324-95fd-d4a8e33bd478","resolution":{"observed_at":"2026-08-07T12:55:20.366543Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:20.109538Z","title":"Improving person re-identification by attribute and identity learning,","venue":null,"work_id":"4af2935e-4782-4dbb-96ba-b2769341f3a7","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:07.891959Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:48204b5babe9fb53843126e2a906412cfa4b6b0e34677f7dc56f576bd2b7ff98","observation_id":"f09ac288-d69d-40da-b97f-53650d994c6f","resolution":{"observed_at":"2026-08-07T12:55:20.178658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.894535Z","title":"Attmot: improving multiple-object tracking by introducing auxiliary pedestrian attributes,","venue":null,"work_id":"8b770192-17ac-42aa-b10b-c704cdfb721f","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.052371Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d79c5cf2910f57bc7d694df2c45df2b18c108c58f0f6d45f374f3c1289874933","observation_id":"53a77a22-94bc-45f1-af5d-c44187f8e553","resolution":{"observed_at":"2026-08-07T12:55:19.995912Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.673108Z","title":"Attribute- guided pedestrian retrieval: Bridging person re-id with internal attribute variability,","venue":null,"work_id":"39c587c8-0079-4dd1-a55f-fac7772b4033","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.167927Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3d032728a945971bdc5d6ee95b1b57041963015ec6be75d731746f2f5e8fcbee","observation_id":"a0254c75-025b-4fe9-b663-0dbc4d75d537","resolution":{"observed_at":"2026-08-07T12:55:19.780063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.286439Z","title":"Attribute recognition by joint recurrent learning of context and correlation,","venue":null,"work_id":"8be3b95b-3104-4c33-b822-101581aaff80","year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.299983Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:370352480b982f32d7a63c992680c89df693ff531f189c47af433b6664c98cef","observation_id":"5098b420-ad0b-45c9-867f-39949d53c0df","resolution":{"observed_at":"2026-08-07T12:55:19.390486Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.072883Z","title":"A simple visual-textual baseline for pedestrian attribute recognition,","venue":null,"work_id":"271d57b6-09c9-4f24-a85c-00338d4e3a79","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.389045Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:38e47b376b5b889df72f2044e17707281f0d1bc4eb06551bae6c911a510d3420","observation_id":"07fa31e3-e5fc-4d12-9d78-697a7d9c35a9","resolution":{"observed_at":"2026-08-07T12:55:19.172573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.882453Z","title":"Learning transferable visual models from natural language supervision,","venue":null,"work_id":"0695cc2c-0456-4716-a782-b66c6a452673","year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.475774Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:9256771138d3808900af2eb08dc132d7f44873410de095edac1fbc9839b21a25","observation_id":"546f1743-07af-41e8-beb7-efaa0dface66","resolution":{"observed_at":"2026-08-07T12:55:18.990323Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-07T12:55:08.561745Z","title":"Gpt-4 technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.561745Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a5a54086c004ead701ba190e46e8decefe84d0d74999f72b35206b82794eadae","observation_id":"9913ca98-f05e-489b-ae87-544ae76c770b","resolution":{"observed_at":"2026-08-07T12:55:08.561745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.12948","last_updated":"2026-01-04T03:57:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-01-22T15:19:35Z","title":"DeepSeek-R1: Incentivizing Reasoning Capability in LLMs via Reinforcement Learning","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.12948","snapshot_observed_at":"2026-08-07T12:55:08.636731Z","title":"Deepseek-r1: Incentivizing reasoning capability in llms via reinforcement