{"as_of":"2026-08-09T04:28:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:835caeb54726d4257e3d50f741d6af157c883c7467d81a538ff4363b6360a55b","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:02:05.286844Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.06856/citation-record","integrity":"/paper/2507.06856/integrity","json":"/paper/2507.06856/citation-record.json","paper":"/paper/2507.06856"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.914891Z","title":"Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices","venue":null,"work_id":"5ea51ccd-72d4-404f-9daf-9a01d1520547","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.092400Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8cd678d704b90431ee41c568654874ab6642d45a6ac3b8557507f19777296faf","observation_id":"299ab545-9dd4-4b53-b49e-3bb397853bcf","resolution":{"observed_at":"2026-08-06T19:02:05.918332Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-06T19:02:05.096629Z","title":"Adversarial patch","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.096629Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ff6f1a62b69b198cfe2223d90f398ca9db9667ecb26b3f5018eca018a21c4e03","observation_id":"6af8c1df-4221-4e5c-ad27-4926969925e4","resolution":{"observed_at":"2026-08-06T19:02:05.096629Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.904552Z","title":"Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks","venue":null,"work_id":"4b57f4a4-cb1d-4b9a-ae83-24189ffe0e75","year":2015},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.100673Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:469c11aa458880f944eeeeed9a1469f53d2e06fb7cfa0880227b85f1b75123ef","observation_id":"85693d5e-b752-471a-b3bd-d679fa0cdd10","resolution":{"observed_at":"2026-08-06T19:02:05.908197Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.893020Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"fe969424-7901-41be-90c1-c9e95ba5401d","year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.104242Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:6166e3e1d07c791131b3f26c98ebc180fffaeb0b95195ac1331973d42431fbe9","observation_id":"b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065","resolution":{"observed_at":"2026-08-06T19:02:05.897193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.881819Z","title":"Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022","venue":null,"work_id":"9a02e6d1-2a1c-47de-8160-104bc865473b","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.108100Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:6b6faafc0f91fbc61c1074012ae4beb8af4e5bde0b7ea605d3781217f6390ce3","observation_id":"ae8aaa8c-7bdf-4202-9fb7-b2911ac64997","resolution":{"observed_at":"2026-08-06T19:02:05.885334Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.871813Z","title":"Sparse and imperceiv- able adversarial attacks","venue":null,"work_id":"9c798455-8593-47cf-b0af-2ca933d7fa96","year":2019},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.111768Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:f7347ea764bcf3ac489d95556dab06941b5f7f558ed39af6d53c96ba678cd71e","observation_id":"3f59faa7-3aca-4d59-b7d9-f3d011649801","resolution":{"observed_at":"2026-08-06T19:02:05.875151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.862136Z","title":"Diffusion models beat gans on image synthesis","venue":null,"work_id":"6f5264f5-7538-4458-b6f9-c84583804012","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.115181Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:c9682013f2c59d34250f76905052092f6ef7e52b3fea8a14d7a4515f985b64b7","observation_id":"35aad53c-ce37-460b-bac1-c750abf35f3a","resolution":{"observed_at":"2026-08-06T19:02:05.865794Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.851037Z","title":"Perceptual quality metrics applied to still image compression","venue":null,"work_id":"57600789-0f76-4553-8a03-1836d2d18426","year":1998},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.118802Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8af0e271a8576a6e5670d3b1b3518f736042d716d72bf3221ab28ecb31262d5a","observation_id":"770eb60e-4077-4148-91a9-e5def99783c4","resolution":{"observed_at":"2026-08-06T19:02:05.855357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.840220Z","title":"Robust physical-world attacks on deep