{"as_of":"2026-08-18T16:04:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b78a1a19c7bc394297417cb573c8962b6504cd3f23d07f99454d82babc05a2bb","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-05T12:00:58.752989Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.02042/citation-record","integrity":"/paper/2509.02042/integrity","json":"/paper/2509.02042/citation-record.json","paper":"/paper/2509.02042"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.260818Z","title":"https://icons8.de/","venue":null,"work_id":"7c1ed207-5b8a-4bef-a3d7-0baa236b5196","year":null},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:55.788964Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:89a90ee895204e8e7f38a7a5f8e680a2aeb707acf645918a893c8620fdbbed51","observation_id":"31943bba-f793-4b06-9d1c-e4223d8aeb89","resolution":{"observed_at":"2026-08-05T12:01:03.264502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.248649Z","title":"https://cleantechnica.com/tesla-sales/","venue":null,"work_id":"414bf8d2-f8e2-40f0-a49e-28420fe94043","year":null},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:55.823012Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:9e0358650e984575bf7834c916e0adf4142e104643dc30fdc99b08d466335dd7","observation_id":"e91b4976-5b17-4937-b396-a5431ea5f0b3","resolution":{"observed_at":"2026-08-05T12:01:03.252998Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.237081Z","title":null,"venue":null,"work_id":"47b8237e-8f80-4983-9b06-7d4fb0fc6c7e","year":2014},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:55.839471Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:80551bd08c566dc6116e8dfc585aaa3ab8c2d534716855593dcb5b78368f5adf","observation_id":"1051725d-5f37-4106-b67e-3f65832f2a73","resolution":{"observed_at":"2026-08-05T12:01:03.240784Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.225428Z","title":null,"venue":null,"work_id":"7d4c6441-fa6a-430e-85d0-0b0c18fbf0a4","year":1976},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:55.886040Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:939bbeae4e6480c91970a3647cfc269dd7196147768f1da161fafa7bb860712d","observation_id":"6303e1a3-085f-4aa9-ba50-2975a640b546","resolution":{"observed_at":"2026-08-05T12:01:03.229020Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.213533Z","title":"Synthesizing robust adversarial examples","venue":null,"work_id":"3c7c056b-2ae9-4e0f-83aa-1cf4bd0b31d1","year":2018},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:55.930563Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:2ebe062aca64a42439c478311c2206706e884f7a27d1317a2c94687aab4e078c","observation_id":"42a2eb44-c7aa-40ec-a69b-3bdbf5a8bd8c","resolution":{"observed_at":"2026-08-05T12:01:03.217215Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.202007Z","title":"Bingle, Joseph Camilleri, Peter J","venue":null,"work_id":"073ea62f-a420-49e4-99eb-66b671cd34d0","year":2011},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.006088Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1fe21924e055dc5b4896f856fe14957aff538cef3b238390dde121c7f69fb1ee","observation_id":"48a056e9-bebc-4416-8111-028207541c3b","resolution":{"observed_at":"2026-08-05T12:01:03.205549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.190609Z","title":null,"venue":null,"work_id":"5b550e15-660d-46b8-adcd-68f6b15f9135","year":2017},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.026044Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1a0467d6d0ecdbb39b870707e4f6b114a8fd17f386286c9033426fa8b51dc7d5","observation_id":"a142ec57-861c-4621-95d0-59d1cb8cc05e","resolution":{"observed_at":"2026-08-05T12:01:03.194142Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.178627Z","title":null,"venue":null,"work_id":"eaeb3909-5743-42ad-b315-7e8b1a98999c","year":2020},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.068086Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:9efe4cb5d194352b8d81e26350c3cf26c08eddfb426014ff638916905d30b574","observation_id":"be40b7c9-16ee-490f-9d0e-e9fb2bfd0e01","resolution":{"observed_at":"2026-08-05T12:01:03.182461Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.166777Z","title":"The