{"as_of":"2026-08-07T17:38:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:8d4215ec1d40a0275b194c9e981aedf6d504d99707f7d2b7ad55ff5a0fbdba28","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T16:25:09.024202Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2507.14248/citation-record","integrity":"/paper/2507.14248/integrity","json":"/paper/2507.14248/citation-record.json","paper":"/paper/2507.14248"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.763288Z","title":"Advedge: Optimizing adversarial perturba- tions against interpretable deep learning","venue":null,"work_id":"abbafcd9-d4b6-46f3-a01d-4bd2fd398850","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:07.608256Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:f81f6b3b05dd711e04dedeca26a43667b57458cbfdf9dd6cb5a61c3ae87f9a82","observation_id":"6aedcbf2-12b3-4726-9e06-28b3d05f7305","resolution":{"observed_at":"2026-08-06T16:25:09.767939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.748723Z","title":"Singleadv: single-class target- specific attack against interpretable deep learning systems","venue":null,"work_id":"0c5745f7-7c7b-4a99-a476-8885a05dc14c","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:07.648853Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:40663364cc41c8aa92765e931f6facccb88b24107857998817e0b21f81fe4a1e","observation_id":"d66aa820-63ee-451f-9b4a-92f829c79d7e","resolution":{"observed_at":"2026-08-06T16:25:09.753230Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.732312Z","title":"Woo, Eric Chan-Tin, and Tamer Abuhmed","venue":null,"work_id":"f830dd13-5c2e-4971-913f-002d470baada","year":2024},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:07.780365Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:ed7809123a24919799ff5d992c3aa5862abc89ed1f52669d2ed28b496730809f","observation_id":"661aaef4-ed68-4bf5-80ed-b1df4a65bd9d","resolution":{"observed_at":"2026-08-06T16:25:09.737581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.715288Z","title":"Stealthy query-efficient opaque attack against interpretable deep learning","venue":null,"work_id":"681266dd-5879-4929-84f4-021901c93ce2","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:07.857703Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:e4dcff4cb562f4452a85f21f49dd30f95b73e59598b937ac2bcf6aa8201e689d","observation_id":"6669e35d-84a8-4088-923c-cbebf46500c5","resolution":{"observed_at":"2026-08-06T16:25:09.720625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.699219Z","title":"Characterizing the risk of fairwashing","venue":null,"work_id":"7c57f392-282b-4689-ad4b-3d3c146dcdc5","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:07.949380Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:739f19e51dfad594b6fcb7a45f6088a598575870a55eb726cfd84400fcfb280d","observation_id":"a9addeae-0b67-4a4f-9882-9501e0868ed7","resolution":{"observed_at":"2026-08-06T16:25:09.704636Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.683300Z","title":"Square attack: a query-efficient black-box adversarial attack via random search","venue":null,"work_id":"09a6804d-c8a4-44bb-b83f-0f75205afd78","year":2020},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.038216Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:d5fcef5a458c1268eae0dd3bb7d462594a558f2c61b6c2c755cdc10852d0057d","observation_id":"6c90bbef-7e59-440a-af95-e11f59fa683c","resolution":{"observed_at":"2026-08-06T16:25:09.687960Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.669053Z","title":"Explainable artificial intelligence (xai): Concepts, taxonomies, opportunities and challenges toward responsible ai","venue":null,"work_id":"02dbeb5a-0e97-4a55-b45f-eb3fea69a7a0","year":2020},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.080160Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:767f0febb37a168040488733c2040020af6886dd74ae9f48e32ef4b6eb107613","observation_id":"c860ae16-543e-40d6-8f42-a81df4cf2b63","resolution":{"observed_at":"2026-08-06T16:25:09.673617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.654326Z","title":"On pixel-wise explanations for non-linear classifier decisions by layer-wise relevance propagation","venue":null,"work_id":"14d1d517-3712-4547-8ef3-aa0e14353638","year":2015},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.148166Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:a92d15f97a9987f216070eac6010ed19f12bf1c6429bb008f9a73c209a074b02","observation_id":"1cb6ffc9-d4b1-4427-b3f1-3dea75378976","resolution":{"observed_at":"2026-08-06T16:25:09.659073Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.637726Z","title":"Evolutionary