{"as_of":"2026-08-08T09:13:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:27f86a6505195360ccace02b9457a3052f078b4f9ffdfd969c599c1756e02126","coverage":[{"denominator":71,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":71,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:37:17.818810Z","state":"measured"},{"denominator":71,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":71,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.04823/citation-record","integrity":"/paper/2506.04823/integrity","json":"/paper/2506.04823/citation-record.json","paper":"/paper/2506.04823"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.505786Z","title":"Traffic light mapping and detection,","venue":null,"work_id":"d6eb8903-4bf5-405a-82f7-41c27ec303f0","year":2011},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.685189Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:716fac54473d7fabe399842ab6dc659499c014895b132193e154350e9e01ee9b","observation_id":"19c6ea73-8dfd-471d-b722-0523a8e251b4","resolution":{"observed_at":"2026-08-07T10:37:18.508846Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.496367Z","title":"Traffic light recognition using deep learning and prior maps for autonomous cars,","venue":null,"work_id":"ea439de3-9a72-4483-a7a6-c9e1df9b0c5a","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.743873Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:cb610358dce7331235de33fc48dad1446281bb46e9943f29c1d87d05f577af0d","observation_id":"85915943-8337-4878-92b6-d57655d64fbc","resolution":{"observed_at":"2026-08-07T10:37:18.499833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.486785Z","title":"Intriguing Properties of Neural Networks,","venue":null,"work_id":"bdba45f6-7f93-4ec8-b967-514c6f2abef9","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.817225Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:8740f784f4e02aa297f85a6c2a8345cc984de1e45b9606bb142f2090da15c065","observation_id":"87bcd682-30e2-4cb0-89ed-31d39c6fa593","resolution":{"observed_at":"2026-08-07T10:37:18.489977Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.476945Z","title":"Explaining and Harness- ing Adversarial Examples,","venue":null,"work_id":"1f02009e-3552-4688-8d83-7f0d8da85f2b","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.905139Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:109b1ab4788ab4656b7ec068d85c75aea8fd9f7c1193480022a292c90580f6eb","observation_id":"5f45c8b1-9d65-4930-b878-286d998d51a6","resolution":{"observed_at":"2026-08-07T10:37:18.480380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.467331Z","title":"Adversarial Patch,","venue":null,"work_id":"12813269-19df-4568-aff2-dc11bfa52a25","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:11.989816Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e190175ae3f2c86e0930b783c3376301f539f4e3358cbf02878b7a25c0963830","observation_id":"1f2d426d-8ec6-4076-87e6-5ac0e183da3e","resolution":{"observed_at":"2026-08-07T10:37:18.470676Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.457773Z","title":"Evalu- ating the robustness of semantic segmentation for autonomous driving against real-world adversarial patch attacks,","venue":null,"work_id":"4ad05d75-983d-43fc-8067-67b08f24bb70","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.080480Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:778b4be149625398d1b08b5571dcbddc2d5302ed076390bce39749fa260f32ed","observation_id":"a2021e9f-a8ae-457c-8367-ff4ba6881bec","resolution":{"observed_at":"2026-08-07T10:37:18.461332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.448778Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":"e69a959c-e09a-48cd-aa57-b74dbfabe623","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.162860Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e19ba1b73081f35bbc5c6d676b29bd19e4e061e861f5e34fc3aa48f99ebf2dda","observation_id":"205096b7-0ad3-459f-9827-621ecab2034e","resolution":{"observed_at":"2026-08-07T10:37:18.451970Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.439587Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":"d510ffe5-6fdb-4e21-9da9-31622fa63366","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.231449Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1e80902755812657689390c4fa73ffd76734c0c0e736bcc262f4d18c1dbcbd1c","observation_id":"c9068850-d865-40c5-a0b0-ebcc4a73386a","resolution":{"observed_at":"2026-08-07T10:37:18.443124Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.430460Z","title":"Feasibility and sup- pression of adversarial patch attacks on end-to-end vehicle