learning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.636731Z"},"links":{"cited_paper":"/paper/2501.12948","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6f3203db016d2268b97754c139e5e74b066ea278996719aea501854cd868ae4b","observation_id":"f9438499-5ce0-435d-8452-40cdd7760309","resolution":{"observed_at":"2026-08-07T12:55:08.636731Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2309.16609","last_updated":"2023-09-28T17:07:49Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-09-28T17:07:49Z","title":"Qwen Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.16609","snapshot_observed_at":"2026-08-07T12:55:08.702623Z","title":"Qwen technical report,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.702623Z"},"links":{"cited_paper":"/paper/2309.16609","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3c9c28795b2ec3f5fbbaf633548709fc58712889f894d5c13be22a74a206d3d5","observation_id":"e3356fb2-3f32-47d9-8342-7b504cf91b5e","resolution":{"observed_at":"2026-08-07T12:55:08.702623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.699269Z","title":"Pedestrian attribute recognition via clip based prompt vision-language fusion,","venue":null,"work_id":"ead5bcd5-6411-4e40-92d7-6bb2a2e274ae","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.766370Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:7840c25b4ea279580b35d5dce27c666fc17651b1df4ad0d03c8a4a3aaebb437f","observation_id":"0b3a6d3c-44f2-4e9c-8bb2-077086ea8194","resolution":{"observed_at":"2026-08-07T12:55:18.769264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.521612Z","title":"Pedestrian attribute recognition: A new benchmark dataset and a large language model augmented framework,","venue":null,"work_id":"2f282a1c-7471-4c82-93c9-80ef66525882","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.831564Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4d7ed897b475c0fe6062925d22abf1dc6777f69194b61bc232793feb376d773a","observation_id":"4aaeb43d-2707-4c5a-b8be-af4b8fb247bd","resolution":{"observed_at":"2026-08-07T12:55:18.621107Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.354133Z","title":"Physical adversarial attack meets computer vision: A decade survey,","venue":null,"work_id":"517137e5-b004-4cec-8311-cbfd090867f9","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:08.961165Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4c555e084dab9f18720cc4f98a7a4122bddf02a49cb1a6138b270c9c931d953b","observation_id":"b6409c07-a1bf-4751-9f4c-51ac73d81914","resolution":{"observed_at":"2026-08-07T12:55:18.442000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:18.135439Z","title":"Mutual-modality adversarial attack with semantic perturbation,","venue":null,"work_id":"27a30727-3f1f-4ac5-91f6-85a8cec0f102","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.053116Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:c571d32877ff8dbaf833311b09c622ada4853dcb7dfbdadf6298eedc4c89c3de","observation_id":"21308daa-958a-44d1-bac8-e0cc75605786","resolution":{"observed_at":"2026-08-07T12:55:18.239586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.915133Z","title":"Diffattack: Evasion attacks against diffusion-based adversarial purification,","venue":null,"work_id":"e19d4363-7f96-4caf-a8e8-9d76dd6ddc80","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.119928Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b152addbec6651d2be059e2b02680842a01b39309253922c4af71f2bec6e0bbe","observation_id":"53af098e-945c-42cb-8d38-bae1e3a7a09a","resolution":{"observed_at":"2026-08-07T12:55:18.008202Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.677026Z","title":"Strong transferable adversar- ial attacks via ensembled asymptotically normal distribution learning,","venue":null,"work_id":"a5bab545-8741-4ac1-b8a0-ac7c0b1a8ffe","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.221075Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:2594f62f516cb2c4e0f1bb9e32176e5f814dc47be5624db66c71a0b9bf5c30aa","observation_id":"bdd6f855-44ea-4644-ae4f-316e52394b21","resolution":{"observed_at":"2026-08-07T12:55:17.785597Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.474054Z","title":"Stealthiness assessment of adversarial perturbation: From a visual