algorithms in theory and practice: evolu- tion strategies, evolutionary programming, genetic algorithms","venue":null,"work_id":"7af79f15-9a54-414f-8a20-e587b08e3d29","year":1996},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.260033Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:fe968d8beffffd16739250487e15bfb2e764bafbdfc18c45a318b420003e9c2e","observation_id":"e84159d9-2147-4bac-ada2-f74a202f08c1","resolution":{"observed_at":"2026-08-06T16:25:09.642335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.620334Z","title":"Manipulating shap via adversarial data perturbations (student abstract)","venue":null,"work_id":"fdefb283-f09f-42e0-9900-ce0e52f8964b","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.418599Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:44c9ad3103bb62f9d84a32cb6960c3f6abda7588c72ad4dfbc35dc225b0b408f","observation_id":"3d9e30e3-4383-42fa-894f-8435e41b5728","resolution":{"observed_at":"2026-08-06T16:25:09.626382Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.604493Z","title":"Understanding robustness of transformers for image classification","venue":null,"work_id":"5feefda7-ab11-415d-b64f-d93766956a61","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.591087Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:c27a298f5563e7533e1a97e062bce612684eb86a30ff082b06d6ae79c8c96e15","observation_id":"067c16d5-9cd4-4564-a1d9-e0c3b1f8ad15","resolution":{"observed_at":"2026-08-06T16:25:09.609470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.589253Z","title":"Transformer interpretability beyond attention visualization","venue":null,"work_id":"eb9c51e9-24c8-43d8-b5a9-71570a77fe63","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.695191Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:97f9d7732e0bef382137b125071f180a76c35833f2e848df9800b68a7fae5490","observation_id":"238990cd-b064-4fbf-8f22-b82c16c6fb62","resolution":{"observed_at":"2026-08-06T16:25:09.594018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.574499Z","title":"Poba-ga: Perturbation optimized black-box adversarial attacks via genetic algorithm","venue":null,"work_id":"9e5c64d4-66e9-43b9-858d-7099b4c3efba","year":2019},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.781524Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:d3883eec2476318a05a9cadce7239bbdfd398831d9c39da30e6e3084d573de92","observation_id":"735b63a9-9cb9-4ede-a5b9-5ce74a8d2d7f","resolution":{"observed_at":"2026-08-06T16:25:09.578729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.558535Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale","venue":null,"work_id":"f03f834d-a0da-4b06-bb1d-8f429ea44066","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.895355Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:c06d1585b15138f9af9b7afc73c3b2e8dd7af0527bb9e3f4d539c6bcdb77cf2d","observation_id":"174a26bb-ac95-484b-a020-15f8ba7c0bcd","resolution":{"observed_at":"2026-08-06T16:25:09.563491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.536032Z","title":"Interpretation of neural networks is fragile","venue":null,"work_id":"59e13a0e-ee50-4f3d-842c-e5334e17ac03","year":2019},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.900037Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:921cf4a88f2dcf52cabb7faeb6d50b7da68891370655cb150987eaa47ff68245","observation_id":"294333f6-04de-427a-b647-b6e0bca1da58","resolution":{"observed_at":"2026-08-06T16:25:09.542656Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.519340Z","title":"The microbial genetic algorithm","venue":null,"work_id":"f5840e7f-ac44-4d46-a7b0-384d62e69146","year":2009},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.904500Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:a4ca1522ec3b2c52234c9614d5f8862668c0da2dd16b62474350e47582e6b8fc","observation_id":"34f905c9-29e2-49cb-9003-bfc7788b9444","resolution":{"observed_at":"2026-08-06T16:25:09.524043Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.502281Z","title":"Fooling neural network interpretations via adversarial model manipulation","venue":null,"work_id":"f3144af3-4187-4e8e-a688-98bca9c4b22d","year":2019},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.908864Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:db969f8ae95d9d151f19a69c5d7866054ebe692d6dc32705ee3cb60a9ba33209","observation_id":"e65d3fcb-feed-4283-88f5-9546578d345c","resolution":{"observed_at":"2026-08-06T16:25:09.507760Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.481488Z","title":"Erosion