control,","venue":null,"work_id":"82603485-da91-4d7b-ab9e-b72a2c7538a1","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.302466Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:3dcdf6a7eafee31a4719565247f1ccf994c3357d12232789dd07b28a2b75227b","observation_id":"d5781805-0694-4291-b896-5e88044270ac","resolution":{"observed_at":"2026-08-07T10:37:18.433449Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.421930Z","title":"Effects of and defenses against adversarial attacks on a traffic light classification cnn,","venue":null,"work_id":"cd116786-2d32-4029-bdb7-94826c3d3b08","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.372750Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:d9a37de6bc46d89bcecb05b139041aecdafba2a5330930c1f1fe5ad97654cd24","observation_id":"3013aa1c-8191-4cdd-9ff3-ed34ae88df6a","resolution":{"observed_at":"2026-08-07T10:37:18.424833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.412035Z","title":"SITAR: evaluating the adversarial robustness of traffic light recognition in level-4 autonomous driving,","venue":null,"work_id":"368063c5-47d0-476c-901d-6306aaec0141","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.425422Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1028f942bb627bd17ccfc7ee20d1859415708b4afb5e17daf1a823dd56494d74","observation_id":"728c023e-f1c9-4b03-a544-f7f6fcb8df6a","resolution":{"observed_at":"2026-08-07T10:37:18.415879Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.403100Z","title":"Rolling colors: Adversarial laser exploits against traffic light recognition,","venue":null,"work_id":"6f007a01-6c79-41da-bf1a-5e8a8182e7d0","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.502743Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1f2ffdc2ec0fa92009ab11e237a860b4b75f773a44083245257e82edb9914549","observation_id":"e56b75f9-ab3a-4463-a0c3-5d1c6f00f6f7","resolution":{"observed_at":"2026-08-07T10:37:18.406669Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.393741Z","title":"On the vulnerability of traffic light recognition systems to laser illumination attacks,","venue":null,"work_id":"26a46fe4-5043-499e-8c7c-70a5e35d69e5","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.577835Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:ce9a7ecd1502b462ef0c378437e02b686c3b5a7988bf7225feb206c7fe2a7879","observation_id":"035514f2-0521-4130-83c3-f474d71d4b5e","resolution":{"observed_at":"2026-08-07T10:37:18.397130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.383762Z","title":"Deepbillboard: Systematic physical-world testing of autonomous driving systems,","venue":null,"work_id":"0444e19a-22e5-481e-814c-2bf364861d1d","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.670412Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:de27856857ab740485f03915046a9619e8627faab8ed322d07b47b1ab2b61c4a","observation_id":"aedfcf2b-9e5b-420d-a467-3f0acb2315a6","resolution":{"observed_at":"2026-08-07T10:37:18.387533Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.373893Z","title":"TLD-READY: traffic light detection - relevance estimation and deployment analysis,","venue":null,"work_id":"b0703224-cbcc-456f-b23a-437da0826163","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.784067Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5831f1af1fdd2218e11bcecaf165d16384606f219ba7a5e9261be3dc8b10c6bd","observation_id":"73b2598a-3d9c-4e72-999c-11b94612d1bb","resolution":{"observed_at":"2026-08-07T10:37:18.377223Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.364529Z","title":"From door to door—principles and applications of computer vision for driver assistant systems,","venue":null,"work_id":"a9029686-8a36-4866-ae5b-f1baad6e1178","year":2001},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.895269Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f5c789be981196588946e72e08c5c06188146e205a82a098e509b27bef4f5fd3","observation_id":"a4d56762-daa4-4c28-bd86-9b8f8e92c18f","resolution":{"observed_at":"2026-08-07T10:37:18.367827Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.355674Z","title":"A vision-based traffic light detection system at intersections,","venue":null,"work_id":"69774cd1-f7b2-4aef-954e-0a2dc677c795","year":2002},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:12.969130Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:96ae6778e739c6d2abb46c08808434105d584b2858639c8cc634b51d519232a8","observation_id":"429c28b5-f86b-4ab2-99a1-107b5db70c41","resolution":{"observed_at":"2026-08-07T10:37:18.358654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.347042Z","title":"Robust recognition of traffic