{"as_of":"2026-08-18T16:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:be61ab8520c9f57a11b99b80528a7e4528fe357bc060eec730c5ac708a3ceadb","coverage":[{"denominator":66,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":66,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T21:43:06.102646Z","state":"measured"},{"denominator":66,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":66,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.23581/citation-record","integrity":"/paper/2506.23581/integrity","json":"/paper/2506.23581/citation-record.json","paper":"/paper/2506.23581"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:17.559369Z","title":"Al-Jarrah, Mehrdad Dianati, Saber Fallah, David Oxtoby, and Alex Mouzakitis","venue":null,"work_id":"31d03917-29b9-40e1-b54e-2e969d5408d3","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:58.897033Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:bb4feccf1b35a0283cd8f7e54f43799ada611a1a58845100ca07f5c6d19c120a","observation_id":"df0d243d-d615-4ec9-930f-cd49b834863c","resolution":{"observed_at":"2026-08-06T21:43:17.635657Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:17.288267Z","title":null,"venue":null,"work_id":"4a428ad5-ca00-4cc3-9717-bf5093f036d1","year":2018},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:58.952366Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:991658e9c76246e397a8717f206745b83aacca08b4277bfba0ea9cf0c6a42f5f","observation_id":"65b859bf-510b-48e4-a345-580a5101b28b","resolution":{"observed_at":"2026-08-06T21:43:17.435947Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-06T21:42:59.069370Z","title":"Brown, Dandelion Man ´e, Aurko Roy, Mart´ın Abadi, and Justin Gilmer","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.069370Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:87b5bdf13df5f637cf65b7e8d2c6946d9a6c141fa18514f99e1d0683a44622ba","observation_id":"6bfc5bf3-48cb-4d12-abf6-4f7c96896cce","resolution":{"observed_at":"2026-08-06T21:42:59.069370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:16.934663Z","title":null,"venue":null,"work_id":"3b596343-9ef8-4e1c-b922-29e5a3a9ed5e","year":2017},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.187034Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:b235b52223dfa71fd4ed3592d643022651c4334d217b8a7b264a1dcc2dbe489e","observation_id":"11c21d94-2d07-4b4d-8523-1664d75647cd","resolution":{"observed_at":"2026-08-06T21:43:17.099731Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.07155","last_updated":"2019-06-17T17:58:12Z","snapshot_observed_at":"2026-08-16T03:32:25.570081Z","submitted_at":"2019-06-17T17:58:12Z","title":"MMDetection: Open MMLab Detection Toolbox and Benchmark","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.07155","snapshot_observed_at":"2026-08-06T21:42:59.298537Z","title":"MMDetec- tion: Open mmlab detection toolbox and benchmark","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.298537Z"},"links":{"cited_paper":"/paper/1906.07155","citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:ab326df0ff27c39a81daa37dfa3ae66ecb3ae13360c4ec1de9aa359bbf205e8e","observation_id":"a1f74e93-c026-4038-9887-f00c37a6d59c","resolution":{"observed_at":"2026-08-06T21:42:59.298537Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:16.545108Z","title":"Class- aware robust adversarial training for object detection","venue":null,"work_id":"807f8912-08fa-4232-8395-e232fe33dbcb","year":2021},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.406031Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:69783112b646312b1a875e1df50a79c5428f7d292cfcbbfddd7a76c68ee5bb21","observation_id":"a86bd88e-9a34-41de-b40f-fa3bb9f7d5bd","resolution":{"observed_at":"2026-08-06T21:43:16.709652Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:16.295359Z","title":"Curry, Ahmed Abdelkader, Aounon Kumar, John Dickerson, and Tom