{"as_of":"2026-08-08T10:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4c975155bf0822be6ee8e9317e62ae60ceff9542ed844305eb62436f4068d1c1","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:51:18.557426Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.17250/citation-record","integrity":"/paper/2506.17250/integrity","json":"/paper/2506.17250/citation-record.json","paper":"/paper/2506.17250"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.145653Z","title":"Enabling scalable and adaptive machine learning training via serverless computing on public cloud.Performance Evaluation, 167:102451, 2025","venue":null,"work_id":"bd12a8bb-5ad2-4db1-9449-209c232d2234","year":2025},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.387110Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:1fa2e8e7ad30bd3b0c532087fb9230a3a87eb588f7410ab6bc1fc65380b630b8","observation_id":"b5cd75af-b04e-48bd-8685-2f57b8a0ef1e","resolution":{"observed_at":"2026-08-07T05:51:19.149400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.137130Z","title":null,"venue":null,"work_id":"095af838-eb9c-49ea-b59d-c3b3d26ae94b","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.391364Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:270ddb770000209f97a3afcd6af7757542603dbe255d4fd69cb10def343bb705","observation_id":"71ce94a0-02fe-48e0-a6d5-22e616f9d626","resolution":{"observed_at":"2026-08-07T05:51:19.140198Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.127409Z","title":"Jordan, and Martin J","venue":null,"work_id":"d294581e-34e0-453f-aaa2-c606076a8c58","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.394466Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:75cb48dc3372b219783d8715560acb81c73009ca89fa77df34726b04c0ae4fbd","observation_id":"f4bab0a2-7961-4a80-90ee-2fe99e5ae4bf","resolution":{"observed_at":"2026-08-07T05:51:19.131172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.118944Z","title":"More data can expand the general- ization gap between adversarially robust and standard models","venue":null,"work_id":"d11c79c0-927e-4f8e-9603-e484316c9bdf","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.397706Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:a4191d021b62c79f15b9181bbc394df113f2e8cdc8b9abec73e6fff48c9f31a3","observation_id":"4393c116-6b3d-4be5-8327-a0c38bb24e21","resolution":{"observed_at":"2026-08-07T05:51:19.122032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.110318Z","title":"Bonemet: An open large-scale multi-modal murine dataset for breast cancer bone metastasis diagnosis and prognosis","venue":null,"work_id":"04ea2655-568e-4979-9499-4e22a7bf8d57","year":2025},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.401016Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:ee89bd654618d542a739eb452583fc4fd945a8cdee1821951a41780f8e9ddb4f","observation_id":"6b99ecba-0d36-4875-9c58-5bb6bd589d59","resolution":{"observed_at":"2026-08-07T05:51:19.113523Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.101334Z","title":"Singh, Nicolas Flammarion, and Matthias Hein","venue":null,"work_id":"01e56217-c696-4e14-aa65-8f5759cce31d","year":2022},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.404122Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:ffa7b154f8950ba6cf5a06c24fae6a268ee9e3767ab23353c79ad1ffe00baf78","observation_id":"cae70bab-402e-4c5a-83b3-65ce0bc59962","resolution":{"observed_at":"2026-08-07T05:51:19.104489Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.091650Z","title":"Sparse and imperceivable adversarial attacks","venue":null,"work_id":"51d0a3ed-ad73-488b-948d-0ac380f2869b","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.407412Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:528ef9ad7d9365267680656db78a82a83b39d60f1fe6323197b5e257e6426f63","observation_id":"bc2411f1-1115-47d8-9b60-36c045eb5a8c","resolution":{"observed_at":"2026-08-07T05:51:19.094872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.082288Z","title":"BERT: pre-training of deep bidirectional transformers for language understanding","venue":null,"work_id":"f00b9d19-8958-4b0f-8ea8-004e035f13e8","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.410340Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:ab1d2318f49287d5595073bcffdb7318323fa5deb15276c3812ba23a7b52b326","observation_id":"80faa8b0-18c1-432a-a9cd-3873d1fa0d7f","resolution":{"observed_at":"2026-08-07T05:51:19.085560Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.072571Z","title":"Greedyfool: Distortion-aware sparse adversarial