signals,","venue":null,"work_id":"4977eb5d-28c7-4cc4-a71c-4dbe3955cbe0","year":2004},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.045295Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:2726b7599648e74d79b3adfaac013821fb4e28e39eed1f76480e6e4810c8b400","observation_id":"a6e844dd-251e-4454-ae41-f219c9356fb4","resolution":{"observed_at":"2026-08-07T10:37:18.349950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.338356Z","title":"Visual state estima- tion of traffic lights using hidden markov models,","venue":null,"work_id":"66894c8a-4974-4370-9d60-2197b9edef12","year":2010},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.166031Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:12117f8bbef9b7632050f11652c2b6b56de7f4adf4d55f33b4919d1adfaeee8a","observation_id":"ff040fdf-695e-4ea9-b8f2-58b838ea57ab","resolution":{"observed_at":"2026-08-07T10:37:18.341308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.329824Z","title":"Traffic light recognition using convolutional neural networks: A survey,","venue":null,"work_id":"85270fb4-7bd0-4a0c-ac9b-ab35d95de31b","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.272657Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:60047e3d0bd51cfa375e819b34dda129dad2dc70ce3c3bc54b867865eaee4ba3","observation_id":"ba8b17ff-ca59-45e3-bb4b-0c322a6567fd","resolution":{"observed_at":"2026-08-07T10:37:18.332750Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.321221Z","title":"You only look once: Unified, real-time object detection,","venue":null,"work_id":"ff0f3768-1d1d-49c2-98ff-2c8e173d9515","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.339833Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f8235657f893af4c4b063e7035e18b0f42cd3c182354483566b760755f3d1de7","observation_id":"34268bd4-c9e4-4d0b-a944-f51c562cf255","resolution":{"observed_at":"2026-08-07T10:37:18.324315Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.312416Z","title":"Ssd: Single shot multibox detector,","venue":null,"work_id":"dcea5cb4-bccb-450b-9e4c-44d5d0640d95","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.451483Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:cac26da2bab11ff508768974c82f4bdd9ad071121e0edf6a53fdf21564e9f276","observation_id":"b19ca7db-145b-494e-ba08-920591199833","resolution":{"observed_at":"2026-08-07T10:37:18.315359Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.303572Z","title":"Vision for looking at traffic lights: Issues, survey, and perspectives,","venue":null,"work_id":"e0b4e823-835c-40e9-84dc-a5abe8bd4549","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.535986Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:61d61246379d9edd2e562b407e412f8da5b2de960cf3f38c626cda2c8ab82f68","observation_id":"9049a220-6853-4977-96a3-57b06fbea182","resolution":{"observed_at":"2026-08-07T10:37:18.306606Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.294696Z","title":"Detecting traffic lights by single shot detection,","venue":null,"work_id":"d2d25121-aa09-4cd1-b539-7d718c7fd42a","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.591803Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5699c5806e518882486ff1ad32ab7dc5c4268ad42f6da01bed8df96425d501f1","observation_id":"ec9fa99f-e3e1-46b2-afbf-2e180013bda0","resolution":{"observed_at":"2026-08-07T10:37:18.297808Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.285891Z","title":"A hierarchical deep architecture and mini-batch selection method for joint traffic sign and light detection,","venue":null,"work_id":"a4295226-54f2-4e0d-bc4e-52fe7abd014e","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.667854Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5b53a711e0b1f67bbae44ca294db43fc14cb423d091ace3da25e40d7c1b40553","observation_id":"a3220457-26b9-4ac8-9032-3957f27bdd66","resolution":{"observed_at":"2026-08-07T10:37:18.288901Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.277435Z","title":"Deep convolutional traffic light recognition for automated driving,","venue":null,"work_id":"c69f5cea-8f48-455d-8e99-1da36294af6c","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.739395Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:bdab02382660d2b912fc98e6eef8f4f93730d178bc5b1617ce22b5ba1c5099d2","observation_id":"d0f5653f-9760-4bf2-8f49-544882aac162","resolution":{"observed_at":"2026-08-07T10:37:18.280253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.268559Z","title":"Real-time traffic light detection and recognition based on deep retinanet for self driving cars,","venue":null,"work_id":"6dc2f575-5cc9-453b-a00d-af6ce9735efa","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.794930Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:4be10ebe6a933354d41aa6c87bc7fa653e75d4e475aa9f7cce32fa1b5d63621c","observation_id":"fe458551-5e0a-4a53-99c1-07dc3bdbc4cf","resolution":{"observed_at":"2026-08-07T10:37:18.271641Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.260097Z","title":"A