Goldstein","venue":null,"work_id":"c8fac7be-b2c4-4e07-83ec-7db7ef3ba597","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.487613Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:176eb3f2bee6635d342adc318272ba79e67b91a09bbae01a349f3cc9766c2d80","observation_id":"64d9b553-53a1-42d8-98a6-79a7860d0754","resolution":{"observed_at":"2026-08-06T21:43:16.371271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:16.065741Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"e624e11f-6d72-4a34-a6c8-bb81fcabc801","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.663711Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:55777038576d29d8a86c5f71e028851d15051ab8902fbca704a0b625e2ee9f2e","observation_id":"7f03ee11-3429-4ff8-9df8-22003a68e730","resolution":{"observed_at":"2026-08-06T21:43:16.170241Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.933600Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","venue":null,"work_id":"0a1e214a-355a-40b1-9aca-495aa1eb0ad2","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.766962Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:6f171a21da68a29b02289ed46b302d93ece5ceb40a9438d5fa826c73807557bf","observation_id":"a8af24e3-d3a3-4497-b187-8efa8c642769","resolution":{"observed_at":"2026-08-06T21:43:15.990165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.711976Z","title":"Histograms of oriented gra- dients for human detection","venue":null,"work_id":"3ec424f2-c1d8-4de3-a81d-35948ab0cb52","year":2005},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.884824Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:0d0ac561d1075dd49a09f0740ff78c177e6ba8b4aff5e075ae09faac86916e9e","observation_id":"77435248-9831-4808-9b98-c99bd6ecab80","resolution":{"observed_at":"2026-08-06T21:43:15.812321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.513433Z","title":"Imagenet: A large-scale hierarchical im- age database","venue":null,"work_id":"1a6c80a9-4af5-47ed-a0de-e072a73a5b02","year":2009},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T21:42:59.999837Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:8a6c8a57bf52f6edaee770577356cc11858a47ed187a0395575e2477cef8a417","observation_id":"8e6700ba-891c-45b9-9302-adada16e315d","resolution":{"observed_at":"2026-08-06T21:43:15.619083Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.416836Z","title":"Adversarially-aware robust object detector","venue":null,"work_id":"ec2e62f1-1d6c-42e3-837a-be0c8c9d0587","year":2022},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.155650Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:1846942a323fdb41e7c4e6f9896839e4f15ab884cef9ea4e111eaf08f5fa3cf2","observation_id":"02d40b81-d431-4ab3-ad59-932a6aa5d6b3","resolution":{"observed_at":"2026-08-06T21:43:15.501979Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.217887Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"e8d1dabc-1778-4a3a-b975-f973e50744c2","year":2015},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.170311Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:40185630a5d56dd20a5fec44a3f632475b3a93dc6a9f515aa6b6f257757847e2","observation_id":"b4f19e8b-8c1b-4d5e-ac0f-c640e72bac28","resolution":{"observed_at":"2026-08-06T21:43:15.339211Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:15.073801Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"c0051a4b-a75d-4ae5-b652-89278d506326","year":2016},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.174506Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:431d1907c31348e52370caf3860999f6e055ec877674a88f79e16262098b43ee","observation_id":"447fa5d4-4333-4383-8a29-0fe5cefefca4","resolution":{"observed_at":"2026-08-06T21:43:15.152312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:14.838798Z","title":"Naturalistic physical adversarial patch for object detectors","venue":null,"work_id":"afa11a5e-a682-42ef-b0e3-1d3efec70020","year":2021},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.248766Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:8c40bedfe3eeef65917811de43e21c6b9f0bfd54aa680e31617e7f660d1dbe05","observation_id":"4e49c149-f127-4beb-8b12-4f332392fc3e","resolution":{"observed_at":"2026-08-06T21:43:14.944376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:14.696978Z","title":"Adversarial texture for fooling per- son detectors in the physical world","venue":null,"work_id":"c0c674cd-9acb-48e8-94d1-66f77378b2d1","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.394839Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:818f86084d21969c138e096f3cfb05c4c7e5e176ccd6bcad0588f0e86c6a904a","observation_id":"c925c260-7388-4efb-ad7b-234af26f4bcf","resolution":{"observed_at":"2026-08-06T21:43:14.771521Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:14.538020Z","title":"Physically realizable natural- looking clothing textures evade person detectors