attack","venue":null,"work_id":"8ad92c64-fcc9-4a2c-81a1-acd57aae229c","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.413361Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:7f2ba5d28bb720d13f27d743884cfe1b7f6db5b9a3ae789b1fbaa42b59d9733a","observation_id":"f953af56-ac26-4414-80cd-2f685f41c62f","resolution":{"observed_at":"2026-08-07T05:51:19.076466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.062782Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":"ca3911ac-b2bd-4ea2-8b88-c980a0da1aaf","year":2018},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.416532Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:c8015b21b7e21ade461e67e25ac78794d43dafaed59d7df84e79c4e6502c02ae","observation_id":"683b1e82-b55c-4f64-9486-61d4e4d9f7cd","resolution":{"observed_at":"2026-08-07T05:51:19.066115Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.053900Z","title":"Evading defenses to transferable ad- versarial examples by translation-invariant attacks","venue":null,"work_id":"92deec7e-f214-46c8-8e0c-a845360ababf","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.419508Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:54a2a657745d70225dd0e88781075dc02c7365a02f32e1862f534515b9edf7de","observation_id":"d23aa0c4-12ae-4aa4-8a19-1cde21b68229","resolution":{"observed_at":"2026-08-07T05:51:19.057111Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.422514Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.422514Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:e7af264bfcfe4a31f9e2c3874e7bb50b841b3070aa23ba25aebda834379926d1","observation_id":"ff0dd184-3443-469a-a286-701f96b0bedf","resolution":{"observed_at":"2026-08-07T05:51:18.422514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.425367Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.425367Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:8953fb843406983cb78ae0f6594cfceac3cd9485d53a6ffb48b04e053bfed50b","observation_id":"8f7a2870-3fff-4b63-a59c-0076bbc3ebfb","resolution":{"observed_at":"2026-08-07T05:51:18.425367Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.034323Z","title":"Sparse adversarial attack via perturbation factorization","venue":null,"work_id":"03175ddb-394e-4165-8226-a455bbb6ed71","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.428343Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:75ebb4b4e29c0f5f84f6bc1f4c73e58e6972ddaf1da324d5c7513e51f9c51dd8","observation_id":"6c9194f6-28fd-4cf1-8d5e-cc1ac3a10f74","resolution":{"observed_at":"2026-08-07T05:51:19.037897Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.024928Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"499d97db-8d70-4b03-ae6e-110edc175076","year":2015},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.431217Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:c373e79d87adc85ce6d94623027cf2804349236a264de08226b540e5d6f9a5a2","observation_id":"3aa44b84-e2cb-4c02-b310-dcc0e18e45fb","resolution":{"observed_at":"2026-08-07T05:51:19.028228Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.434130Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.434130Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:2bb928c4ea9fc2ef94415017a6452abf29e7434dd2918c6a3688ea99d29dda00","observation_id":"ca8eb657-9593-4250-aa9d-e6ce647d6955","resolution":{"observed_at":"2026-08-07T05:51:18.434130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:19.008580Z","title":"Interpretable minority synthesis for imbalanced classification","venue":null,"work_id":"e6ff506b-d845-44dc-9136-3ec9bf17efd1","year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.437021Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:865f01a59313871d9351b67e389e675b4c0c42e83878f6730157ae02ddfe4645","observation_id":"f4872219-61f1-4a7e-aaa2-3ec278792038","resolution":{"observed_at":"2026-08-07T05:51:19.012773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.439995Z","title":"Highly accurate protein structure prediction with alphafold.Nature, 596(7873):583–589, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.439995Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:fbe5f8c967e27a084d9615d82787e4bf3b13adc20aa56c37e797e402f783a4b0","observation_id":"55335149-95ef-4905-9289-afcb1569b679","resolution":{"observed_at":"2026-08-07T05:51:18.439995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.993452Z","title":"Physgan: Generating physical-world- resilient adversarial examples for autonomous driving","venue":null,"work_id":"68d07da6-9422-4835-b2c3-4057596d5377","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.443040Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:c18e34e5bccb0658fce2e1e69b11c2583f66ced63832c86462254d04deaf9eb3","observation_id":"e4f72c8d-d659-4379-902b-16780f6173da","resolution":{"observed_at":"2026-08-07T05:51:18.996780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.984092Z","title":"Learning multiple layers of features from tiny images.Technical