attack: Harness- ing corruption to improve adversarial examples","venue":null,"work_id":"d0f8243f-bb9e-433f-b1cd-7a18cc480021","year":2023},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.913535Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:eb86f777cc2b232bd3cc2c9685a64cee6039323a3602864c053027707b1f67da","observation_id":"455cbfd3-ff9b-44a9-a1d2-36365ec4a346","resolution":{"observed_at":"2026-08-06T16:25:09.488511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2107.14795","last_updated":"2022-03-15T22:37:19Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2021-07-30T17:53:34Z","title":"Perceiver IO: A General Architecture for Structured Inputs & Outputs","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2107.14795","snapshot_observed_at":"2026-08-06T16:25:08.917998Z","title":"H ´enaff, Matthew M","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.917998Z"},"links":{"cited_paper":"/paper/2107.14795","citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:68050ea6fad9ed03877416e6ab518390b09984a152dbf6e5aa12cf68c4e8f07c","observation_id":"a29cbee4-7348-4d59-885f-b4c3ac26efd4","resolution":{"observed_at":"2026-08-06T16:25:08.917998Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.461912Z","title":"Tracking with saliency region transformer","venue":null,"work_id":"b06c6bfa-f736-49b9-b42d-4ee8f0084836","year":2024},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.923090Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:d36f5dc53663afeac432571a710899776aee316872afb85c6cf1fb966bfe76d6","observation_id":"c339e775-8939-4198-9271-a3bd58314b45","resolution":{"observed_at":"2026-08-06T16:25:09.467837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.435428Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"e48972bb-99d2-47c4-a76c-1016a0b4ced3","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.927063Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:90ddb5e2e9b4a270b87bfc60bf4d8a65d9d2db5ad7663055f214e0faec2b7a9e","observation_id":"acb09d20-4ad3-4b15-a2ba-0bf18b4f27e7","resolution":{"observed_at":"2026-08-06T16:25:09.440482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-06T16:25:08.931485Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.931485Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:fda457c6b649b83353a10ab74c3d25ff60d10d231c4ee4f8d495f5246f08f817","observation_id":"d33e15f5-1241-4360-909e-937c5f29ddc9","resolution":{"observed_at":"2026-08-06T16:25:08.931485Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.419903Z","title":"Explaining nonlinear classification decisions with deep taylor decomposition","venue":null,"work_id":"d0de1438-2ee7-4022-bd2b-f4f72c670a08","year":2017},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.936527Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:858d6cb5bc0ac6fc716a299f109ad75378837053fb2a3cbe001d15cf79c12bc6","observation_id":"6c191231-bc81-4326-920b-12821fdb2ca1","resolution":{"observed_at":"2026-08-06T16:25:09.424610Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.403310Z","title":"On improving adversarial transferability of vision transformers","venue":null,"work_id":"5c794f71-c744-43c2-bc25-375fa1d406c7","year":null},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.941327Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:3f27c51ca737495b7fcad3ba1b66ff0abe06ca6d4f3eaf655da35f936ef3379a","observation_id":"53799bf7-4b4c-4b00-9d59-08ad5faf915a","resolution":{"observed_at":"2026-08-06T16:25:09.408782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.385186Z","title":"Sok: Explainable machine learning in adversarial environments","venue":null,"work_id":"61457c4a-2780-425c-b3f6-f7b0fc91118e","year":2024},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.946380Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:c65dfe126d1ab249d941d8270ac00c65f5298a633c843c428868f96919fbe76e","observation_id":"e578f807-57cf-40e1-a64f-d9cba8221a27","resolution":{"observed_at":"2026-08-06T16:25:09.390609Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.367583Z","title":"Ia-red2: Interpretability-aware redundancy reduction for vision transformers","venue":null,"work_id":"3909d6ec-a5eb-4101-9bb8-e5af5e9d0b27","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.951128Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:64e077245977989630d8e2f7c5c408ba847da2f45a097856e50ebba6aab429be","observation_id":"5493ca6a-7ce4-4960-8222-62a0076a26af","resolution":{"observed_at":"2026-08-06T16:25:09.372761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15670","last_updated":"2022-11-02T18:57:19Z","snapshot_observed_at":"2026-07-06T10:54:28.918714Z","submitted_at":"2021-03-29T14:48:24Z","title":"On