learning visual classification","venue":null,"work_id":"c485eb5d-6d1b-44fc-ba10-8f033e274843","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.122059Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:cfe8e554c8fd4c8a5748f4f3366602f7e6ab35cfc9885682f203047d46b1e01b","observation_id":"a13257ea-773b-4d09-adc0-c6bdffd67d6e","resolution":{"observed_at":"2026-08-06T19:02:05.844160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.24006","last_updated":"2024-11-14T14:58:26Z","snapshot_observed_at":"2026-08-07T17:11:19.053525Z","submitted_at":"2024-10-31T15:09:36Z","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","version":2},"cited_work":{"arxiv_id":"2410.24006","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.24006","snapshot_observed_at":"2026-08-06T19:02:05.440576Z","title":"DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination","venue":"cs.CV","work_id":"53d54fde-884a-4295-9b45-8eb6248e0ad4","year":2024},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.125550Z"},"links":{"cited_paper":"/paper/2410.24006","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:0588d253dc02edb43025fe80741e224ddb23f33b168a1a0dc8f1f8df7560c6ad","observation_id":"25de0660-82d6-4d56-8153-9a1a06da10d4","resolution":{"observed_at":"2026-08-06T19:02:05.444597Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.129316Z","title":"Wichmann, and Wieland Brendel","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.129316Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:cbdb8584e879898770b7ca142a8d888ba8fefe62c0d25cd64d29957f9fe0eaf1","observation_id":"967abd3d-f578-4ec7-9a85-0cae36515b7c","resolution":{"observed_at":"2026-08-06T19:02:05.129316Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-06T19:02:05.132750Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.132750Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ac09783b9d6d343cfb21ddd8960b62f0330de357a6b309c7bda1d4ed235e1412","observation_id":"f9ef3337-8950-4b3c-9adc-62993a6b87cd","resolution":{"observed_at":"2026-08-06T19:02:05.132750Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.821584Z","title":"Unravelling robustness of deep learning based face recognition against adversarial attacks,","venue":null,"work_id":"45dbbe3d-829b-405e-9690-a8c2cfbe9038","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.136260Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8d13a3d6014ab54e5d323fde79e22ed926e62aec8a72e84e97454ee959d0628c","observation_id":"4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f","resolution":{"observed_at":"2026-08-06T19:02:05.825439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.811333Z","title":"On visible adversarial perturbations & digital watermarking","venue":null,"work_id":"1cd99d24-f95b-4237-805a-aa24bdbd04ea","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.139567Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:b7fc2ea2f3e17b91aa3db9cb237e952511c79a014980a74224eb74fb3fef0b88","observation_id":"e2338ec8-a17c-484c-b006-4bf8259e17eb","resolution":{"observed_at":"2026-08-06T19:02:05.814904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.800445Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"7626addf-2612-43b3-b644-67cc0f937fca","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.143551Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:1aa9235bece6b1cb09df86dc87bdb73fb0719a612db5a771d683164bbd7dcabe","observation_id":"66a9de09-e542-4cbe-b864-bf9d86bc4038","resolution":{"observed_at":"2026-08-06T19:02:05.804253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2104.08718","last_updated":"2022-03-23T19:47:21Z","snapshot_observed_at":"2026-07-06T11:01:02.207193Z","submitted_at":"2021-04-18T05:00:29Z","title":"CLIPScore: A Reference-free Evaluation Metric for Image Captioning","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.08718","snapshot_observed_at":"2026-08-06T19:02:05.146699Z","title":"Clipscore: A reference-free evaluation metric for image captioning","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.146699Z"},"links":{"cited_paper":"/paper/2104.08718","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:45371e23a9f46ea7942abab0fdb36c4bbc6915ac7f7245d98a2ef2643dca819a","observation_id":"b3f5c767-0e04-458a-85ea-1c0dd0710cfb","resolution":{"observed_at":"2026-08-06T19:02:05.146699Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.790411Z","title":"Denoising