via 3d mod- eling","venue":null,"work_id":"bc9a2302-b964-4436-bce7-cceccf6500f3","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.695744Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:e61eeb98f3456d203fdf1b50379b413e13560a87682585ece09dd0b13f6d9b58","observation_id":"f164054f-6c29-4e2d-ab9a-62eae4814b24","resolution":{"observed_at":"2026-08-06T21:43:14.597918Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:14.334042Z","title":"T-SEA: transfer-based self-ensemble attack on object detection","venue":null,"work_id":"da7f182b-fb23-4549-9e0e-8ed0974bc3cb","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.790811Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:9699cf3cca59db0d40a44af9f8d2b9a1a4fda1adadce66f274b59fc9c7c71ec3","observation_id":"38dd6a8f-0526-4e21-a725-509a7f591842","resolution":{"observed_at":"2026-08-06T21:43:14.427945Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.08860","last_updated":"2021-03-16T05:41:39Z","snapshot_observed_at":"2026-08-18T03:00:03.792152Z","submitted_at":"2021-03-16T05:41:39Z","title":"Adversarial YOLO: Defense Human Detection Patch Attacks via Detecting Adversarial Patches","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.08860","snapshot_observed_at":"2026-08-06T21:43:00.893212Z","title":"Adversarial YOLO: defense human detec- tion patch attacks via detecting adversarial patches","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.893212Z"},"links":{"cited_paper":"/paper/2103.08860","citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:a4f264d5a1535f7d314703c5a98eb287cc20a88b3b1a4dc12036fa559c44c130","observation_id":"771a7a6c-16ab-4290-b21a-d34d7e165227","resolution":{"observed_at":"2026-08-06T21:43:00.893212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:14.156979Z","title":"Ultralytics yolov8, 2023","venue":null,"work_id":"82814590-22ef-48db-ac56-a7d5750a6c12","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.995220Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:566a82cc19124c95eaebe2722a29df26b1eb5a39baa07d7cd88e25b2f41963c6","observation_id":"22d3d155-afef-4519-b62b-0a5a68cc3996","resolution":{"observed_at":"2026-08-06T21:43:14.245327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.980798Z","title":"Defending physical adversarial attack on object detection via adversarial patch-feature energy","venue":null,"work_id":"e9eab703-fa01-4d04-9ba3-0d5b021610f3","year":1905},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.121665Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:cc8f84e244f6539eba55a97fcc304983b92a6ecddbe9a787c7ad9a180e453b07","observation_id":"4d382693-e74f-4c14-90b3-3e1458bec290","resolution":{"observed_at":"2026-08-06T21:43:14.062740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.801013Z","title":"Yolov3 and yolov4: Multi- ple object detection for surveillance applications","venue":null,"work_id":"60223417-6df5-4351-a87b-6d8cba1d3abd","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.268191Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:fb39104a7773e5883784e75b2a75509f8881f60afd6c9e512927a62baf1227fd","observation_id":"e3806f4b-4707-41b1-b30c-639bf30109f4","resolution":{"observed_at":"2026-08-06T21:43:13.896169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.654848Z","title":"Goodfellow, and Samy Bengio","venue":null,"work_id":"b61632eb-cd1b-4256-a618-95654cc58e5d","year":2017},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.453328Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:df4e05e0afccf790bd19133e20f3127fb25dfc0de0a74285e8459ab1fb811558","observation_id":"28054e79-8a94-46b2-afa1-e04ce1e1ef3a","resolution":{"observed_at":"2026-08-06T21:43:13.712327Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.496841Z","title":"Perceptual adversarial robustness: Defense against unseen threat mod- els","venue":null,"work_id":"2371e842-9ef7-4ca0-8d56-2b4786ad9770","year":2021},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.568918Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:bc130b738c4f0484994d15312423cc992ea98fc6666b29cd25552b1431c7437c","observation_id":"07cdd28b-d09d-42c8-81aa-c102d0a7c083","resolution":{"observed_at":"2026-08-06T21:43:13.555650Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.353143Z","title":"Ni, and Lei