perspective,","venue":null,"work_id":"d09e2285-38f9-4ded-962b-837d3a1d6fdf","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.286661Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d74b78625d1eea41a07b9d09fdc2d03d69cf21e6e0d1484dfac10873893f0a9b","observation_id":"57d22da9-4755-4d9b-9a16-eb0c155e07f6","resolution":{"observed_at":"2026-08-07T12:55:17.567589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.259894Z","title":"Pedestrian attribute recog- nition at far distance,","venue":null,"work_id":"d100db85-38b3-4c31-a793-703e4429d98a","year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.362625Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ee9414ac3cf3b60dd5737137da04698fc449d700f0da1219badbd2d2bcc9b9f9","observation_id":"0b32dded-4937-40be-890b-323ab10272f8","resolution":{"observed_at":"2026-08-07T12:55:17.360976Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:17.016765Z","title":"Hydraplus-net: Attentive deep features for pedestrian analysis,","venue":null,"work_id":"e7fce049-c05c-492d-bc03-5ef5ed4e8e26","year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.463690Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8a38b18ccedd1fba1d54660f6037d58b6dfbe15605bad7d0a928ba8f743ab33a","observation_id":"b727f4b4-2970-406d-b8a4-11a348a95ccd","resolution":{"observed_at":"2026-08-07T12:55:17.120800Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.850241Z","title":"A richly annotated pedes- trian dataset for person retrieval in real surveillance scenarios,","venue":null,"work_id":"03063c73-b3c6-4812-b729-d1f4970ae771","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.538834Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:09143adb6385f6c40a3e54d8efa543ac7fd17be6b994ec0ea42f81f2088a3fa7","observation_id":"aa8d0c78-e2d1-4233-ab3f-2bfa027796f0","resolution":{"observed_at":"2026-08-07T12:55:16.916561Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T12:55:09.630931Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.630931Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:40eb42bd9ced8d31bcd7996d3f4d9425342660f9689439c4796ae8dcc2ab6dff","observation_id":"d798fe70-5b33-42d2-b10c-a196fbd67019","resolution":{"observed_at":"2026-08-07T12:55:09.630931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T12:55:09.712866Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.712866Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:446e43472a4c9d0d69d01a4a440f9e93af62bd36433f4279534bb02d5ae13f49","observation_id":"c226c5cc-37fb-4fc8-b132-817e723d295a","resolution":{"observed_at":"2026-08-07T12:55:09.712866Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.805219Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.805219Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ff674303aecfe98f780320ac0540b10277b211b5b66ec6f6011399cc288abdb5","observation_id":"32612ef9-278c-4b4d-b29c-e9da96496992","resolution":{"observed_at":"2026-08-07T12:55:09.805219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.859867Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.859867Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:fd2744662d4c795f081bad31b8986339d255cc7b6123463a5f2bde6fb534fff5","observation_id":"119d7d96-6a6b-42cf-8de1-8805451d94eb","resolution":{"observed_at":"2026-08-07T12:55:09.859867Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:09.917413Z","title":"Improving transferability of adversarial examples with input diversity,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:09.917413Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a5e645711923af64cf5b3a96e9fd5af2e4eed186a6554c7688ee9f1b11d46a3d","observation_id":"0f2d89f8-6451-4879-8351-9919f52a2aea","resolution":{"observed_at":"2026-08-07T12:55:09.917413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.002949Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.002949Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8ee3c85b58c0b3754e2ea069c0fbe1a63c11076b3ac136cb6b364b7c648cd8da","observation_id":"41636ec8-9540-40d5-bcce-99cb07c75266","resolution":{"observed_at":"2026-08-07T12:55:10.002949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.652795Z","title":"Advdrop: Adversarial attack to dnns by dropping