diffu- sion probabilistic models","venue":null,"work_id":"f8aa784f-bf22-4f97-b2d1-a03ceb5ebc32","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.150190Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:43717c07847bad95dc930fca31d2d8896f1dc300511588ae59e04f7db9bb6664","observation_id":"47bba56d-9829-4106-97ce-f13f8f00a064","resolution":{"observed_at":"2026-08-06T19:02:05.793798Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.779634Z","title":"Human imperceptible attacks and applications to improve fairness, 2021","venue":null,"work_id":"639f086e-bb45-4735-94cc-8e32143be524","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.153870Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:9091b4806b50f1003759f2ad8bbe2cc7bc9c41822deab4ec87291dce81a0594c","observation_id":"708f49fc-74e0-41bd-b04f-037451ceade5","resolution":{"observed_at":"2026-08-06T19:02:05.783508Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.769365Z","title":"Black-box adversarial attacks with limited queries and information, 2018","venue":null,"work_id":"63efaa7c-5587-41e1-b796-e105cdc45cb4","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.157229Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:a3ef9fdad4ef1e6ae18ff9d5ba86b9a2523a9f170ee8ca46cfdd2eb09b8af252","observation_id":"0bf0fdf1-7b13-4979-a66c-b91cbb24abdd","resolution":{"observed_at":"2026-08-06T19:02:05.773345Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.758833Z","title":"Diffender: Diffusion-based adversarial defense against patch attacks","venue":null,"work_id":"cbb2a986-2069-435f-b064-8a52e134455d","year":2024},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.160742Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:867366e6510bc39486d61b1ad357ea9c64082a8dbc9fb6b2872fa015fedbc04b","observation_id":"02e2868b-1d8a-42a9-a199-ae7cb21a6b48","resolution":{"observed_at":"2026-08-06T19:02:05.762770Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.748151Z","title":"Lavan: Localized and visible adversarial noise","venue":null,"work_id":"07f2784d-05de-4abb-8b00-d5f6e05ef1a9","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.164084Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:21cf4b449a92de5381c9e55293a90ca0194a761fa3df312404d6775902b0f337","observation_id":"d449fe56-ebb4-40d4-b508-4eb100ba3bd6","resolution":{"observed_at":"2026-08-06T19:02:05.751908Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.736617Z","title":"Advhat: Real- world adversarial attack on arcface face id system","venue":null,"work_id":"a687c0fc-56d8-46b7-a522-142d11a347d7","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.167688Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:9eeee067b687f7316413ee35b1779ea8ca597c3b3bbda818de81473dcb3e5c0d","observation_id":"0a17c12f-97b0-47a2-82af-7d07f9f5245f","resolution":{"observed_at":"2026-08-06T19:02:05.740415Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.726002Z","title":"Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network","venue":null,"work_id":"4b9bca3b-a639-48d4-b1c4-b64c3a535659","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.170975Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8ae1a218af6c55a8f17f5740f32fbe6a2da5eec891cca00f3935f6d9f660cfdc","observation_id":"718b978a-7a64-4152-89a2-3ca6f209a2de","resolution":{"observed_at":"2026-08-06T19:02:05.730070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2111.04266","last_updated":"2021-11-15T16:39:22Z","snapshot_observed_at":"2026-07-06T12:06:21.705657Z","submitted_at":"2021-11-08T04:15:34Z","title":"Generative Dynamic Patch Attack","version":2},"cited_work":{"arxiv_id":"2111.04266","doi":null,"metadata_source":"pith","pith_arxiv_id":"2111.04266","snapshot_observed_at":"2026-08-06T19:02:05.406541Z","title":"Generative Dynamic Patch