Zhang","venue":null,"work_id":"319eb913-f71d-4475-bad8-cab02d0b2652","year":2022},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.715652Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:55db60d3aaff581c9302d0f75c17f741c3bf2a37b743dcd71bec873d0d8a4a16","observation_id":"04bb17a9-e1d1-4f02-a73a-fae099bb32b9","resolution":{"observed_at":"2026-08-06T21:43:13.425840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:13.182085Z","title":"Recognizing object by components with human prior knowledge enhances adversarial robustness of deep neural networks","venue":null,"work_id":"8fb84803-9b14-449c-b6e0-6d455c710304","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:01.858595Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:5454250af213ff725dfa03e1c5e6a608057b96533102852030c654cf8202151a","observation_id":"d8cd9aa5-c89e-468a-9cc0-cd024a915cfa","resolution":{"observed_at":"2026-08-06T21:43:13.259755Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.978478Z","title":"Partimagenet++ dataset: Scaling up part-based models for robust recognition","venue":null,"work_id":"c9c45eb9-99cf-4f66-8a76-5856f8e6c84a","year":2024},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.086728Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:0173312bd73a358a3409b73742ec3528deee5ad5ee8281f064843ae11980d8f2","observation_id":"57b011be-ed02-46ad-bc36-b117639ec2cc","resolution":{"observed_at":"2026-08-06T21:43:13.095911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.791124Z","title":"Language-driven anchors for zero-shot ad- versarial robustness","venue":null,"work_id":"8b8c1bfd-ab6e-4c98-9eda-02512d40fa5b","year":2024},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.246239Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:37a23e96555ca00dd1f62291cfcc8cc0ba25894ff7d211ca05d4a15925deb5b7","observation_id":"701f148b-fa1c-4ecd-9bea-adc5471e880c","resolution":{"observed_at":"2026-08-06T21:43:12.869409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.644154Z","title":"On the importance of backbone to the adversarial robustness of object detectors","venue":null,"work_id":"d46a2b75-8122-474a-ab77-824da0a5bce6","year":2025},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.370552Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:d95d7c83c51f78589cf355b6e0846665395a0a1b3ba08e0e6dfbe2c1d304c552","observation_id":"e5ac65ee-0485-4ae8-a6cc-f77ea72c11fa","resolution":{"observed_at":"2026-08-06T21:43:12.707161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.438976Z","title":"Adbm: Adver- sarial diffusion bridge model for reliable adversarial purifi- cation","venue":null,"work_id":"7cafdda1-b368-49f2-9914-dae8c68a25ce","year":2025},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.507448Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:09a453e992a2d33c7fdf4dcdc05cd7b9f46d6660604783d6a40a1f9e53e2b73f","observation_id":"0898f40a-c30c-411a-8e89-6eec02b42d67","resolution":{"observed_at":"2026-08-06T21:43:12.557554Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.247729Z","title":"Microsoft coco: Common objects in context","venue":null,"work_id":"43181a1d-9391-4a16-9b2a-b5a821ade77c","year":2014},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.637123Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:9e30d8a801df3156ae26025d1ccb4964a564569f96934ead73ab4327e379dd12","observation_id":"082f8bf1-c191-4b39-ab5d-a13c4f96f862","resolution":{"observed_at":"2026-08-06T21:43:12.332833Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:12.067309Z","title":"Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection","venue":null,"work_id":"3614e35e-c432-4067-8c1f-44d239740b5b","year":2022},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.840244Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:3a9b4dfef71af44e1f5f74a83a9dcb96c7edc3565a2a61b9803cc4014f261324","observation_id":"3ccbe837-f480-4a7b-98d5-ae80e5ea09ef","resolution":{"observed_at":"2026-08-06T21:43:12.152384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:11.893371Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"14e5e318-4323-4597-9fd9-170ec7fb53a1","year":2018},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:02.931854Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:bfa15961fed2f5b8f3e5632e0916eccf55d35d49245010d52d0880e4a5d90fa2","observation_id":"6f5b8460-a052-4eab-959b-de8115fa78d2","resolution":{"observed_at":"2026-08-06T21:43:11.976695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:11.668975Z","title":"Meta