{"as_of":"2026-08-08T10:15:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:69e2af2e3359f4424259519db3dc9bef003aa60dae655d1113d8c644881447a0","coverage":[{"denominator":35,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":35,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:38:26.388096Z","state":"measured"},{"denominator":36,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":36,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:38:22.211976Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-07T05:38:26.772211Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"cited_work":{"arxiv_id":"2506.07590","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.07590","snapshot_observed_at":"2026-08-07T05:38:26.772211Z","title":"Explore the vulnerability of black-box models via diffusion models","venue":"cs.CV","work_id":"91db597f-bf7d-4f46-8915-f855da6b316c","year":2025},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.211976Z"},"links":{"cited_paper":"/paper/2506.07590","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:df8348d2c048851867a02f5c81d66f25a83839b8995d9375875c7e0e8bfca3ca","observation_id":"882318f0-82e7-487b-b17a-73d6027f28f5","resolution":{"observed_at":"2026-08-07T05:38:26.873879Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2506.07590/citation-record","integrity":"/paper/2506.07590/integrity","json":"/paper/2506.07590/citation-record.json","paper":"/paper/2506.07590"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"cited_work":{"arxiv_id":"2506.07590","doi":null,"metadata_source":"pith","pith_arxiv_id":"2506.07590","snapshot_observed_at":"2026-08-07T05:38:26.772211Z","title":"Explore the vulnerability of black-box models via diffusion models","venue":"cs.CV","work_id":"91db597f-bf7d-4f46-8915-f855da6b316c","year":2025},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.211976Z"},"links":{"cited_paper":"/paper/2506.07590","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:df8348d2c048851867a02f5c81d66f25a83839b8995d9375875c7e0e8bfca3ca","observation_id":"882318f0-82e7-487b-b17a-73d6027f28f5","resolution":{"observed_at":"2026-08-07T05:38:26.873879Z","resolver_source":"local_arxiv","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.530420Z","title":"Diffusion-based generative models, known for generating high-fidelity and diverse synthetic images, are central to our research, particularly stable and latent diffu- sion models","venue":null,"work_id":"b3207e5c-9b90-47af-b431-f48aad22b5a8","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.281048Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:b0ac32b5882211e50ab388c58a6311ff07bc24614518331b03ca03d642245f38","observation_id":"649b364b-7a2e-49a5-beb1-552e0b7a4ae3","resolution":{"observed_at":"2026-08-07T05:38:30.593333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.390353Z","title":null,"venue":null,"work_id":"c6570c16-13a9-48ea-bf24-8a0a531a0bfb","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.378307Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:e695fec4c03de38b8c1804d83a13d256d563c0c9bcbae11d9a1933ad873c2f80","observation_id":"1a187c80-e236-4878-a400-8cdf3ef27217","resolution":{"observed_at":"2026-08-07T05:38:30.464833Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.236704Z","title":"Experiments on Model Extraction 4.1.1","venue":null,"work_id":"68c5d449-f38f-4c5e-bad8-0564958db708","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.465615Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:5cf2ac35dd99e46f76d45ff4d0029bd8769b15312ad1fcf092c19d3a8b124fb7","observation_id":"64ba7d80-bd91-4bf7-81b2-3d3fd8150215","resolution":{"observed_at":"2026-08-07T05:38:30.311261Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:30.089530Z","title":"We developed a method for training robust substitute models in a data-free, hard-label, and query-limited setting","venue":null,"work_id":"2b822aba-3cd5-48cc-8bf5-55bd980c6c82","year":null},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.531451Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:75ddea508d1b3755741b50f2a53eb6cb125a5f062a78b1c27f9881afb31f8d28","observation_id":"910d23f9-8830-457f-9d6d-4faddd0d5da1","resolution":{"observed_at":"2026-08-07T05:38:30.139455Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.943320Z","title":"Data-free model extraction,","venue":null,"work_id":"2b2ba8f2-2631-4691-b580-0a59117a8335","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.654121Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:377e69fc630378cc5477008a856430049b8542ab1e2aa87719d57efd117690e1","observation_id":"b6dab6e1-be3e-4406-a62b-19105cc62fb4","resolution":{"observed_at":"2026-08-07T05:38:30.025492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.783478Z","title":"Disguide: Disagreement-guided data-free model extraction,","venue":null,"work_id":"15d7f887-b6b3-44b1-b358-c9af7e7df99f","year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.783026Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:215aeae7cd8a73e4d2d1c11aedd1ff8c0b2de68bd7a18bf6bdc84256ac2f1878","observation_id":"08a9ed2c-5478-49b8-b443-c07aeb598d66","resolution":{"observed_at":"2026-08-07T05:38:29.864264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.512835Z","title":"Dast: Data-free substitute training for adversarial attacks,","venue":null,"work_id":"d9fd4e38-bcbc-47c7-868b-be97236fc7df","year":2020},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:22.921980Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:4fbfb85a0693023354e69ec7b58d297fc9ceb0e787334a1cf566367f214bd2eb","observation_id":"7ac29e3b-a42e-4666-b704-8a6efd7ee427","resolution":{"observed_at":"2026-08-07T05:38:29.641566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.230200Z","title":"Towards efficient data free black-box adversarial attack,","venue":null,"work_id":"8717e73a-310c-4aae-9fff-e54330a60e8a","year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.040110Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:c883a74668bdff771bfc4ea450cbd7f8f907db219441cc234a551abdf1e62301","observation_id":"e647d121-605b-4bb8-b8a5-0c3adf9d492f","resolution":{"observed_at":"2026-08-07T05:38:29.385289Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:29.022233Z","title":"Why do adversarial attacks transfer? explaining transferability of evasion and poi- soning attacks,","venue":null,"work_id":"2fc5f8d1-b877-43b8-a88b-eb59c35ff967","year":2019},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.198186Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:fd82b7f31ba683fa0c6cdb83d99afcab99bea8840c1470bf54cc5820d1d1138b","observation_id":"36ab0e62-3d0d-45e4-86a1-1ecab2e19016","resolution":{"observed_at":"2026-08-07T05:38:29.114300Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.859210Z","title":"Catastrophic forgetting and mode collapse in gans,","venue":null,"work_id":"52256860-155f-4ed4-9619-9fc2bb4d1e52","year":2020},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.333762Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:7b25af3690ef516982bc60f7b5bc2c04665ea6934e50447c545b1b5ed02fc4fc","observation_id":"1b7426f4-2718-48a5-8935-7801f565e588","resolution":{"observed_at":"2026-08-07T05:38:28.935621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.705185Z","title":"Adversarial attacks against deep generative models on data: a survey,","venue":null,"work_id":"89674155-6013-4f67-9424-d00e657e514d","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.425628Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:2d303e20944f57e072c1164d8294d63fd32d7a16167edf2d476d36180ccd8cf9","observation_id":"4d5ef2ec-41fa-4945-9e7a-7165f50d264a","resolution":{"observed_at":"2026-08-07T05:38:28.769909Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.12872","last_updated":"2024-03-30T06:59:35Z","snapshot_observed_at":"2026-07-06T15:57:53.178833Z","submitted_at":"2023-07-24T15:10:22Z","title":"Latent Code Augmentation Based on Stable Diffusion for Data-free Substitute Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2307.12872","snapshot_observed_at":"2026-08-07T05:38:23.487864Z","title":"Data-free black- box attack based on diffusion model,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.487864Z"},"links":{"cited_paper":"/paper/2307.12872","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:fd948bb99b454a27f9796369a43b377ab3de00b7edc00dbe4e821bfc923b2b40","observation_id":"14f453da-b792-461c-b6a7-3a7cbe320d16","resolution":{"observed_at":"2026-08-07T05:38:23.487864Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.508871Z","title":"Safe latent diffusion: Mitigating inappropriate degeneration in diffusion models,","venue":null,"work_id":"840d83db-c849-4059-8870-1622be93a60d","year":2023},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.620198Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:c804fe8cdf2f797fb444b0719d84d3fc5b51b8ddb5c424208e5c0b9bd26a284d","observation_id":"dbd470d5-fa12-4c62-85b3-0b11381d7ce5","resolution":{"observed_at":"2026-08-07T05:38:28.595281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6550","last_updated":"2015-03-27T11:52:28Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-19T22:40:51Z","title":"FitNets: Hints for Thin Deep Nets","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6550","snapshot_observed_at":"2026-08-07T05:38:23.710105Z","title":"Fitnets: Hints for thin deep nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.710105Z"},"links":{"cited_paper":"/paper/1412.6550","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:4a83b8c24c6ecde20375648d1ac7e614d47f88b59d96a35f82b8fc93a053dd40","observation_id":"6610efc6-2005-4416-9f0a-57a87543b988","resolution":{"observed_at":"2026-08-07T05:38:23.710105Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.374395Z","title":"Maze: Data-free model stealing attack us- ing zeroth-order gradient estimation,","venue":null,"work_id":"d768efb3-cc94-414c-ac4a-44968fdd5350","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.879387Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:a75c2bf8d2313df37dc9c49437d637aca78f6380edb79d61790d33a02ef22e6a","observation_id":"8096c855-ecd7-4623-9ba5-3d2fcc001090","resolution":{"observed_at":"2026-08-07T05:38:28.422319Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.186987Z","title":"Zero-shot knowledge distillation from a decision-based black-box