Report, University of Toronto, 2009","venue":null,"work_id":"d25ab1ea-89d7-4037-8fdd-174f42338f83","year":2009},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.445844Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:d04fa7cd0d44c4989a8be8eb5ec669555dbf71935a9f09ad11c671603c2ec7dd","observation_id":"c80e2ec4-749f-4c54-9964-5dde8e654156","resolution":{"observed_at":"2026-08-07T05:51:18.987295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.975150Z","title":null,"venue":null,"work_id":"071b2285-4923-4615-97c3-20db404e2289","year":2012},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.448928Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:dd50853c71222fb866f3d8141515c7b0bbcad20c9e20d41c2af4b74feeb9eae5","observation_id":"8d6aac79-feaf-42af-b4df-95b9265b0791","resolution":{"observed_at":"2026-08-07T05:51:18.978355Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.965825Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"18aa7736-531d-446a-91ce-278169fe2055","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.451897Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:8f592fc8bc5c9cf9d1b20493426dd6b2bfd22c10f16e82cf17dad80ebaca73eb","observation_id":"a2148e50-5464-4da4-be45-b6de4f9612d8","resolution":{"observed_at":"2026-08-07T05:51:18.969056Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.956937Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"5b7793ed-704e-48f9-bb9e-d98b0b5dc51a","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.454901Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:a51787901d22c933e14e6d79c30077526a599a46a0e6461247380d10d36e7f61","observation_id":"5d6f267b-6dd4-40eb-9888-0f1a26ab891c","resolution":{"observed_at":"2026-08-07T05:51:18.960070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.457981Z","title":"Inan, Sahar Abdelnabi, Janardhan Kulkarni, Lukas Wutschitz, Reza Shokri, Christopher G","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.457981Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:1be4f1859d3ebcfa518c95b78a6c5c4a6bae9f460ea03821f5e903b252b87077","observation_id":"b51b4425-f99c-4fda-b63e-f1089f2770e9","resolution":{"observed_at":"2026-08-07T05:51:18.457981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.461129Z","title":"MNIST handwritten digit database","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.461129Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:fde6ab82667559863e8fb0385e104eea518be1f33d94d915a0d3ae7d83ac333f","observation_id":"def05c6b-0fad-4e42-9ebc-72b1849c1ad5","resolution":{"observed_at":"2026-08-07T05:51:18.461129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.942911Z","title":"Mmst-vit: Climate change-aware crop yield prediction via multi-modal spatial-temporal vi- sion transformer","venue":null,"work_id":"3ea31a87-a2a4-469d-ae1d-d0323083ce84","year":2023},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.463965Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:b3c6fae7b3257a27ec13bd8777671dd9a44aebede75a3ddb5bc15651c4b7d915","observation_id":"66e78d2b-9a1b-42b4-a047-12814b3ac90d","resolution":{"observed_at":"2026-08-07T05:51:18.946096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.934143Z","title":"Towards robust vision trans- former via masked adaptive ensemble","venue":null,"work_id":"5254afc6-8cc4-4890-8980-ba357fa335d9","year":2024},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.466956Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:ae47ccdca87774c58b8bb7517c85dbef14f8705041b20254884da45f8223ebd0","observation_id":"7b3b80f8-ea60-4d83-9ef5-bd8845eac291","resolution":{"observed_at":"2026-08-07T05:51:18.937471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.925428Z","title":"Comprehensive transformer-based model architecture for real-world storm predic- tion","venue":null,"work_id":"b2e1a089-088c-4c43-807c-09790b45da61","year":2023},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.469916Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:6ae5c3fd7f9f37c02314f539678a52098c38f28e81cfbc39af2de170bd3de1af","observation_id":"7dbb9f2a-62eb-47e7-9556-8a75856d8bff","resolution":{"observed_at":"2026-08-07T05:51:18.928662Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.916731Z","title":"Delving into transferable adversarial examples and black-box attacks","venue":null,"work_id":"6bf79203-cdd6-4b6c-8e2f-8d68a443ae20","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.473106Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:3d570fdbf06b69f71ec0b0fda6ec2dcfc9968cb268df1ceb02215b0ac941cc63","observation_id":"ebbd937c-55f1-4800-9289-af648c1091d8","resolution":{"observed_at":"2026-08-07T05:51:18.919905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.907923Z","title":"Learning