adversarial training against universal patches","venue":null,"work_id":"8b64bd61-88c6-4e03-a269-603e57150828","year":2021},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.047807Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:477f52bebf1501ebebc80c2b55e7b62ab22218994723aa3619383bbb85ef7223","observation_id":"d942ec4d-72c3-4060-9b65-d0d679cf9c12","resolution":{"observed_at":"2026-08-06T21:43:11.789464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:11.458311Z","title":"Khan, and Fatih Porikli","venue":null,"work_id":"13f67756-d0ed-4709-b3d8-5217a6f271e5","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.174023Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:f9eea18562a34264b20037731a916beb74b905a304f4c19b91e9ab31b66e137e","observation_id":"d86f38a7-7dda-4a12-b329-e233c881d6f4","resolution":{"observed_at":"2026-08-06T21:43:11.543972Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:11.277090Z","title":"Adversarial training against location-optimized adversarial patches","venue":null,"work_id":"44fd741d-e510-4a85-90d2-c3d28ffe1634","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.328425Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:57eef5f1c4ef38a2c66a5aad50d680677f21c79c077c1277012bb41e38b7f779","observation_id":"bff722c0-0d48-4848-9817-6802ce53553c","resolution":{"observed_at":"2026-08-06T21:43:11.365694Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2007.08501","last_updated":"2020-07-16T17:53:02Z","snapshot_observed_at":"2026-08-18T14:53:31.336814Z","submitted_at":"2020-07-16T17:53:02Z","title":"Accelerating 3D Deep Learning with PyTorch3D","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2007.08501","snapshot_observed_at":"2026-08-06T21:43:03.499095Z","title":"arxiv preprint arxiv:2007.08501","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.499095Z"},"links":{"cited_paper":"/paper/2007.08501","citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:062f2afc24c6b00c03e8704f4452640ee90741a6b67aca6466bffcda3e318095","observation_id":"e5e6fcb8-4f9a-4c76-b3f8-ccb75266a238","resolution":{"observed_at":"2026-08-06T21:43:03.499095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1804.02767","last_updated":"2018-04-08T22:27:57Z","snapshot_observed_at":"2026-08-15T16:54:48.034047Z","submitted_at":"2018-04-08T22:27:57Z","title":"YOLOv3: An Incremental Improvement","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1804.02767","snapshot_observed_at":"2026-08-06T21:43:03.612698Z","title":"Yolov3: An incremental improvement","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.612698Z"},"links":{"cited_paper":"/paper/1804.02767","citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:e279aa2ccd1bea6db82cc552b1383c069d5eb078a46f79ece99a00e3b8be10cc","observation_id":"10e1bdc8-0c74-4f9b-9550-e035b65f547a","resolution":{"observed_at":"2026-08-06T21:43:03.612698Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:11.133785Z","title":"Girshick, and Jian Sun","venue":null,"work_id":"52c652e7-eebc-430e-a60f-f98edc9ca6f6","year":2017},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.713090Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:0c261861458c41a0309c3b8c94f6bc3f795083aebb5498e5428992e418feb89e","observation_id":"0c053e49-613c-477f-8d63-af92b689746b","resolution":{"observed_at":"2026-08-06T21:43:11.199903Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:10.935201Z","title":"Do adversarially robust im- agenet models transfer better? In Adv","venue":null,"work_id":"e8c483b6-5d56-46a1-868d-43c2a9c6334c","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.814023Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:267f1d578c7072f158051eaf4a73a17b377d31e7cba08bedec60f4f5cf4f14f9","observation_id":"31ff40d9-1a77-40da-b88a-671f3387a832","resolution":{"observed_at":"2026-08-06T21:43:11.018887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:10.750023Z","title":"Dickerson, Christoph Studer, Larry