model,","venue":null,"work_id":"3e24c24e-8f98-48a3-a110-65b78032575b","year":2021},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:23.982961Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:a873e85379f423b34d3ba7b8f158913f74a478e9b08f20c3ee8c0b524cee4552","observation_id":"7a929063-12d1-4fd7-81f8-8fc0c0b1b294","resolution":{"observed_at":"2026-08-07T05:38:28.255340Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:28.042631Z","title":"Towards data-free model stealing in a hard label setting,","venue":null,"work_id":"e8913194-c569-404c-aeda-40fdc15fa263","year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.191977Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:85d962386ab2046d15c507f986d086754d1ad01512f6ea04764ec7fa239e7f4e","observation_id":"ab7e70dc-919c-4b98-ba77-8086afc5aa22","resolution":{"observed_at":"2026-08-07T05:38:28.131392Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.02140","last_updated":"2024-08-04T20:38:45Z","snapshot_observed_at":"2026-07-06T18:56:45.173494Z","submitted_at":"2024-08-04T20:38:45Z","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","version":1},"cited_work":{"arxiv_id":"2408.02140","doi":null,"metadata_source":"pith","pith_arxiv_id":"2408.02140","snapshot_observed_at":"2026-08-07T05:38:26.525516Z","title":"VidModEx: Interpretable and Efficient Black Box Model Extraction for High-Dimensional Spaces","venue":"cs.CV","work_id":"732947ee-4591-4cbd-b028-33f8de88adf7","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.370705Z"},"links":{"cited_paper":"/paper/2408.02140","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:50d50ba33d10856c9ffa4033c8156d48412ebe3aba8bc17c829e3cf545c1a15e","observation_id":"c20387de-4b05-487d-b6b8-7bce4d46e30e","resolution":{"observed_at":"2026-08-07T05:38:26.641223Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.891265Z","title":"Dualcos: Query-efficient data-free model stealing with dual clone networks and optimal samples,","venue":null,"work_id":"fff9f146-912f-4b6f-ab91-1d6b4333a1dc","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.544281Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:7284e6feddc6ee1a07bd7a2823d2421e72d8af0817dfe78061628a471ffcb1bb","observation_id":"57792c09-29c6-45c6-b425-7d71c879b4ed","resolution":{"observed_at":"2026-08-07T05:38:27.961925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.780592Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":"1fbd686e-9897-467e-9e6c-8016a19b9822","year":2017},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.668299Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:d3099ab751a2cdb29a614e63bbbc940e11d225fcca540fb610a1d848e33815bc","observation_id":"ef28d2e9-8c6c-4151-b0e3-149b185e49a4","resolution":{"observed_at":"2026-08-07T05:38:27.815604Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.575090Z","title":"Knockoff nets: Stealing functionality of black-box models,","venue":null,"work_id":"7ff05ed5-c020-4e6d-8280-34a1ed818d85","year":2019},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.831241Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:d1d4cb770d4094aecad8fb7a48222a1c491d84e9511ac0ab173ad53ad09a6e58","observation_id":"65cf8257-2aa7-4436-afc2-c9726fc03586","resolution":{"observed_at":"2026-08-07T05:38:27.706205Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.440769Z","title":"Difattack: Query-efficient black-box adversarial at- tack via disentangled feature space,","venue":null,"work_id":"2f71a200-a586-4690-9a08-19d667949fac","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:24.949038Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:eec6e60d56f0ef5469b24b75a242481f26a70dda8f53f16531b78f8d1007378c","observation_id":"f0f7991d-9f79-417d-83b3-df088ebd90c3","resolution":{"observed_at":"2026-08-07T05:38:27.509082Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.263842Z","title":"Derd: data-free adversarial robustness distillation through self-adversarial teacher group,","venue":null,"work_id":"78b17abc-1d91-4a7f-8383-262530f74780","year":2024},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.086384Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:317059977becc18917e651d4d242f830a253b3bd8dcf20aa202e8e0edce30048","observation_id":"6da76ab3-d966-45a9-8e42-8ff2e9aa64bb","resolution":{"observed_at":"2026-08-07T05:38:27.318189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.197272Z","title":"High-resolution im- age synthesis with latent diffusion models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.197272Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:61de903096889e9b247e8eeb11da0fb0071f742b9c1d215113ea97fdffaadad1","observation_id":"da556fe9-b69b-4064-a3e7-1baf51fbf98f","resolution":{"observed_at":"2026-08-07T05:38:25.197272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.329071Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.329071Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:74cdbe7008e2082e441acc887262fd3569d8b5118da46b0a4c932955020f64be","observation_id":"9963415e-0095-4cb8-881f-49b92198ba0e","resolution":{"observed_at":"2026-08-07T05:38:25.329071Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:27.111065Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"523ea4c6-3fc3-455a-ba5f-d6686ba51329","year":2009},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.519189Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:d843ff48fcc648298c55ea22017bcc344b8db18876a3367b8e109d64fb5ed15d","observation_id":"417ba244-8cf4-4ad3-9e85-28428d40ddf9","resolution":{"observed_at":"2026-08-07T05:38:27.189788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:26.981109Z","title":"Tiny