Attack","venue":"cs.CV","work_id":"dc313fab-60e5-427b-bfe1-118946ed6928","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.174128Z"},"links":{"cited_paper":"/paper/2111.04266","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:522cd32c17a5c8fc92e6c8ac70e9aaf26dabca52b3287e5e7cf2243578c17e67","observation_id":"25e07283-ddc1-4be7-9e40-fb24db658449","resolution":{"observed_at":"2026-08-06T19:02:05.410546Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.715039Z","title":null,"venue":null,"work_id":"eac772c1-7095-45fa-87a7-e70bb2871898","year":2010},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.177905Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:3e6f4315dedb5a8c24008e351d4391f714d498078341df04cdeb6778a0ef602f","observation_id":"9aa57581-6e9b-4607-a0a9-989727cfb249","resolution":{"observed_at":"2026-08-06T19:02:05.718918Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.703706Z","title":"Perceptual-sensitive gan for generating adversarial patches","venue":null,"work_id":"6e721105-7548-41dc-9d29-e84a2e203512","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.181478Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:311bfe2457cf4ca02b1dfe6fd9a56a5acfabcaf75e3d1c39d20548ad32f8dca1","observation_id":"214276aa-e2fc-454f-8ef6-fd406cf37938","resolution":{"observed_at":"2026-08-06T19:02:05.707736Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.691474Z","title":"Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection","venue":null,"work_id":"4457a6ad-c1a7-4697-8614-c18572998a04","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.185239Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:68a41dd6b26233275d2bc07f34deeb611400dd72c29d14470858bd2edc19bb03","observation_id":"9c91745b-6ea1-4887-bbcf-e13d5230ea43","resolution":{"observed_at":"2026-08-06T19:02:05.695591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.678730Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"06284633-731c-48f6-8212-2411d45e4e0b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.189085Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:3a1a2fa3e47383bda520693b79c45fe0a368b3d3e31fe655632082a1ec0b538d","observation_id":"0a6c1c1b-9d57-4c96-a075-6c20ba31a3df","resolution":{"observed_at":"2026-08-06T19:02:05.683587Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.668003Z","title":"Towards imperceptible and robust adversarial example attacks against 9 neural networks","venue":null,"work_id":"8d7c1f12-defa-44bc-9c16-130e2aebe83b","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.192313Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:082ecaf18b98076902f8ed5b464fe8a9376384a5331c5a876e84041418b47dd7","observation_id":"e39d81c6-ed70-4879-b6b0-8791fdeba67b","resolution":{"observed_at":"2026-08-06T19:02:05.672104Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T19:02:05.195978Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.195978Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:655ef241d4477af835b7c98eb69968d574aced135d6ceadbdfd3ba823291e2ff","observation_id":"2aab3dc0-2051-4dbd-9ae3-f43914e6b323","resolution":{"observed_at":"2026-08-06T19:02:05.195978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.656373Z","title":"Deepfool: a simple and accurate method to fool deep neural networks","venue":null,"work_id":"7a0df9ea-3470-47a7-9956-20b9e27283e1","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.199893Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5ecef4fd1ac580c862a5f812afcdb6c241ae09343923a341e83511c5f62f6880","observation_id":"1e5c525d-739b-4adb-ae29-dfc23fa4a80d","resolution":{"observed_at":"2026-08-06T19:02:05.660317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15144","last_updated":"2021-03-28T14:49:17Z","snapshot_observed_at":"2026-08-08T18:55:36.180119Z","submitted_at":"2021-03-28T14:49:17Z","title":"Face Recognition as a Method of Authentication in a Web-Based System","version":1},"cited_work":{"arxiv_id":"2103.15144","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.15144","snapshot_observed_at":"2026-08-06T19:02:05.380892Z","title":"Face Recognition as a Method of Authentication in a Web-Based System","venue":"cs.CV","work_id":"73b1d697-71fd-4cae-a703-5009a6c5247b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.203908Z"},"links":{"cited_paper":"/paper/2103.15144","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5368470aa8d48517c53106655a0d10e7d11b3ed07e2912db99c6cd880e4fd68f","observation_id":"93e9ea78-aeb4-4a1d-a198-6113cc7184c0","resolution":{"observed_at":"2026-08-06T19:02:05.385165Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.645109Z","title":"Diffusion models for adver- sarial purification, 