S","venue":null,"work_id":"27e112b3-66bd-4736-b359-b685a7f52093","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:03.910695Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:a2e384238566bee444032916f1a5636f87652064c85987eb0d748426122e0ae1","observation_id":"a78d38d0-f98f-474c-9ee8-41714508c718","resolution":{"observed_at":"2026-08-06T21:43:10.834187Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:10.555582Z","title":null,"venue":null,"work_id":"d3f5a729-134f-47c9-a9df-c6cddce2b412","year":2016},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.023174Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:cc09f6db110b0f44e1274ceb930d6674ef463b69bc10a15a8ed6871b2cb8cbfc","observation_id":"decf1037-7f1a-4ab8-baeb-bff6f3e15751","resolution":{"observed_at":"2026-08-06T21:43:10.659408Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:10.344643Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":"ae37689b-a59e-4b11-8a6f-0510a642803c","year":2014},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.189297Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:7a1813c106c85e0a80482c6649eecb244e0875fe1497165cfe9cb819eabbdc80","observation_id":"847c00e2-7a99-4e76-861a-9e4adc3ac096","resolution":{"observed_at":"2026-08-06T21:43:10.439450Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:10.139752Z","title":"Abu-Ghazaleh, and Ihsen Alouani","venue":null,"work_id":"52f82907-ff09-4be6-be23-9ab4c0d4ef53","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.355991Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:273d06e40ffa5bad0aee746cf1f61ec56c36a847f1b8f6726aca649da81de456","observation_id":"365a5fdc-0edf-451f-91c6-df1219d13352","resolution":{"observed_at":"2026-08-06T21:43:10.235220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:09.969863Z","title":"Fool- ing automated surveillance cameras: Adversarial patches to attack person detection","venue":null,"work_id":"c271f1dc-2fc7-424a-a000-9ed8723ff42d","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.413607Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:43918bf229cee39562f479217114069c7dc7c58bae62321f5a77b1fb192d2ce4","observation_id":"ee0391cf-2b16-49bd-9270-bf8977a40933","resolution":{"observed_at":"2026-08-06T21:43:10.048962Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:09.755656Z","title":"FCOS: fully convolutional one-stage object detection","venue":null,"work_id":"982d61d1-60cd-4d97-aa3c-b843a8aace52","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.470513Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:d1c80ba86257fed04f353cc1e335bbf6e458603b6f310098084d0ae1a8c86b79","observation_id":"a29bf6d2-f664-42f2-9d5d-db66f09bce34","resolution":{"observed_at":"2026-08-06T21:43:09.853233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:09.600093Z","title":"On adaptive attacks to adversarial ex- ample defenses","venue":null,"work_id":"dca0bc5a-74cb-4d09-afa0-887fb6e03252","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.549692Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:d2b33ea47ff1952695224562833e6519dea586a1bdbd469cd41b7f09b1767cf1","observation_id":"ce7271f7-2042-4f5d-907a-3baa4aa777a4","resolution":{"observed_at":"2026-08-06T21:43:09.666951Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:09.319192Z","title":"Re- visiting adversarial training at scale","venue":null,"work_id":"aaf06553-23a8-45e4-abfb-fcee54fa5556","year":2024},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.635664Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:68eb0fd7fdc92fd466a81c0d12e305556361a52b3786968cdbc367ea6c111285","observation_id":"d90df58f-9702-42cf-8a68-3ebaa51e280f","resolution":{"observed_at":"2026-08-06T21:43:09.478648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:09.132659Z","title":"Napguard: Towards detecting naturalistic adversarial patches","venue":null,"work_id":"4eb1b474-6865-4fcb-98be-d8d1196160fc","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.724928Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:8a62668bd3356ff2313e447dac1fc6e7d60d586b9939145ad758e0e10029fb3c","observation_id":"39636e1a-1917-459a-b5d1-b34024c5bc02","resolution":{"observed_at":"2026-08-06T21:43:09.249848Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:08.853108Z","title":"Defend- ing against physically realizable attacks on image classifica- tion","venue":null,"work_id":"f7449725-a059-47c8-a023-4669e49cbb33","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.848708Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:b98d6400fcbf3dd972ac3b8c83c126f661f5691756e701d9a3a7b0873d94f765","observation_id":"c7d486ce-c92e-408a-80c6-1dbd501d7ff8","resolution":{"observed_at":"2026-08-06T21:43:09.002887Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:08.668786Z","title":"Making