comparative study between state-of-the-art object detectors for traffic light detection,","venue":null,"work_id":"58d5f5bd-f7d5-4896-96a6-0b1a88330c9b","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.844478Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e06909540e8bc0c347cef0eb013972a33e7e655e4e1c3b06c76acf4b73896761","observation_id":"0821f706-1d37-444f-857b-4fe62346b8dc","resolution":{"observed_at":"2026-08-07T10:37:18.263043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.251020Z","title":"An end-to-end traffic light detection algorithm based on deep learning,","venue":null,"work_id":"f99969c9-8718-46ae-a76d-cd18130ac0cc","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.916694Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:3c13227692b9b158929cab85bc1f61c154c8775f9944b883e5f4c0499832b0d6","observation_id":"0b2ad625-a0b0-4e5f-889b-92ccd07e73d5","resolution":{"observed_at":"2026-08-07T10:37:18.254380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.241842Z","title":"Traffic light detection based on depth improved yolov5,","venue":null,"work_id":"8532b9cf-0ef7-46fe-938f-87f6702e212c","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:13.980983Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:e1006cdbf258b53387187c359ee4ecfabb657429762073fb132dfbe258f829c1","observation_id":"31f9fe89-a20c-41a3-bd75-53edceec4f3f","resolution":{"observed_at":"2026-08-07T10:37:18.245130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.232737Z","title":"Real-time small traffic sign detection with revised faster-rcnn,","venue":null,"work_id":"6f280bee-c2eb-4b72-8129-c5bcada8246e","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.042478Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:997a0aa63fea0d77349cdbb5beaa184480a2e13263f99e6d2bc756b194f8211e","observation_id":"a7197b45-63c3-434e-9758-e74056159680","resolution":{"observed_at":"2026-08-07T10:37:18.236032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.223802Z","title":"Traffic lights detection and recognition method based on the improved yolov4 algorithm,","venue":null,"work_id":"b802e934-bb16-4ee7-853d-3f37a949ac27","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.091742Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:56fe4d755dac28ca97b989fa53da96c00df830542b8429371d0d12be9e836706","observation_id":"6ffdcd3a-e6bb-44dd-90eb-0ed05f6e7ed0","resolution":{"observed_at":"2026-08-07T10:37:18.226937Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.214277Z","title":"Fast traffic sign and light detection using deep learning for automotive applications,","venue":null,"work_id":"9a79cfbf-e4c5-4e75-93f9-8c9a38820a41","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.161030Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:aa818dfcaea8a3d4f0faf9b38966e3b54d2eb1cfa9aa5bc187edb37b37ceab09","observation_id":"c2a885ae-e544-4e37-935e-ccba31260621","resolution":{"observed_at":"2026-08-07T10:37:18.217656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.204701Z","title":"Deeptlr: A single deep convolutional network for detection and classification of traffic lights,","venue":null,"work_id":"3cf7ad60-ecd8-4ec7-b192-760bf0ef3dde","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.239775Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:615a2fef1ba5f55b761928a5dcdbcd135f00ddb396173cf2e364784197023433","observation_id":"89064089-d066-40b4-ab00-f29f37124288","resolution":{"observed_at":"2026-08-07T10:37:18.207802Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.195127Z","title":"Hdtlr: A cnn based hierarchical detector for traffic lights,","venue":null,"work_id":"8c62d5cd-7b37-4953-824c-28c02fc1d896","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.296031Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:90d36390d14ce1935749027aef4fbbe5bcc748bc91f1e7a0d94249d2eeee819a","observation_id":"56e088c4-6c7b-49dc-a38a-4f87e2c0484c","resolution":{"observed_at":"2026-08-07T10:37:18.198420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.186059Z","title":"Traffic light recog- nition in varying illumination using deep learning and saliency map,","venue":null,"work_id":"eb6a5f51-a1c1-47ff-9b75-fc8bbe1e5cbf","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.355629Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:7ec0cd22f473dce2caa9acef43884a4b15a2f7c4d7613be116dac93604e91fc7","observation_id":"ded1eb49-d3ac-4081-861f-a4cbe7f482f9","resolution":{"observed_at":"2026-08-07T10:37:18.189121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.176450Z","title":"Saliency map generation by the convolutional neural network for real-time traffic light detection using template