information,","venue":null,"work_id":"231d0883-16ad-4f43-aaa8-6b566458372a","year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.062313Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4a469724c566620579a046cf31febc967731be6c7f35fa46bc27565fcfc3cfce","observation_id":"95fc24e1-a7d1-4892-9845-ecb17882b13c","resolution":{"observed_at":"2026-08-07T12:55:16.730328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.472520Z","title":"The best protection is attack: Fooling scene text recognition with minimal pixels,","venue":null,"work_id":"75e9a7a8-1f5d-499a-a334-d913c66c15f0","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.132479Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:e3168c9e840bb42729b5e0895fb66bcdd0a151d144ad85f9f8491072b50c9472","observation_id":"b34b6c1f-f0fc-4ea5-84b1-40b8939da234","resolution":{"observed_at":"2026-08-07T12:55:16.546342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T12:55:10.204398Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.204398Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a0437d8dcb973452ae8ea013fc3edc5e59de2412df238c77ff7bab0c63b7ed3c","observation_id":"59faab4e-f9db-4771-8347-94733c790ad2","resolution":{"observed_at":"2026-08-07T12:55:10.204398Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1705.07204","last_updated":"2020-04-26T22:20:25Z","snapshot_observed_at":"2026-07-06T05:43:27.961693Z","submitted_at":"2017-05-19T21:56:43Z","title":"Ensemble Adversarial Training: Attacks and Defenses","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1705.07204","snapshot_observed_at":"2026-08-07T12:55:10.270586Z","title":"Ensemble adversarial training: Attacks and defenses,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.270586Z"},"links":{"cited_paper":"/paper/1705.07204","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d57aa2949a7821776d3a01ce0520d85bd6b3acaecd864e1e0629ecfee9e3108b","observation_id":"a5f60b0f-6f56-4bdc-982a-b85ac909052c","resolution":{"observed_at":"2026-08-07T12:55:10.270586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.00117","last_updated":"2018-01-25T19:04:48Z","snapshot_observed_at":"2026-07-06T06:07:07.703002Z","submitted_at":"2017-10-31T21:22:16Z","title":"Countering Adversarial Images using Input Transformations","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.00117","snapshot_observed_at":"2026-08-07T12:55:10.335984Z","title":"Counter- ing adversarial images using input transformations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.335984Z"},"links":{"cited_paper":"/paper/1711.00117","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:f2954671b118c7e85c9377816eefa2c9e6f6a263722edbc810ac74369e412c7d","observation_id":"810ed97e-0ff1-4639-a9dc-d9002070e885","resolution":{"observed_at":"2026-08-07T12:55:10.335984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1711.01991","last_updated":"2018-02-28T22:39:15Z","snapshot_observed_at":"2026-08-04T13:57:53.214741Z","submitted_at":"2017-11-06T16:22:54Z","title":"Mitigating Adversarial Effects Through Randomization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1711.01991","snapshot_observed_at":"2026-08-07T12:55:10.431484Z","title":"Mitigating adversarial effects through randomization,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.431484Z"},"links":{"cited_paper":"/paper/1711.01991","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:97c18fc0157c7e0032c36578a7b8378c00a75c994489bb6f8cc8a90c46d21b6e","observation_id":"fbcac3b2-2a76-475f-91c1-5fc107e47f68","resolution":{"observed_at":"2026-08-07T12:55:10.431484Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.500260Z","title":"Defense against adversarial attacks using high-level representation guided denoiser,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.500260Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:d1d1ae077582e6c6f8387f148da96958eb732a650fc64ffd3e328f3515b11dfd","observation_id":"fcdb0f9b-d9e6-4707-b439-4dff727c29e2","resolution":{"observed_at":"2026-08-07T12:55:10.500260Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.565856Z","title":"Enhancing the transferability of adversarial attacks through variance