sparse neural networks through l_0 regularization","venue":null,"work_id":"4d8a6c2c-1d63-4062-ab73-85496b001750","year":2018},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.477004Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:b5b84a9208d5484e6ea18d21db204a9d7ee3759fddd5062e3f6c4bbc0be744f6","observation_id":"610aef55-8aab-4c70-a759-c7c4dc35ab39","resolution":{"observed_at":"2026-08-07T05:51:18.911162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.899138Z","title":"Malletrain: Deep neural networks training on unfillable supercomputer nodes","venue":null,"work_id":"c22eb519-387b-4cf6-8418-d4b2e94bdf03","year":2024},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.479948Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:38533ae94b0245d8116e653a1c4e8d234787e4037b1dc9d43587d9a46d8f71cf","observation_id":"62dae4f9-9d57-45be-86ca-1e474e31b076","resolution":{"observed_at":"2026-08-07T05:51:18.902182Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.889771Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"b3432e67-9f21-471d-9326-7e604a32e5ac","year":2018},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.482936Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:bf89bea7839069f69b34a10e189817cce61e6d954d07afa04eedeb0d60247130","observation_id":"cdf4b26f-b993-41f8-aa7b-3e29e9e44f90","resolution":{"observed_at":"2026-08-07T05:51:18.893640Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.880747Z","title":"The curious case of adversarially robust models: More data can help, double descend, or hurt generalization","venue":null,"work_id":"ee774acd-7baa-4345-8fef-204059b37ad4","year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.485889Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:04d88978cb43e6b459484d325ab03e8d04599665a44c9ff5c7c66ba6c5f60b91","observation_id":"9c286039-4c2d-42c6-8eab-3dd359d79968","resolution":{"observed_at":"2026-08-07T05:51:18.884181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.872040Z","title":"Transferable structural sparse adver- sarial attack via exact group sparsity training","venue":null,"work_id":"082e5798-d254-49cd-9fd1-e7154da4cf17","year":2024},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.488877Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:f5d3d9e921a5195606ebe2a79f737fefb67e596e403ce9ea34f8f8211ba69134","observation_id":"33ad46c8-b4d2-41ff-b049-3abd55f87103","resolution":{"observed_at":"2026-08-07T05:51:18.875250Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.863117Z","title":"Sparsefool: A few pixels make a big difference","venue":null,"work_id":"ae038f55-1a6f-429e-a02f-aaaf535ea858","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.491970Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:b41ff50608bc0c3d611f0203c2d4ecf76794b681963e7811ee6cd5d6feea6b32","observation_id":"4687ad77-1611-4bb5-8df8-a695f90f3ded","resolution":{"observed_at":"2026-08-07T05:51:18.866400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.853068Z","title":"Deepfool: A sim- ple and accurate method to fool deep neural networks","venue":null,"work_id":"144376c4-4107-456e-a3e5-020314697e2f","year":2016},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.495047Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:f6c06d4b2b05a237b6a01f823a7fa0ee9caa3d11d40dc256c00429804f9d1284","observation_id":"90c90abf-881c-4ae8-a62e-726845cf08f6","resolution":{"observed_at":"2026-08-07T05:51:18.856607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.843434Z","title":"McDaniel, Somesh Jha, Matt Fredrikson, Z","venue":null,"work_id":"267ee7c8-9860-4409-be5a-570f2b8b6747","year":2016},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.498054Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:daa9a44ecf6082aff7990ef364f5e9abf203bff6dc5e90386af55db059cd58d8","observation_id":"4992f704-b93f-4f77-a409-cdccf14412db","resolution":{"observed_at":"2026-08-07T05:51:18.846791Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.833598Z","title":"Fast minimum-norm adver- sarial attacks through adaptive norm constraints","venue":null,"work_id":"e1bb1439-f54b-475b-9b65-8303fb9c64aa","year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.500919Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:968065de999ac5b613a85c9423ac6a0627f8da318e83337e61399a5d648f9de6","observation_id":"50388849-5e92-4caa-91b6-9751f19e0162","resolution":{"observed_at":"2026-08-07T05:51:18.837106Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.824238Z","title":"Biological structure and function emerge from scaling unsupervised learning to 250 million protein sequences.Proceedings of the National Academy of Sciences, 118(15), 