matching,","venue":null,"work_id":"5ed10cf1-9cdc-481b-9363-383c86dcff08","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.439643Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:4ba005aad5fcd8318f5fd7160af3d06cd19118d2aaf4bc2f06739006cefe1ae5","observation_id":"d6360d40-c8a2-403a-8d6e-d5c7e6ef5624","resolution":{"observed_at":"2026-08-07T10:37:18.179690Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.167252Z","title":"Universal adversarial perturbations,","venue":null,"work_id":"8def07b0-2d24-4e77-b66f-e714db7b1f43","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.496377Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:384c2558fc93c2286c6ed44802bc95c590d10a5e23da6d0eaaaf75de38283a52","observation_id":"79ec9c8b-e83e-4c17-b005-748946772e09","resolution":{"observed_at":"2026-08-07T10:37:18.170302Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.158389Z","title":"Lavan: Localized and visible adversarial noise,","venue":null,"work_id":"1f8f031d-01d8-42be-acf9-d68c57ceed08","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.565804Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b88415cf2e5566d1ab21244658ae521a607feb632fc4ab617b30c280cfe29014","observation_id":"e98a64f9-7b7d-40db-817c-3a6eee6bc7e5","resolution":{"observed_at":"2026-08-07T10:37:18.161319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.149564Z","title":"Adversarial vulnerability of temporal feature networks for object detection,","venue":null,"work_id":"74d932b7-0f9d-490c-a863-5d5ba93b2f39","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.632131Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5c76f24b2131e1b7bcd0198f29dd65ed8aea7cb946e26e94d48ae0a8792c00a9","observation_id":"e4cc175f-bdc4-4c3a-a961-10be1ab636ed","resolution":{"observed_at":"2026-08-07T10:37:18.152890Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.140906Z","title":"Feasibility of incon- spicuous gan-generated adversarial patches against object detection,","venue":null,"work_id":"0cf0183f-ae8b-43fc-a5d3-75fabfdb5445","year":2022},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.705093Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:fce02001ff2a8ba6420dd1479ada693d4274e19c30b96b81e60ace3f1c664a92","observation_id":"8b3dc529-5e36-43ca-93f9-794d0ae9ddfd","resolution":{"observed_at":"2026-08-07T10:37:18.144130Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.131084Z","title":"Patch-based attack on traffic sign recognition,","venue":null,"work_id":"67646529-c703-4133-9974-0ee7f50372cc","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.764045Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:da656a5d48e9cb74989d3fc20294fdd5211d1ababf27ca9946f4cd21f8d14a96","observation_id":"38509f7e-d59c-436f-80a0-430eb342bacf","resolution":{"observed_at":"2026-08-07T10:37:18.134565Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.122251Z","title":"Cyber attacks on scada based traffic light control systems in the smart cities,","venue":null,"work_id":"0595278a-3d6f-45d2-9c6f-5fb73ab02667","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.828184Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:bdc2c5556423ffdb9a7b0986e5b7956e6618bf627dbefc94aa6ea9586286a93e","observation_id":"a09b0d95-001c-4678-9494-d9204b415630","resolution":{"observed_at":"2026-08-07T10:37:18.125236Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.113237Z","title":"Green lights forever: Analyzing the security of traffic infrastructure,","venue":null,"work_id":"7da06f11-a78d-49ea-b975-f8098ee86436","year":2014},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.898528Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1a35f0b5b763b37a82ec7b328d3530d2d8ad9436072fa7a93892b46a548893ea","observation_id":"ac9cdb83-9a5c-4b36-bb67-e49a149b62f6","resolution":{"observed_at":"2026-08-07T10:37:18.116399Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.103766Z","title":"Fooling perception via location: a case of region-of-interest attacks on traffic light detection in au- tonomous driving,","venue":null,"work_id":"ca2d9630-4818-4a87-91cd-ed18c86f293c","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:14.964721Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:ac2339b8d81cb8c0a6107486ba8649f2198ad78de3bded5dba7ce231d6c5ecca","observation_id":"4b32bc11-5fb1-4203-8ca2-3aa3dd59f163","resolution":{"observed_at":"2026-08-07T10:37:18.107100Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.094555Z","title":"Exposing congestion attack on emerging connected vehicle based traffic signal