2022","venue":null,"work_id":"b76b1a48-90c5-4942-a5ba-bff2f656c32c","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.207586Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:68f32d629e2d84015132ce4ce66c86e8b8c9d356437fe51e9698b8a470be45fe","observation_id":"6f6e5f53-11b8-4f5d-92d2-8c411da88933","resolution":{"observed_at":"2026-08-06T19:02:05.649317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.634116Z","title":"Parkhi, Andrea Vedaldi, and Andrew Zisserman","venue":null,"work_id":"9d1e72e4-9874-4432-8c48-4571c8ccda24","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.210908Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:aeab35e73d63ba8063e0f9ccf4e1b63962da0e6e84c63a4ee2d847309f5a1b5d","observation_id":"be6733dc-537a-4b1c-8f92-3492e02daf89","resolution":{"observed_at":"2026-08-06T19:02:05.638192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2012.00909","last_updated":"2021-04-27T06:14:28Z","snapshot_observed_at":"2026-07-06T10:19:44.106240Z","submitted_at":"2020-12-02T00:47:56Z","title":"Visually Imperceptible Adversarial Patch Attacks on Digital Images","version":3},"cited_work":{"arxiv_id":"2012.00909","doi":null,"metadata_source":"pith","pith_arxiv_id":"2012.00909","snapshot_observed_at":"2026-08-06T19:02:05.365881Z","title":"Visually Imperceptible Adversarial Patch Attacks on Digital Images","venue":"cs.CV","work_id":"8458c77b-3d52-4537-ad22-ab66f47a9124","year":2020},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.214447Z"},"links":{"cited_paper":"/paper/2012.00909","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:65cd5c8527026238617e0dc1b280972bd54f65e9eaf681e7ff77ffc2b3d267d8","observation_id":"8ac3e957-5ef1-41ad-879c-6a94951ce284","resolution":{"observed_at":"2026-08-06T19:02:05.369809Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.218232Z","title":"Berg, and Li Fei-Fei","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.218232Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:7dc46a976f7837dc73fe591bb6e1da2eecfae3c5473d13394ad93fa010987b49","observation_id":"92e96646-0315-4f22-babe-dd14a87bb251","resolution":{"observed_at":"2026-08-06T19:02:05.218232Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.617128Z","title":"Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018","venue":null,"work_id":"5a93dd64-06e3-44dd-aba5-2b4db2e05dea","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.221815Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5f2f10a6fa8138c4b2b1084885ca64943ff467abd5dbd9cbf34697aca37fc043","observation_id":"3fa15ba9-d27a-43b6-ac83-42b0da465843","resolution":{"observed_at":"2026-08-06T19:02:05.621102Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.605175Z","title":"Grad- cam: Visual explanations from deep networks via gradient- based localization","venue":null,"work_id":"04dc973e-f4d0-42a7-a095-90cc6e6031f3","year":2017},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.225548Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:67fe6ff793892d651fa3ae9efb51311b95e09da361d150d085e5aafb57f72c40","observation_id":"0e0e8cb8-7742-4664-8fa0-782e3ca09cf5","resolution":{"observed_at":"2026-08-06T19:02:05.609035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.594845Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition","venue":null,"work_id":"a7c2d105-1197-4627-8308-ad60ebfdfa68","year":2016},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.228749Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:f7ef0f8abd2b3438d9018698eb6559a3eb177e95bde6e1c2d8acee8bb741ecb8","observation_id":"334692ea-6ccc-4ef7-8183-a94911cce4e3","resolution":{"observed_at":"2026-08-06T19:02:05.598567Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.584362Z","title":"A general framework for adversarial ex- amples with objectives","venue":null,"work_id":"c51e2c9b-5d3d-4cc9-87f0-69441729d38b","year":2019},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.232541Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:b0b341df0ff4b309b061bb6261959b060a8954ff717968602903fc4c358ade5e","observation_id":"7f80e671-113d-4a27-83e0-5b16121731b2","resolution":{"observed_at":"2026-08-06T19:02:05.588781Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-06T19:02:05.236010Z","title":"Very deep