tuning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.565856Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:cc834cf50772cb7612733ff3ce7a17cd9c195a6e470768623e8b46fa7414eb44","observation_id":"32ea8f98-4d7e-4a35-a57c-d93206eb77ca","resolution":{"observed_at":"2026-08-07T12:55:10.565856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1908.06281","last_updated":"2020-02-03T02:58:31Z","snapshot_observed_at":"2026-07-06T08:14:59.387021Z","submitted_at":"2019-08-17T10:03:05Z","title":"Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1908.06281","snapshot_observed_at":"2026-08-07T12:55:10.617905Z","title":"Nesterov accelerated gradient and scale invariance for adversarial attacks,","venue":null,"work_id":null,"year":1908},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.617905Z"},"links":{"cited_paper":"/paper/1908.06281","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6be0f9665152c862128ba9bbca3538660e231d066ee9299dcc8eeac59b07302a","observation_id":"b6c0e771-5534-4b64-ac33-1710277972ac","resolution":{"observed_at":"2026-08-07T12:55:10.617905Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.271586Z","title":"Certified adversarial robustness via randomized smoothing,","venue":null,"work_id":"0a4dbbb3-fa4e-406d-9b05-d14154cb458a","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.673746Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3055de6d70e2b5275cdae1c054dd7ac7edda9748cc9f500b10606a0890a7aef7","observation_id":"54d9c871-9084-4c1e-b130-11fc3e153998","resolution":{"observed_at":"2026-08-07T12:55:16.384539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:16.092354Z","title":"A robust open-set multi- instance learning for defending adversarial attacks in digital image,","venue":null,"work_id":"c4945e05-22fc-47b8-bf07-3ec7ad23973e","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.733600Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b778204d7d220a04d13be2cc6ba64c7a569adde143ae1229e7cc93173a25cea9","observation_id":"41893b0e-d7c9-437b-aab5-1ebee2571871","resolution":{"observed_at":"2026-08-07T12:55:16.171370Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:10.786337Z","title":"Generative adversarial nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.786337Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:b8a0549d154e9db57290801a2018871e55f873657cad8fb2b867e1ea328f0661","observation_id":"f0b61a8b-942d-441d-8b96-e1166e7b4952","resolution":{"observed_at":"2026-08-07T12:55:10.786337Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02610","last_updated":"2019-02-14T15:53:22Z","snapshot_observed_at":"2026-08-07T08:42:27.035615Z","submitted_at":"2018-01-08T18:50:13Z","title":"Generating Adversarial Examples with Adversarial Networks","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02610","snapshot_observed_at":"2026-08-07T12:55:10.881029Z","title":"Gener- ating adversarial examples with adversarial networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.881029Z"},"links":{"cited_paper":"/paper/1801.02610","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:eb7a04dc2e2c69180818cc7f5bb3b7a1eb19051d59ddaaaef8dc400a11e2270d","observation_id":"031ad194-f71c-43c8-8b80-a96ca3aa4ea8","resolution":{"observed_at":"2026-08-07T12:55:10.881029Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1904.07793","last_updated":"2020-02-07T18:11:58Z","snapshot_observed_at":"2026-07-06T07:46:31.893420Z","submitted_at":"2019-04-16T16:26:19Z","title":"AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1904.07793","snapshot_observed_at":"2026-08-07T12:55:10.951615Z","title":"At-gan: A generative attack model for adversarial transferring on generative adversarial nets,","venue":null,"work_id":null,"year":1904},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:10.951615Z"},"links":{"cited_paper":"/paper/1904.07793","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:226d1d98955f74d31c269788f644ed672ca756b374d34c5cd82ba3a067cede83","observation_id":"a6ba3ab9-aa0e-4c9d-9373-801e1d53d23a","resolution":{"observed_at":"2026-08-07T12:55:10.951615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.922879Z","title":"Label-only model inversion attacks: Attack with the least