control","venue":null,"work_id":"67fdabd2-ae59-4740-b022-8c3f18680646","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.026097Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:208d5901d94462c0a48dd5faffca6d6ef4618acb3a900e371401d999438ed30f","observation_id":"18c31f7d-2671-4999-b9a1-a808aa01e4f7","resolution":{"observed_at":"2026-08-07T10:37:18.097716Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.085306Z","title":"Secure traffic lights: Replay attack detection for model-based smart traffic con- trollers,","venue":null,"work_id":"705ec983-e35f-4ee7-85c2-510117181f79","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.112752Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f6841743c54c3c08d7705db7989e797cb5cd369310f0cd968985530239830d29","observation_id":"c5eece71-0f99-4378-8ae2-03f53363c887","resolution":{"observed_at":"2026-08-07T10:37:18.088793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.076275Z","title":"I can see the light: Attacks on autonomous vehicles using invisible lights,","venue":null,"work_id":"e1b7e086-0174-4477-83ac-d424a6c89bc0","year":2021},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.249590Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:bc0c60e818b6a47391bdf3e783267870236d9ff493218e713607d7b60b4df7dd","observation_id":"25c7ed25-d2c8-4739-9adf-d3f0f14dd3d9","resolution":{"observed_at":"2026-08-07T10:37:18.079344Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.067587Z","title":"Baidu apollo team (2017), apollo: Open source autonomous driving,","venue":null,"work_id":"c69ded06-d3f9-45b1-a1eb-e909ab7fd70a","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.379467Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0cbb6548896a59b15679c055f42dc287848ed53c21f325bd955065169d4b879c","observation_id":"0b62d41f-d3e6-4fe8-8965-c6ee572a37bb","resolution":{"observed_at":"2026-08-07T10:37:18.070484Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.058714Z","title":"BDD100K: A diverse driving dataset for heterogeneous multitask learning,","venue":null,"work_id":"5230b707-062a-46e8-adec-ffcb52bae12c","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.385571Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:5593c79d293a5b0e65fe48b1a01ff578946f28290ddd4b11bdae1bf03b619987","observation_id":"5dbfab1c-5b9b-4c6e-b59d-7620859edf40","resolution":{"observed_at":"2026-08-07T10:37:18.061831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.050137Z","title":"Autoware on board: Enabling autonomous vehicles with embedded systems,","venue":null,"work_id":"afee3012-91f3-4597-a3af-6ee7b5bc72b2","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.497891Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:32c11f6497fe11309896a9f40523fbd01f81751b0c19e8d7381e5922a87bd06d","observation_id":"113ca649-1dc1-43fa-8c46-2f5c388b2db4","resolution":{"observed_at":"2026-08-07T10:37:18.053086Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1704.04861","last_updated":"2017-04-17T03:57:34Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2017-04-17T03:57:34Z","title":"MobileNets: Efficient Convolutional Neural Networks for Mobile Vision Applications","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1704.04861","snapshot_observed_at":"2026-08-07T10:37:15.585881Z","title":"Mobilenets: Efficient convolutional neural networks for mobile vision applications,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.585881Z"},"links":{"cited_paper":"/paper/1704.04861","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:a0f9b43db29a790bb6f1c7d510376eeed63f4bfec31c83b9be72b50e058e55f7","observation_id":"5ff093cc-f37e-42f1-a549-b2a6830aaee2","resolution":{"observed_at":"2026-08-07T10:37:15.585881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.041205Z","title":"Rethink- ing the inception architecture for computer vision,","venue":null,"work_id":"518af005-31e8-48d2-a8b8-151a0d3bbe51","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.698745Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:8a6a59924f6b2289968b8768d89ae91ddd433d120b5197a9a74efbc5c52bf9e7","observation_id":"5eb276da-852f-4ad2-a0b4-0cedf947191d","resolution":{"observed_at":"2026-08-07T10:37:18.044268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.032035Z","title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models,","venue":null,"work_id":"4a0b5cd9-6d78-48d0-b862-e7a40c34bda5","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:15.844467Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b879a2fd88e01c13f818b0776d13c824f5111e29b512e64f3fe2f3f242da01dd","observation_id":"9dd116f0-bded-4dd3-a22a-7614a4e55626","resolution":{"observed_at":"2026-08-07T10:37:18.035070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.02779","last_updated":"2019-09-16T04:38:13Z","snapshot_observed_at":"2026-07-06T06:13:18.121262Z","submitted_at":"2017-12-07T18:53:52Z","title":"Exploring