convo- lutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.236010Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:61119f3773f9d50b6cdf033cbdf688c2abab7769d8052dde17e34da052d91faa","observation_id":"4ad5f2dd-f9a6-4ef8-86f8-91378594a931","resolution":{"observed_at":"2026-08-06T19:02:05.236010Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-06T19:02:05.239599Z","title":"Intriguing properties of neural networks","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.239599Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:6675547f85da6a230bf4b5d8608d21d27b4ced8e370717533ea8296cd0dd6222","observation_id":"7f3193fe-fe52-4f80-a6c2-06657c10d0b8","resolution":{"observed_at":"2026-08-06T19:02:05.239599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.574437Z","title":"Jedi: entropy-based localization and removal of adversarial patches","venue":null,"work_id":"a64c4752-2a9d-4bb5-802e-c1fd1c3e084e","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.242958Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:ed22be97e98d5341e870625cdc2870a9308795d2732dfefd039a035441e05c9d","observation_id":"042dd1a1-b454-4fd4-b128-4401f8c54d4d","resolution":{"observed_at":"2026-08-06T19:02:05.577870Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.14969","last_updated":"2022-06-29T02:42:05Z","snapshot_observed_at":"2026-07-06T13:15:21.126555Z","submitted_at":"2022-05-30T10:11:15Z","title":"Guided Diffusion Model for Adversarial Purification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.14969","snapshot_observed_at":"2026-08-06T19:02:05.246199Z","title":"Guided diffusion model for adversarial purification.arXiv preprint arXiv:2205.14969, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.246199Z"},"links":{"cited_paper":"/paper/2205.14969","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:7a2acb6cf13bcb988dfbb0d20d1816fb77d45639b71135f44507ea916955a14b","observation_id":"5971908d-e759-4d83-af38-6c56fe5047dc","resolution":{"observed_at":"2026-08-06T19:02:05.246199Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.03030","last_updated":"2023-12-05T11:07:39Z","snapshot_observed_at":"2026-07-06T16:57:21.997777Z","submitted_at":"2023-12-05T11:07:39Z","title":"Generating Visually Realistic Adversarial Patch","version":1},"cited_work":{"arxiv_id":"2312.03030","doi":null,"metadata_source":"pith","pith_arxiv_id":"2312.03030","snapshot_observed_at":"2026-08-06T19:02:05.318080Z","title":"Generating Visually Realistic Adversarial Patch","venue":"cs.CV","work_id":"61fc9cb2-e6dd-4399-b5e8-80e7d50cf1e5","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.249694Z"},"links":{"cited_paper":"/paper/2312.03030","citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:796c2a202e6800aeea22abef1a43538ff1b733dff83867373f5f3c657771633d","observation_id":"3c9d7d99-7724-4a7e-b43c-3670910704ad","resolution":{"observed_at":"2026-08-06T19:02:05.323915Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.564720Z","title":"A universal image quality index","venue":null,"work_id":"658a2275-5f68-47f3-b9c7-b3bfda7e18e8","year":2002},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.253404Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:0b1a202d5fda1ee67e9b26a199a405a1c6a92bf4676cb9bbe8be4821ef81a3db","observation_id":"33270bd5-cf97-443f-b362-7aff7daf8024","resolution":{"observed_at":"2026-08-06T19:02:05.568001Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.554684Z","title":"Image quality assessment: from error visibility to structural similarity","venue":null,"work_id":"20eeebee-feb3-46b1-810e-b439da241e94","year":2004},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.256345Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:8058d672a87ebf4a65bf3cd0e24716cc3d951c4ed9af43b9f22d1655ef45a5e9","observation_id":"78b34c76-dbb8-4b4c-a085-1f1d59b48ca0","resolution":{"observed_at":"2026-08-06T19:02:05.558099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.544224Z","title":"Privacy-preserving adversarial facial features","venue":null,"work_id":"50bc6a4b-3d98-49dd-8857-d0839f466726","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.259670Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:dbfed497dcb88faf6cb571c0448eb0e716d5e056edfa6df5b0b608c4d0ae86c0","observation_id":"a7d579ed-de42-4dbd-89c5-284b20c65545","resolution":{"observed_at":"2026-08-06T19:02:05.547636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.534104Z","title":"Patchguard++: Efficient provable attack detection against adversarial patches, 2021","venue":null,"work_id":"e6c71f52-85c9-4501-8aee-30b3a64eac0b","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.263014Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:eb5146137d8c5cde1bc2b98176afb11b8fd98986614caeee7c1689274e14cc84","observation_id":"c4161b82-f911-4591-858c-68264d2d69eb","resolution":{"observed_at":"2026-08-06T19:02:05.537589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.523764Z","title":"Densepure: Understanding diffusion models for adversarial robustness","venue":null,"work_id":"eb601a53-3061-49cd-8994-65a0d7306410","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.266074Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:3c53e116ec84c0100d4a78fae901e700f39cf663b16d4c1dd0147251aa4acf5a","observation_id":"0d965048-9686-4749-ae0e-093211d71678","resolution":{"observed_at":"2026-08-06T19:02:05.527593Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.513465Z","title":"Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch","venue":null,"work_id":"ae72443c-c96d-4555-b6ae-0ff97e9af025","year":2023},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.269082Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:5284fd5c67275abbbdb6016fb6ea134c088b7de98d4c36852500a0c089d6a4fc","observation_id":"b73a1066-a902-4348-b8a8-5a6b3a214a5b","resolution":{"observed_at":"2026-08-06T19:02:05.517128Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.503270Z","title":"Visualizing and un- derstanding convolutional networks","venue":null,"work_id":"c66200ad-5533-432c-b254-db2dd7c4ff82","year":2014},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.272766Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:0209833cc24d8ff323a2e9935c355ed0552e0e9426a7cce644e901bcf61cfe2d","observation_id":"b8fdc49d-a8f3-4563-bcd8-328ce302da6a","resolution":{"observed_at":"2026-08-06T19:02:05.506635Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.493233Z","title":"The unreasonable effectiveness of deep features as a perceptual metric","venue":null,"work_id":"5f8adf2a-06c9-4d6f-85b9-d52d86f7e520","year":2018},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.276338Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:34693be18960817dc0098d3e233505adc64175ea0a94b78b5e5f3f8a9eb71360","observation_id":"6030ad09-3b94-40b0-9ae4-94ed7e8499b5","resolution":{"observed_at":"2026-08-06T19:02:05.496718Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.482954Z","title":"The translucent patch: A physical and universal attack on object detectors","venue":null,"work_id":"09eb0324-e6c0-46dd-83b7-7e94af305535","year":2021},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.279629Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:1dc296214fa81fbadd5e0780e29d57ef5f0820dae60c5f457640c403df374d34","observation_id":"490bde89-7e2c-4dac-8695-16ca84298333","resolution":{"observed_at":"2026-08-06T19:02:05.486339Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.472750Z","title":"Toaster” class to include “Baseball","venue":null,"work_id":"3d1b05b9-9604-434e-b733-d0ca48415c52","year":2022},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.282996Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:c3211dcb44422a2d24adefc59c42a08495a75fda5094312e93ce664e0cf8dbb5","observation_id":"a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c","resolution":{"observed_at":"2026-08-06T19:02:05.476133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:02:05.462785Z","title":"A. J. Buckley","venue":null,"work_id":"04290188-ebb3-481c-9ab3-24f48a6f52b9","year":null},"citing_paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T19:02:05.286844Z"},"links":{"citing_paper":"/paper/2507.06856"},"observation_digest":"sha256:d5489b2df919d0f435f7c078315f87d3974dbf2fc98c5237a03338905a77f499","observation_id":"cab95ced-b4d6-471c-9424-016c09b08aae","resolution":{"observed_at":"2026-08-06T19:02:05.466187Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.06856","last_updated":"2025-07-09T13:58:40Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-06T18:50:11.828664Z","submitted_at":"2025-07-09T13:58:40Z","title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":10,"verified_exact":5,"verified_fuzzy":40},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856."}