information,","venue":null,"work_id":"f6cfc3ae-6920-4cd1-a7ad-9b53ebde728a","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.026806Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:705035ec460806043ddc13f0da133fc7bde2d5ce18b744ea126596c0256696d7","observation_id":"45993bc7-8ef5-4f53-bb5b-1c8682b67a4e","resolution":{"observed_at":"2026-08-07T12:55:16.011340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.746371Z","title":"Robust and general- ized physical adversarial attacks via meta-gan,","venue":null,"work_id":"23f3d540-2a1a-4f88-bd6b-ffde620e1413","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.105486Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:0c9683a3f49ebdd242b5093d4e586934abc83f46217da6ba75bc3d4c2b7d3d61","observation_id":"5b4895db-fd06-4019-97c7-d3f49e021f3c","resolution":{"observed_at":"2026-08-07T12:55:15.830505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.596603Z","title":"Hierarchical reasoning network for pedestrian attribute recognition,","venue":null,"work_id":"2f17aada-f822-4e4a-9cf3-ef707b3a5c0b","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.172179Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:8fd5b939efafc8defbf46475f3e840b606b3dbba801d03f93b8db32631e45798","observation_id":"59f622eb-4e1c-42a9-a95c-9a95528ee09e","resolution":{"observed_at":"2026-08-07T12:55:15.670005Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:19.493592Z","title":"Multi-task cnn model for attribute prediction,","venue":null,"work_id":"9ea20e3d-153a-470f-be82-2acb4cb06d23","year":1949},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.239680Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:3bd3f451f0576145956ca7373e5e5a8b68209b809ab39fb7066a4cc9abdb349e","observation_id":"63b0ac36-e8dc-41f0-a9a7-6cb289a65804","resolution":{"observed_at":"2026-08-07T12:55:19.566482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.452274Z","title":"Recurrent attention model for pedestrian attribute recognition,","venue":null,"work_id":"6135e03a-ecf8-48d2-9b06-fb69cfd32003","year":2019},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.331606Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:c5fe81f400f7867aec2ba8455795b2f4a5616f31507dc4dd0683b8731011980f","observation_id":"257c68fc-08ef-40e9-9fff-f9ba833190e8","resolution":{"observed_at":"2026-08-07T12:55:15.516778Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.321874Z","title":"Correlation graph convolu- tional network for pedestrian attribute recognition,","venue":null,"work_id":"8092155f-8db4-4261-a3bd-7c009b17b004","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.391103Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:1215532afcb4cf4a5e9c307d002d5cfec73588c9877cc99afa120b4b4823661c","observation_id":"2212bc88-3b32-4615-9713-8b646a07e70e","resolution":{"observed_at":"2026-08-07T12:55:15.409412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:15.132409Z","title":"Relation-aware pedestrian attribute recognition with graph convolutional networks,","venue":null,"work_id":"03c2c7d3-3aae-4649-a7cf-84476ccd4ddb","year":2020},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.458119Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:1b3d5466987463a946c04dffc99fcd135036502aa18d0b7533c09d11e348cbfd","observation_id":"303e3bb3-8537-4c4c-a4d0-288816fec0f9","resolution":{"observed_at":"2026-08-07T12:55:15.201081Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.951065Z","title":"Visual attention consistency for human attribute recognition,","venue":null,"work_id":"237e34ef-d621-43a7-8f48-c66b95f3eca5","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.572076Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:f7e6532a5daf8ab984e19ac3135cf0b2d8ac8e94adcbb38c82ce4639e30cbf34","observation_id":"cba168e1-1479-43b6-a408-a195e1114945","resolution":{"observed_at":"2026-08-07T12:55:15.031673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-07T12:55:11.719523Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.719523Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:619abf3a981c4c843be91472223cc45cd78f37ae91ac7bc074399d5ad71fc3cb","observation_id":"b9753cdc-2d00-4ffd-8738-e804e474e763","resolution":{"observed_at":"2026-08-07T12:55:11.719523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.805299Z","title":"Learning