an invisibility cloak: Real world adversar- ial attacks on object detectors","venue":null,"work_id":"06790435-9119-41de-8ce0-a6c9e256e4b9","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.907818Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:0ba7dd74470e37d64abea00c0d29bd3dcd93974bd2a401b342378c99c5d565ca","observation_id":"d3403b4b-29fe-4097-8704-8bfa5d884a50","resolution":{"observed_at":"2026-08-06T21:43:08.745295Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:08.497211Z","title":"Adversarial t-shirt! evading person detectors in a phys- ical world","venue":null,"work_id":"47512ff8-21ad-491f-aa87-d0d5bd6ff62f","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:04.992693Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:844d550027200adc941c5dde54d947b74c5f25c5c490d625562c60679af2c3f2","observation_id":"9b723a50-26e1-4b0d-89cd-1777f75984bd","resolution":{"observed_at":"2026-08-06T21:43:08.553905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:08.350472Z","title":"Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch","venue":null,"work_id":"d59b34e2-e31f-4dfb-b3e2-9686113ed20c","year":2023},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.090685Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:0da244f756795866dad6d800c6e16e6d6fc270829d2cda01923c118527503c7b","observation_id":"88889d38-96cc-40bc-b190-d532563875d8","resolution":{"observed_at":"2026-08-06T21:43:08.416471Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:08.155276Z","title":"Defending against uni- versal adversarial patches by clipping feature norms","venue":null,"work_id":"3030184b-8a27-44a2-af66-3bee60fe8b25","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.201107Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:5c7a6a3c5aaa9c69047f16f360df7a88af917f540116e59bff1d7aa426357516","observation_id":"7bd28e32-b079-4034-a244-4460077dd2f8","resolution":{"observed_at":"2026-08-06T21:43:08.249497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.984346Z","title":"Defending person detection against adversarial patch at- tack by using universal defensive frame","venue":null,"work_id":"91c99253-e629-470f-9520-f20a3a1bf643","year":2022},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.323742Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:1af59b6e96813cdbae05c0e997c0a5c867919a33ff04ce8b55c96d9452ad9bc1","observation_id":"44f28573-444e-4313-af8f-69cf548f8c2d","resolution":{"observed_at":"2026-08-06T21:43:08.042998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.803215Z","title":"Towards adversarially ro- bust object detection","venue":null,"work_id":"f2f14a53-1eed-4bd3-977b-39eb18237d03","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.412403Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:3dabf7ed3a9089267836c41706df77a535cdef0cfcdc40de1dbb592b253c7f11","observation_id":"4636cb90-72a7-447a-8241-f6e51e6b9d1e","resolution":{"observed_at":"2026-08-06T21:43:07.883360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.617204Z","title":"Boning, Inderjit S","venue":null,"work_id":"4b414d0c-bf54-4234-91c5-ba04458502f6","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.491838Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:baf0cf5f3d380e4309873e8f5ace718a6a1a3f062068f4f707a983a7abc70b84","observation_id":"e648cbda-37d7-4237-b3bd-a33fa42cdb86","resolution":{"observed_at":"2026-08-06T21:43:07.699013Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.437482Z","title":"Xing, Laurent El Ghaoui, and Michael I","venue":null,"work_id":"21440291-2e3e-44fe-866b-639da25fae26","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.559150Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:a534a6669ef5e4b4f07afbb082bbaf9397d8466f2f9f0d47dc395e71b2f910db","observation_id":"4e701437-e2ce-4df8-90da-d9852e24d499","resolution":{"observed_at":"2026-08-06T21:43:07.521995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.258837Z","title":"Object detection with deep learning: A review","venue":null,"work_id":"fc913d0e-67db-401e-abaf-7090819a61e8","year":2019},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.634998Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:7ade0bd4a1c13beaabfe72a0765aa19bbcf43b61f8d60e93d6148c56a861facf","observation_id":"b206fa32-7c7b-4f6f-8837-00288f20fb1d","resolution":{"observed_at":"2026-08-06T21:43:07.344077Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:07.056208Z","title":"Information