the Landscape of Spatial Robustness","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.02779","snapshot_observed_at":"2026-08-07T10:37:16.019987Z","title":"A rotation and a translation suffice: Fooling cnns with simple transfor- mations,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.019987Z"},"links":{"cited_paper":"/paper/1712.02779","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:af8d1f012f208cbb92ab97eadb36972708dd86ba2b90fa1f23ac5290fae0ec78","observation_id":"0b187d66-f89c-433a-8dd7-ee66f3c42bca","resolution":{"observed_at":"2026-08-07T10:37:16.019987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.022372Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":"88897d90-1cd9-467f-bffc-ec7279682377","year":2019},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.115237Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:221ef975e32f0b5313536eacf659fdd624a07e017e62655a45e283ac2bde61f3","observation_id":"5eeaa45e-60cb-4b07-bce3-a827f6769bad","resolution":{"observed_at":"2026-08-07T10:37:18.025609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.012035Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"53f7f764-392d-47ab-ba4f-59a87f8df009","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.243787Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:41f4adbbf436944896d55c8aa161f948a5a43af8fa5d26878e0f0bb06a85470e","observation_id":"87c80969-7af9-4058-abc4-2fead663f26f","resolution":{"observed_at":"2026-08-07T10:37:18.015742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:18.001836Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":"d39fd3a9-c458-41fa-bd74-3ee8733aada4","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.398754Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:935c1618b1021bd6ce5918bd9faae8940587ac06411eb7ae3a49a1e14b9302c0","observation_id":"8a7db17d-ddbe-4f83-8c25-e2bd0aadb8f4","resolution":{"observed_at":"2026-08-07T10:37:18.005468Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.991853Z","title":"Carla: An open urban driving simulator,","venue":null,"work_id":"1560ce40-402b-4782-8b00-a9f3a3469716","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.528560Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:ef7f0016d31d214dac38af91248a3f5b115d86a4c12301579604caf9582031a4","observation_id":"a40a06aa-8b25-4a84-930e-9d63e57f2c96","resolution":{"observed_at":"2026-08-07T10:37:17.995424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.982510Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks,","venue":null,"work_id":"ac3ad053-0df7-48da-8578-dd3e73d817aa","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.599747Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:b0d8f8b632dab5af022b2437fcd534ecd8b371b949bb89b34650f5bc627e9565","observation_id":"51c80d3f-f055-4150-9324-bf4baa473c8e","resolution":{"observed_at":"2026-08-07T10:37:17.985715Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2004.04320","last_updated":"2020-04-09T01:36:23Z","snapshot_observed_at":"2026-07-06T09:11:05.464327Z","submitted_at":"2020-04-09T01:36:23Z","title":"TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems","version":1},"cited_work":{"arxiv_id":"2004.04320","doi":null,"metadata_source":"pith","pith_arxiv_id":"2004.04320","snapshot_observed_at":"2026-08-07T10:37:17.859606Z","title":"TOG: Targeted Adversarial Objectness Gradient Attacks on Real-time Object Detection Systems","venue":"cs.LG","work_id":"20cef069-6b44-449a-ab6a-0aa2c0fa1c25","year":2020},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.752120Z"},"links":{"cited_paper":"/paper/2004.04320","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:9d79cf2ab443736149445998f8f9e2723efba0cf81b307517eeb5cc8fdd45b13","observation_id":"06a7c3e0-3f37-4f28-97cd-93369acb7161","resolution":{"observed_at":"2026-08-07T10:37:17.865443Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.971843Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":"9b0563ee-64cd-4969-8e0b-4dccac1537d4","year":2016},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.863878Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:8f9e86d05db845cad4c9b6ecc15fb5edee0f6cfa204630d41b969016d5732815","observation_id":"f048c503-8e80-4f81-b8b1-3ec2f0d5e06a","resolution":{"observed_at":"2026-08-07T10:37:17.975525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.961821Z","title":"Adam: A method for stochastic