the Adversarial Robustness of Vision Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2103.15670","snapshot_observed_at":"2026-08-06T16:25:08.955428Z","title":"On the adversarial robustness of vision transformers","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.955428Z"},"links":{"cited_paper":"/paper/2103.15670","citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:3634d23193f4c6c0cd2a42b7578d327a1ddcc2452d71b46b167f1804d07709e0","observation_id":"f16a6eeb-e01e-48a4-a872-ff716ebe783e","resolution":{"observed_at":"2026-08-06T16:25:08.955428Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.351431Z","title":"Decision-based query efficient adversarial attack via adaptive boundary learning","venue":null,"work_id":"4b86a61b-d150-4531-ad66-a5df94b97fcc","year":2024},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.960807Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:e5f2e9e3b9687cd227f1324da53bd0c868d94e16c2b6f75480bda433ccf6145e","observation_id":"8f9c62cc-75ef-4dfc-87a6-c8ec198bcd1c","resolution":{"observed_at":"2026-08-06T16:25:09.356621Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.333230Z","title":"Poisoning attacks on algorithmic fairness","venue":null,"work_id":"6888c960-5fba-4af0-9ffa-98db4e5fb208","year":2020},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.965752Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:65e07b4e144fe8b25a2cceda60f057142ba1b07102255a293f7f43036bc8a9e7","observation_id":"6ef1b5b1-61cf-4587-b56a-47130fbbdf93","resolution":{"observed_at":"2026-08-06T16:25:09.339165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.316936Z","title":"On single-model transferable targeted attacks: A closer look at decision- level optimization","venue":null,"work_id":"a7858cfb-d1b3-4339-b606-21184543f6b2","year":2023},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.970322Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:69d0d1175238d94276e3f124cb1ff3d916b7ac62f5e84c73aecd0b43def7cc68","observation_id":"4b8d0dcc-5bd5-43ff-8275-f5fd0f979e93","resolution":{"observed_at":"2026-08-06T16:25:09.321729Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.300774Z","title":"Efficientnet: Rethinking model scaling for convolutional neural networks","venue":null,"work_id":"71b6c8e6-0783-428e-ba2a-ade67a25e4ca","year":2019},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.974769Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:bb6c9bec903bcb94937354498d58139099c3adfdfc2bc05842c2e5ec5ed59252","observation_id":"273d4f82-4b6b-4e51-bb8f-5d2dd48d4995","resolution":{"observed_at":"2026-08-06T16:25:09.305891Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.282427Z","title":"Training data-efficient image transformers & distillation through attention","venue":null,"work_id":"6bd5ea37-4e99-4cb4-8ac9-a484e3a81546","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.979013Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:cb95f9d5f68dea05e7eaed7a4d3dbfdfb1dda4af7285eab9519ca9fc2e268c13","observation_id":"30a588b2-bcce-4257-be14-444c4ad59877","resolution":{"observed_at":"2026-08-06T16:25:09.287515Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.266697Z","title":"Im- proving transferability of universal adversarial perturbation with feature disruption","venue":null,"work_id":"5dc015a2-dfa9-4dd6-bb56-4c86e64397d5","year":2024},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.983470Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:2050df383b2fd07edd2033530bb8b7bceb9ca6dde695e7bd8dee81e29a93ba96","observation_id":"54965bb5-4177-4627-a2b9-ea79e41ff24b","resolution":{"observed_at":"2026-08-06T16:25:09.271880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.251253Z","title":"Interpretability is a kind of safety: An interpreter-based ensemble for adversary defense","venue":null,"work_id":"abaedd2e-f556-480f-a169-720368a5485d","year":2020},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.987760Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:a2dcf622c1fe1aa56decf60d17a05b6a62687eba44e9a1f22c18ebfb14bb2873","observation_id":"37863029-2be6-4811-84e7-1bc7d5da5a17","resolution":{"observed_at":"2026-08-06T16:25:09.255905Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.234634Z","title":"Image quality assessment: from error visibility to structural