distribution based defense against physical attacks on object detection","venue":null,"work_id":"bb326ce4-93d5-4a6a-ab03-4d3ce16fb045","year":2020},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.695311Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:9097b884dd6379f297d4f5b8ed949b0ee7c4cc54bf4cc7b1835eff84040862d9","observation_id":"eb368115-5fbe-4887-b25f-96fdede03bb9","resolution":{"observed_at":"2026-08-06T21:43:07.168203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:06.908016Z","title":"In each step, it evaluates t candidate positions and selects the one with the highest loss value","venue":null,"work_id":"568b61f4-dc45-49b6-b77a-4480859447c0","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.780458Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:3c25640ef13ace391cb66955f4ed0618e9abdeeca2187b6985102fad7160e5eb","observation_id":"12a7b496-7f15-428a-8418-7ab825f1391d","resolution":{"observed_at":"2026-08-06T21:43:06.992747Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:06.701347Z","title":"It first performs t steps to determine the patch location, followed by k PGD steps to generate the adver- sarial patch","venue":null,"work_id":"af05fa9b-6049-434c-9c2b-8789932d219b","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.865237Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:523316917a048bc39fe31a6af736ceada839bce26e581c053687c56b502f16e9","observation_id":"83a7cbd0-5e44-4527-8af1-c9e8b6f67e39","resolution":{"observed_at":"2026-08-06T21:43:06.812199Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:06.549393Z","title":"It then updates the patch using I-FGSM [23], requiring a total of p + 1steps per iteration","venue":null,"work_id":"0bd12d88-ea24-4944-b3ce-f7aa9b29f6a8","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:05.956650Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:56af6e391da33a4d9af1b4aaad239086d85a3b7a753499dc437599e281e8b1fb","observation_id":"d37d4b9f-14c3-482b-b268-3889d55bb47b","resolution":{"observed_at":"2026-08-06T21:43:06.631624Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:06.393268Z","title":"It requires only a single forward/backward pass with FreeAT [41], irrespective of the number of targets, and thus it significantly reduces computational overhead","venue":null,"work_id":"ecc517c2-d73d-48a3-a3d6-83601c32178b","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:06.014676Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:448790a072fed10cedd70f2a5c35fe16aa48244541327943c9fc152bf6a41f09","observation_id":"3432d9fd-ac13-4da6-8f75-40d4783a65ca","resolution":{"observed_at":"2026-08-06T21:43:06.463719Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:06.270747Z","title":"All” and “Person","venue":null,"work_id":"5fe456d9-396c-4cd9-815a-34e77b038411","year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:06.102646Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:c792cc44e974793deb5e2f8b3b16e273e7756f9286d30312067cf148701426fe","observation_id":"0ad4b69b-e5da-4903-a2bb-089645cecc3c","resolution":{"observed_at":"2026-08-06T21:43:06.321071Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T21:43:00.492618Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection","version":2},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-06T21:43:00.492618Z"},"links":{"citing_paper":"/paper/2506.23581"},"observation_digest":"sha256:844de9740c95a363fa0120cce4a3a8510382c46ea883fa5c17b3bc0363b2abe7","observation_id":"73245ae5-9b0c-4536-8623-72451d2d6a6a","resolution":{"observed_at":"2026-08-06T21:43:00.492618Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2506.23581","last_updated":"2025-07-09T13:36:11Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-17T23:53:50.920800Z","submitted_at":"2025-06-30T07:36:21Z","title":"PBCAT: Patch-based composite adversarial training against physically realizable attacks on object detection"},"reference_resolution":{"displayed":66,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":1,"unresolved":8,"verified_exact":0,"verified_fuzzy":57},"total_outbound_references":66},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 0 inbound Pith citation observations for arXiv:2506.23581."}