2021","venue":null,"work_id":"fc049f51-b4b1-4b82-9ee2-4ec286b57576","year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.503815Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:4495cae1e532c4bcebaddaf7f7f062bb44ced0e1b0b9ccaa824e7ce63d4a1b0c","observation_id":"58554d76-0d86-4ee9-8d40-2b0a42ed318f","resolution":{"observed_at":"2026-08-07T05:51:18.827621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.815564Z","title":"Berg, and 18 F","venue":null,"work_id":"604459f8-f40e-4fd3-b01a-667af988675a","year":2015},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.506725Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:b74933aac51972dd174e76c9da76ed851d373580405d344ed6ce6cc3ce287f25","observation_id":"1d115334-e8ee-4a50-8429-2e4203ce99ce","resolution":{"observed_at":"2026-08-07T05:51:18.818661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.806615Z","title":"Selvaraju, Michael Cogswell, Abhishek Das, Ramakrishna Vedantam, Devi Parikh, and Dhruv Batra","venue":null,"work_id":"439cfe65-9c62-4a57-9ec6-07517a8fc467","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.509863Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:509fd6e0507b6cac4b92538db64896ac487d81b9768982d270b6165db791b2a5","observation_id":"b90b867e-e0da-412b-9343-a1c272f3883d","resolution":{"observed_at":"2026-08-07T05:51:18.810032Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.512974Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.512974Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:6405095213cfa70823106cedcd397a86c04f90d01642b2cc99d52a0e732ed3a5","observation_id":"b4f560ae-0ce7-4fd7-9600-44b2449ea1ec","resolution":{"observed_at":"2026-08-07T05:51:18.512974Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.791214Z","title":"One pixel attack for fooling deep neural networks.IEEE Trans","venue":null,"work_id":"17a37c50-8ca7-4706-ac45-52a5b6ea8976","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.515996Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:ecde170792b20b3b369a87959c2e170b91a7988f994a12e2627e44b7c848b676","observation_id":"240cd9c6-8a15-40a7-9926-1bd44010c8f2","resolution":{"observed_at":"2026-08-07T05:51:18.795376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.781018Z","title":"Hybrid batch attacks: Finding black- box adversarial examples with limited queries","venue":null,"work_id":"c182e192-dc57-4435-9d4c-37ab411ab3d9","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.518949Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:2270d7e4b346d686534ddc543cf04f8c3eb6c86d15ac156e20fc6ecee73e20ac","observation_id":"fd58071b-8214-46d2-a2b8-9d20da43437b","resolution":{"observed_at":"2026-08-07T05:51:18.785076Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.772676Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"9dfcb2a1-f45a-41b3-883f-9fae0e35a9d8","year":2014},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.522260Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:6bdcedfb60bb18302eb00b77492671174de31d8d8487558c2f2ccf86bfdf435b","observation_id":"be38ed92-673a-4a13-b754-ad4d483b441b","resolution":{"observed_at":"2026-08-07T05:51:18.775689Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.763394Z","title":"Fooling automated surveillance cam- eras: Adversarial patches to attack person detection","venue":null,"work_id":"2f547494-8d12-4761-8531-359d8aed69d1","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.525137Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:5aee42fd68dda9a9c555edb588f23a9b1bf6762d3f497188f3d9c5ebddb7c6fe","observation_id":"ec1e138f-7382-4c90-ad22-8e2799bdd5c6","resolution":{"observed_at":"2026-08-07T05:51:18.766653Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.754468Z","title":"Goodfellow, Dan Boneh, and Patrick D","venue":null,"work_id":"c96c7a15-f564-43eb-9e1b-07d3db03e3ae","year":2018},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.528223Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:7a7e0ecad9c4aaae4e8403eca4673e1b5e9230035071dfd87b67bec1527dbcc9","observation_id":"062874f2-9f8a-4e3b-95b7-f3e9382cb168","resolution":{"observed_at":"2026-08-07T05:51:18.757930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.745756Z","title":"Gomez, Lukasz Kaiser, and Illia Polosukhin","venue":null,"work_id":"88dac1ff-4255-46e0-a123-52a60cc9c7c4","year":2017},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.531088Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:5c0cdc9cadbd202a368eee3883a62002c690339041e575dc8bd1caaa7bf54a13","observation_id":"4bb260f3-07d6-464b-af5e-81365d54e45a","resolution":{"observed_at":"2026-08-07T05:51:18.748915Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.737063Z","title":"Brusleattack: a query-efficient score- based black-box sparse adversarial