similarity","venue":null,"work_id":"c7c6d790-4621-42da-8950-5d23cca5aa39","year":2004},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.992340Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:f5bf6cbc962cd1bdba3c8b7f64df928aa4977e12ee936f07e535524dadf6ec9a","observation_id":"c41a62a9-1e81-4686-a2b1-0cb4f70a57b4","resolution":{"observed_at":"2026-08-06T16:25:09.240312Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.217000Z","title":null,"venue":null,"work_id":"0c40ec4b-ed0f-4641-816d-a2ed56c23451","year":2023},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:08.997109Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:26debf8ea669a2633578c2618d9eb6a93baa20559aa2d1e6d822b1ab480fb91d","observation_id":"86cac68f-2372-4782-b6e9-db9d14471574","resolution":{"observed_at":"2026-08-06T16:25:09.222515Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.15203","last_updated":"2021-10-28T09:29:17Z","snapshot_observed_at":"2026-07-06T11:14:31.306862Z","submitted_at":"2021-05-31T17:59:51Z","title":"SegFormer: Simple and Efficient Design for Semantic Segmentation with Transformers","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.15203","snapshot_observed_at":"2026-08-06T16:25:09.001151Z","title":"Alvarez, and Ping Luo","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.001151Z"},"links":{"cited_paper":"/paper/2105.15203","citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:e72880163268f8a780dafa14838293e69297b4c76ea2e2056dd4039e72d94ca8","observation_id":"d02d0c4f-649d-41b1-87ca-eadde096c214","resolution":{"observed_at":"2026-08-06T16:25:09.001151Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.197727Z","title":"Tay, Jiashi Feng, and Shuicheng Yan","venue":null,"work_id":"785026e9-553d-416b-b13b-3fafcb6e130e","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.005967Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:ac700276b62a1406037c4451c766b66652ae722963d8039255ceb9c02346352b","observation_id":"5da7aead-15a6-426a-acce-e18ca1bc710e","resolution":{"observed_at":"2026-08-06T16:25:09.203346Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.180308Z","title":"Towards black-box adversarial attacks on interpretable deep learning systems","venue":null,"work_id":"a7ac0e07-e0e3-42c5-a4d2-f90f7417135f","year":2022},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.010043Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:29b37776acdabe48bfa16f147f7fe7922aa8d88669e0ca9b34a20162a06eb642","observation_id":"31392a79-5b7f-4c28-a1fa-da5d0a810edc","resolution":{"observed_at":"2026-08-06T16:25:09.185333Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.162586Z","title":"Data poisoning attacks against outcome interpretations of predictive models","venue":null,"work_id":"35a1900a-d4c6-49e9-8b05-4e85814edbac","year":2021},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.014583Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:26db5ee492dc30e68a816e878bb745725a0446edb951409095243b2d7464da45","observation_id":"ec52960b-6394-4ffd-8158-0cb1e4f9c45b","resolution":{"observed_at":"2026-08-06T16:25:09.167296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.146575Z","title":null,"venue":null,"work_id":"83bbe9b9-2bad-46e0-94eb-f526f61b24c0","year":2023},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.019430Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:423670161f49309963de1383454a0a6592b398c781f0abc97359b5886c50aced","observation_id":"075e283d-d795-4327-a10e-66dbde6d533b","resolution":{"observed_at":"2026-08-06T16:25:09.151671Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T16:25:09.127365Z","title":"Interpretable deep learning under fire","venue":null,"work_id":"a2a6951e-836c-4d08-bbbe-4e97b73368f9","year":2020},"citing_paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T16:25:09.024202Z"},"links":{"citing_paper":"/paper/2507.14248"},"observation_digest":"sha256:1d50e7397942057342bb07bfd29a36029618f952503f3f5e0e9ddd3f924b452f","observation_id":"38443bdb-c1e3-4a1b-829b-f5adeb5a3a87","resolution":{"observed_at":"2026-08-06T16:25:09.134431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.14248","last_updated":"2025-07-18T05:11:11Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T16:16:34.941358Z","submitted_at":"2025-07-18T05:11:11Z","title":"Breaking the Illusion of Security via Interpretation: Interpretable Vision Transformer Systems under Attack"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":6,"verified_exact":0,"verified_fuzzy":36},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2507.14248."}