clip guided visual-text fusion transformer for video-based pedestrian attribute recog- nition,","venue":null,"work_id":"aa8f56e2-7b5e-45fc-b719-d138da62d154","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.869936Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:4659e447c5572678ee71dce88d751e7f751fc3af2653b44fcc444e6a978cc9ef","observation_id":"9a7c89be-1730-4fd0-8878-21ccb9baeffb","resolution":{"observed_at":"2026-08-07T12:55:14.873878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.17929","last_updated":"2024-04-27T14:43:32Z","snapshot_observed_at":"2026-08-05T17:17:37.619391Z","submitted_at":"2024-04-27T14:43:32Z","title":"Spatio-Temporal Side Tuning Pre-trained Foundation Models for Video-based Pedestrian Attribute Recognition","version":1},"cited_work":{"arxiv_id":"2404.17929","doi":null,"metadata_source":"pith","pith_arxiv_id":"2404.17929","snapshot_observed_at":"2026-08-07T12:55:13.599049Z","title":"Spatio-Temporal Side Tuning Pre-trained Foundation Models for Video-based Pedestrian Attribute Recognition","venue":"cs.CV","work_id":"123ff3b8-8d15-416a-bf09-59ef3848b1d3","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:11.984212Z"},"links":{"cited_paper":"/paper/2404.17929","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:819b4fa54fab5cc5d2d56d057bb853ec2a6e83029c9a6cdef68735160e045dd8","observation_id":"9b16ba13-267c-4424-be36-7dc7278505f3","resolution":{"observed_at":"2026-08-07T12:55:13.693731Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.629694Z","title":"Drformer: Learning dual relations using trans- former for pedestrian attribute recognition,","venue":null,"work_id":"0f504000-c714-4259-896c-ec761f2b49a8","year":2022},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.076772Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:11d2b290e17bd738a6f0e18d5eef56fe968251853cb9c21a3509985d14ae7a31","observation_id":"a0c4daa8-72b6-4727-b5a0-841c36b52a23","resolution":{"observed_at":"2026-08-07T12:55:14.720544Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2504.10018","last_updated":"2025-08-06T11:01:24Z","snapshot_observed_at":"2026-08-07T16:05:59.181360Z","submitted_at":"2025-04-14T09:22:16Z","title":"RGB-Event based Pedestrian Attribute Recognition: A Benchmark Dataset and An Asymmetric RWKV Fusion Framework","version":2},"cited_work":{"arxiv_id":"2504.10018","doi":null,"metadata_source":"pith","pith_arxiv_id":"2504.10018","snapshot_observed_at":"2026-08-07T12:55:13.411445Z","title":"RGB-Event based Pedestrian Attribute Recognition: A Benchmark Dataset and An Asymmetric RWKV Fusion Framework","venue":"cs.CV","work_id":"4e513bcf-2217-46a8-90b5-128d57fede3c","year":2025},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.130086Z"},"links":{"cited_paper":"/paper/2504.10018","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:30d07a2db59490056dd1150332c57aafba08f4107070735dd6c97db707ce9d35","observation_id":"e5e4e3f9-ad90-4098-b8c9-995953e34216","resolution":{"observed_at":"2026-08-07T12:55:13.505778Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2312.01640","last_updated":"2025-09-02T02:34:38Z","snapshot_observed_at":"2026-08-06T16:25:29.440902Z","submitted_at":"2023-12-04T05:42:56Z","title":"SequencePAR: Understanding Pedestrian Attributes via A Sequence Generation Paradigm","version":2},"cited_work":{"arxiv_id":"2312.01640","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.01640","snapshot_observed_at":"2026-08-07T12:55:13.244845Z","title":"SequencePAR: Understanding Pedestrian Attributes via A Sequence Generation Paradigm","venue":"cs.CV","work_id":"cfb24a30-ae93-472a-affd-66df63f163cd","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.211952Z"},"links":{"cited_paper":"/paper/2312.01640","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:a33e1960ecc0b4729269244dc10adbe82684b51e2cca6fabeaa00bbaef4c64c0","observation_id":"e2aa4333-6ade-4e1e-918d-5c833d29c217","resolution":{"observed_at":"2026-08-07T12:55:13.329802Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.478536Z","title":"Cdul: Clip- driven unsupervised learning for multi-label image