imagenet visual recogni- tion challenge,","venue":null,"work_id":"763bb357-33a7-43d5-a87a-fb8fe35a2f8d","year":2015},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.721018Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:4ffd50e58525635d79b9336c1694723875a2752aa65873af029b64272102f4ec","observation_id":"97474fa2-6302-430d-8ca8-3e75a3effc42","resolution":{"observed_at":"2026-08-07T05:38:27.021754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:25.847394Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:25.847394Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:5518e1841928fbfb1b3055b070be35ab77c13f5293de0d18c256312d44ed7025","observation_id":"5d935f33-a1ef-40ef-a6ed-f743c50ae927","resolution":{"observed_at":"2026-08-07T05:38:25.847394Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-07T05:38:26.012423Z","title":"Very deep convolutional networks for large-scale image recogni- tion,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.012423Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:e2a9f22fd99b19cdcb2903b3ed36af5803473a020105baf1268b03399c214bfd","observation_id":"2e23e900-33fd-4eea-a895-ebaab0b0a1f5","resolution":{"observed_at":"2026-08-07T05:38:26.012423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07146","last_updated":"2017-06-14T06:06:48Z","snapshot_observed_at":"2026-08-01T16:47:50.594148Z","submitted_at":"2016-05-23T19:27:13Z","title":"Wide Residual Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07146","snapshot_observed_at":"2026-08-07T05:38:26.099644Z","title":"Wide resid- ual networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.099644Z"},"links":{"cited_paper":"/paper/1605.07146","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:3aa2f89184eaa43f2b18dbc0faa06e0bfc836aa03430899a3f9958452f7a6cb3","observation_id":"0a2183a4-28a7-4254-953f-451730f850f5","resolution":{"observed_at":"2026-08-07T05:38:26.099644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:38:26.164974Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.164974Z"},"links":{"citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:1074c0bc9415e2a50225d30477aa0f8eb3d78619fd88dfaeac316296ed671908","observation_id":"37fd0a82-69d7-442a-b0ee-b0b868b6ff15","resolution":{"observed_at":"2026-08-07T05:38:26.164974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1611.01236","last_updated":"2017-02-11T00:15:46Z","snapshot_observed_at":"2026-07-06T05:17:20.642708Z","submitted_at":"2016-11-04T01:11:02Z","title":"Adversarial Machine Learning at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1611.01236","snapshot_observed_at":"2026-08-07T05:38:26.232722Z","title":"Adversarial machine learning at scale,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.232722Z"},"links":{"cited_paper":"/paper/1611.01236","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:ee463259bbe4246b5530c01efc14054680a9260d7617ee84c94b471e807203bf","observation_id":"b72b8892-a0b5-4fbf-aa6e-ae822a17f48c","resolution":{"observed_at":"2026-08-07T05:38:26.232722Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1607.02533","last_updated":"2017-02-11T00:39:39Z","snapshot_observed_at":"2026-07-06T05:02:57.607157Z","submitted_at":"2016-07-08T21:12:11Z","title":"Adversarial examples in the physical world","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1607.02533","snapshot_observed_at":"2026-08-07T05:38:26.317562Z","title":"Adversarial examples in the physical world,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.317562Z"},"links":{"cited_paper":"/paper/1607.02533","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:764d8db4ee57b80fccc8bdcc763dd609cbb97daef5ba746f08b4cd0f431e049a","observation_id":"36a7b84a-aa7e-47e3-b4bd-26a76646ee5a","resolution":{"observed_at":"2026-08-07T05:38:26.317562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T05:38:26.388096Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:38:26.388096Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2506.07590"},"observation_digest":"sha256:425abb3677728f419422e0a7c50aabe58d07fb7b3f99c035776062bdf3c67000","observation_id":"685565d0-b9dd-4a59-8e49-2d65e00ce9d2","resolution":{"observed_at":"2026-08-07T05:38:26.388096Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.07590","last_updated":"2025-06-09T09:36:31Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T05:27:48.342275Z","submitted_at":"2025-06-09T09:36:31Z","title":"Explore the vulnerability of black-box models via diffusion models"},"reference_resolution":{"displayed":35,"state_counts":{"malformed_identifier":2,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":11,"verified_exact":1,"verified_fuzzy":20},"total_outbound_references":35},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 35 of 35 outbound references and 1 inbound Pith citation observation for arXiv:2506.07590."}