attack","venue":null,"work_id":"95656d41-1fed-42a8-90ff-d51d483c66b9","year":2024},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.534480Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:e77e2a64ae41282b663dbb26a9e30aebc916127518f35db72d57677b174baac4","observation_id":"5b9f6031-a1cf-4a34-b0df-52f9e19939fd","resolution":{"observed_at":"2026-08-07T05:51:18.740442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.726928Z","title":"Heaviside step function, 2024","venue":null,"work_id":"6e9ab465-73bb-4b91-b140-83c6aa04b577","year":2024},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.537241Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:64b2faabf37aaf7b3f0791c6223adfe908560926115c8ec9732ae28ef86943aa","observation_id":"0e66e6a8-28d0-43f1-8d1c-0efef29fcad3","resolution":{"observed_at":"2026-08-07T05:51:18.730674Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.718122Z","title":"Black-box sparse adversarial attack via multi-objective optimisation","venue":null,"work_id":"ac3a4e3a-de29-4aa0-af28-c36619d25aac","year":2023},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.540178Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:4ffc4922de6b625edc3e7d7cb9b7cc8d9f0d4c84fb70db717a27c49e84af09e7","observation_id":"064733fc-ef1d-4902-b771-efcc237e4c6f","resolution":{"observed_at":"2026-08-07T05:51:18.721353Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.708872Z","title":"Zico Kolter","venue":null,"work_id":"be4448e6-4f63-4a64-9477-ba831d140ceb","year":2020},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.542997Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:fa0e1ef2117c30fae98662cc0922352f43e9d46fba39093375e038e8170f8f34","observation_id":"ee31637c-845a-4d02-8e09-b01f90fa2711","resolution":{"observed_at":"2026-08-07T05:51:18.712083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.699890Z","title":null,"venue":null,"work_id":"a54b69af-87eb-4d3e-963c-60160ae313d3","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.546021Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:11710c86243e08d684eff10363ab8d5834c2b61766eab6c33fd9d073b3cdcb52","observation_id":"2f066b29-584f-4bc7-8233-ee8de9b629d8","resolution":{"observed_at":"2026-08-07T05:51:18.702788Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.690451Z","title":"Structured adversarial attack: Towards general implementation and better interpretability","venue":null,"work_id":"5a060e08-15d5-4794-b240-efa5fc8b4dd7","year":2019},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.548943Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:693dd2280c158edc40c05ea8b5ab7462a3f99b60f827f12f8b575000fdcc5d77","observation_id":"66b90f9d-eca4-466d-a088-e5663ef749e8","resolution":{"observed_at":"2026-08-07T05:51:18.693751Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.680822Z","title":"Fedcust: Offloading hyperparameter customization for federated learning.Perfor- mance Evaluation, 167:102450, 2025","venue":null,"work_id":"ee21a4e1-4ee3-4720-8705-05fe02f9f5c5","year":2025},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.551809Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:d5a15a8f0d19375df0d1518047e4e687ec06f032ed333fcc00fb9bf7018392f3","observation_id":"de8f21a9-aae3-4772-bf68-bb51b49f5c73","resolution":{"observed_at":"2026-08-07T05:51:18.684700Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.672270Z","title":"Zeiler and Rob Fergus","venue":null,"work_id":"6610436c-f617-4b62-91f2-d123cd6967ba","year":2014},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.554682Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:22c7c236117337f96da16e4252aefb9ca25c0b9a08b2e70b687a15887469bb33","observation_id":"c5041940-97a4-41c6-8175-da84141485c3","resolution":{"observed_at":"2026-08-07T05:51:18.675206Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:51:18.661887Z","title":"pelican\" ∥δ∥0 = 248 (b) GreedyFool. “goldfish","venue":null,"work_id":"6e7e5e99-59a2-4032-9aca-9a84d0284de5","year":2021},"citing_paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T05:51:18.557426Z"},"links":{"citing_paper":"/paper/2506.17250"},"observation_digest":"sha256:5bff2d899d53396c0d6a9f9f9acd2c64eaee7d731cb30cec33b7f51cbf3f7927","observation_id":"28af136c-e4a1-492c-9e3c-5e87555728a7","resolution":{"observed_at":"2026-08-07T05:51:18.665858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.17250","last_updated":"2025-06-08T09:13:30Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T05:41:00.983133Z","submitted_at":"2025-06-08T09:13:30Z","title":"Towards Interpretable Adversarial Examples via Sparse Adversarial Attack"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":0,"verified_fuzzy":47},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2506.17250."}