classification,","venue":null,"work_id":"f6c21120-e12b-4819-b191-e6ba7598964b","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.280264Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:62069a52a190422d8106a82f2db5a7da20af79ed36ea9417ff8deefa95a53395","observation_id":"e779b876-01e8-496f-b1cd-4e2f85717534","resolution":{"observed_at":"2026-08-07T12:55:14.536559Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.373287Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.373287Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:94983535d5d7bdd4af563bfe30065f7c17f25a1ae19183db22282f2ef856ccc7","observation_id":"967f5bfd-1364-415e-ab92-8163487bd8c0","resolution":{"observed_at":"2026-08-07T12:55:12.373287Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:14.202691Z","title":"Boosting adversarial transferability via gradient relevance attack,","venue":null,"work_id":"840751d0-62fd-45b3-a98e-3479890650d7","year":2023},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.461377Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:50298ff42e930962f4f2b9a18a3c2cb7f6d9b7aeacead12ecc14b5e06fbd430b","observation_id":"0ad43ab4-627c-4268-8c44-bd759702d692","resolution":{"observed_at":"2026-08-07T12:55:14.352062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.565811Z","title":"Enhancing adversarial trans- ferability through neighborhood conditional sampling,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.565811Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:37372a3a2cb0692115dae5ad5d0104fddabd42fed51d28ea05998895e60b37a9","observation_id":"dd943d0b-3b9a-4fe6-aee5-0729fb666ced","resolution":{"observed_at":"2026-08-07T12:55:12.565811Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:12.664773Z","title":"On the importance of initialization and momentum in deep learning,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.664773Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:bcab62823ea5bfcf28483f629abc5c42e51888bce424c29145a417d99da2fbb9","observation_id":"4b72d36b-4fbe-4ff8-8d8e-0624b0c903e0","resolution":{"observed_at":"2026-08-07T12:55:12.664773Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T12:55:13.949934Z","title":"An empirical study of mamba-based pedestrian attribute recognition,","venue":null,"work_id":"e4217bac-7c30-4031-b164-eb7935f7d2e7","year":null},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.787579Z"},"links":{"citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:ea27b9d0feac5cdcc3ca56ba1e3a80ce7d5ec84ae1b5731d4052a49685e83b04","observation_id":"c9152e08-d81a-4655-b76b-17dc42f00fc3","resolution":{"observed_at":"2026-08-07T12:55:14.048162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.10374","last_updated":"2024-12-03T04:25:30Z","snapshot_observed_at":"2026-07-06T18:46:14.144689Z","submitted_at":"2024-07-15T00:48:06Z","title":"An Empirical Study of Mamba-based Pedestrian Attribute Recognition","version":2},"cited_work":{"arxiv_id":"2407.10374","doi":null,"metadata_source":"pith","pith_arxiv_id":"2407.10374","snapshot_observed_at":"2026-08-07T12:55:12.952482Z","title":"An Empirical Study of Mamba-based Pedestrian Attribute Recognition","venue":"cs.CV","work_id":"2241b145-d475-40ed-94d5-f71b3c7f82e6","year":2024},"citing_paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T12:55:12.834660Z"},"links":{"cited_paper":"/paper/2407.10374","citing_paper":"/paper/2505.23313"},"observation_digest":"sha256:6d67ee139f998809bf39307eecdf2f07bd4942c5bdba5e5080fc8878030070b7","observation_id":"df68cdf9-e855-4d80-8b57-9346c2613b2d","resolution":{"observed_at":"2026-08-07T12:55:13.035170Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.23313","last_updated":"2025-05-29T10:17:17Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T12:45:51.533672Z","submitted_at":"2025-05-29T10:17:17Z","title":"Adversarial Semantic and Label Perturbation Attack for Pedestrian Attribute Recognition"},"reference_resolution":{"displayed":61,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":23,"verified_exact":3,"verified_fuzzy":34},"total_outbound_references":61},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 61 of 61 outbound references and 0 inbound Pith citation observations for arXiv:2505.23313."}