opti- mization,","venue":null,"work_id":"ee719623-b7e8-4ce3-bfb0-a13f8452084b","year":2015},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:16.971849Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:0cd215470d14ed7583b223aa14b67b8935423e43dea79c224a0bf68282c46634","observation_id":"9093ce40-e207-4cda-a4c1-4e9b6836460e","resolution":{"observed_at":"2026-08-07T10:37:17.965511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.952879Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":"d345b595-6758-4500-aeed-b03b01078c48","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.081980Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:1e3b0a603210c3e0ef464f545128a79e5c47f8826e08195814ff1414ebfae806","observation_id":"8eed12ef-b56c-45f8-af11-4eed65c060d7","resolution":{"observed_at":"2026-08-07T10:37:17.955887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T10:37:17.197850Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.197850Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:9c3dfab898c0ece40c9c33dfc639014e52c4a057f2886162ecfccbac1ec4833a","observation_id":"60ff88c6-b72c-4886-9c65-c04e9587339f","resolution":{"observed_at":"2026-08-07T10:37:17.197850Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.942894Z","title":"Yolov7: Trainable bag- of-freebies sets new state-of-the-art for real-time object detectors,","venue":null,"work_id":"f39e97ed-0a6f-4798-8d1f-14eb755449d2","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.334661Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:67183b5f9562c5825ff07b25d5462193909f7d9f1f8f837eca490d0e623893d8","observation_id":"0ca1dd0a-14fb-4d89-828e-088a26f1f977","resolution":{"observed_at":"2026-08-07T10:37:17.946620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.933095Z","title":"Yolo by ultralytics (version 8.0.0) [computer software],","venue":null,"work_id":"733503cf-f8d0-42cd-a48d-347369be613e","year":2023},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.488777Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:54215c1d08989c3277873fabeb80c781060de07e6887bab9ba6b28ad09aa2c14","observation_id":"9e158376-8c81-4c47-a32d-1d9b122c72c9","resolution":{"observed_at":"2026-08-07T10:37:17.936416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.923484Z","title":"A deep analysis of the existing datasets for traffic light state recognition,","venue":null,"work_id":"0c691b32-bf40-4cf3-804f-6a096949ccb3","year":2018},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.645056Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:29a78dc006878fad33cf694676d4387b64a7f5c61a2b7eb040746ec8076ec311","observation_id":"77d3635a-872c-4899-8ddc-4a07d75dade6","resolution":{"observed_at":"2026-08-07T10:37:17.926794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.913900Z","title":"Grad-cam: Visual explanations from deep networks via gradient-based localization,","venue":null,"work_id":"6c774466-d8ff-4300-b69b-97f985ccd48a","year":2017},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.806408Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:f45c75150f9c317c2cac387439da0e10c693fc49d56d5bf8cbab74977c80e189","observation_id":"29a2425e-225f-4b0d-b114-f89229a01d06","resolution":{"observed_at":"2026-08-07T10:37:17.917394Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.903957Z","title":"CoCar NextGen: a Multi-Purpose Platform for Con- nected Autonomous Driving Research,","venue":null,"work_id":"35f03f94-a917-4e9a-be14-ab89ec72b78b","year":2024},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.815518Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:a468299d80d3fd4c921e0be4315bbfb455df86fa20d7f8c6e50a095824b39cbc","observation_id":"a70b0229-f7da-4245-bff1-16b98da59020","resolution":{"observed_at":"2026-08-07T10:37:17.907459Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:37:17.893800Z","title":"The atlas of traffic lights: A reliable perception framework for autonomous driving,","venue":null,"work_id":"f752fb10-06ef-4acd-bf65-b9711820b9a7","year":2025},"citing_paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T10:37:17.818810Z"},"links":{"citing_paper":"/paper/2506.04823"},"observation_digest":"sha256:391ec7fc4bd45cd3e55ec31d65878d19539b65880be19168f92d0abacb24201d","observation_id":"fa8b2308-b648-4cd3-9482-98b50a0eaa2d","resolution":{"observed_at":"2026-08-07T10:37:17.897088Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.04823","last_updated":"2025-06-05T09:41:12Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T10:30:18.324438Z","submitted_at":"2025-06-05T09:41:12Z","title":"Fool the Stoplight: Realistic Adversarial Patch Attacks on Traffic Light Detectors"},"reference_resolution":{"displayed":71,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":3,"verified_exact":1,"verified_fuzzy":67},"total_outbound_references":71},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 71 of 71 outbound references and 0 inbound Pith citation observations for arXiv:2506.04823."}