mapillary traffic sign dataset for detection and classification on a global scale","venue":null,"work_id":"323bac21-2639-4f95-82a5-c300da698627","year":2020},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.112527Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:3576d8bfe1140dabdbd40f347c4697d20741530fa52c5115953805ae5bbfe4ef","observation_id":"5e456281-c62a-4abc-a7bd-05b6370e91a7","resolution":{"observed_at":"2026-08-05T12:01:03.170422Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.154789Z","title":"Robust Physical-World Attacks on Deep Learning Visual Classification","venue":null,"work_id":"2a612616-9a19-41be-a3db-031ee21792ed","year":2018},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.127541Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:e4de0cab703b0f82daf587f70f11f6d9a6245829f4ab9b5d717074a94a0af3ad","observation_id":"465a970c-d48a-4190-a268-2acf7dcea059","resolution":{"observed_at":"2026-08-05T12:01:03.158817Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.143117Z","title":"Ultralytics YOLOv8","venue":null,"work_id":"7387081f-9cb6-426b-ac0e-032171c08049","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.175447Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:01dc02e4a10b5ac50c57dd28957942403e10b516cbaeb6d3e3bcda988ad681cf","observation_id":"33c23490-4b2e-408b-a4d0-c685fb2c2ebc","resolution":{"observed_at":"2026-08-05T12:01:03.146753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1610.00768","last_updated":"2018-06-27T21:06:06Z","snapshot_observed_at":"2026-08-14T21:36:55.675026Z","submitted_at":"2016-10-03T22:04:07Z","title":"Technical Report on the CleverHans v2.1.0 Adversarial Examples Library","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1610.00768","snapshot_observed_at":"2026-08-05T12:00:56.221420Z","title":"Goodfellow, Nicolas Papernot, and Patrick D","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.221420Z"},"links":{"cited_paper":"/paper/1610.00768","citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:2999933abccc981598ba39d200d93ab6470b5075d68af852fb3c6275dbe89d77","observation_id":"7ab2d08e-704e-47ed-be13-ce26c878396a","resolution":{"observed_at":"2026-08-05T12:00:56.221420Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.131152Z","title":"Goodfellow, Jonathon Shlens, and Christian Szegedy","venue":null,"work_id":"a59f4dab-f77d-4b34-bec1-aeebf165f48d","year":2015},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.303051Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:f338a1a017ef0d729ef922262839eb7d0d23a63d1bb27459ca4f764511cf75a0","observation_id":"9957cd9c-52f9-433f-a14a-ef831f3520af","resolution":{"observed_at":"2026-08-05T12:01:03.135078Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.119164Z","title":"VisionGuard: Secure and Robust Visual Perception of Autonomous Vehicles in Practice","venue":null,"work_id":"f3e6dc18-a444-4974-8674-8082460178cc","year":2024},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.342572Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:e5d064737fc357d4bd6c6480584e35e20bc9b4ce4e0d6b0417be1892090c880f","observation_id":"7c0710f8-20fa-4e6b-9a1f-6a58400ee823","resolution":{"observed_at":"2026-08-05T12:01:03.122920Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.107564Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"952eaefd-1402-4aa2-b0ac-2b445ad32c76","year":2016},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.373589Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:61514ccd0eef8d1156d0d28cc5c7d261ea2fc5617aa06c6b875640917e27b25d","observation_id":"cb356596-f1c2-4c0e-8787-0027ababdcc9","resolution":{"observed_at":"2026-08-05T12:01:03.111335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.095703Z","title":"Adver- sarial Laser Spot: Robust and Covert Physical-World Attack to DNNs","venue":null,"work_id":"409afd37-d1bd-4bb6-b80f-ee0b9950cb19","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.412141Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:a882d02dbf94c7461f01d84c45abec9614cbbfebd0cc0e2c2373964b30f4e45a","observation_id":"4702753f-5c21-43ec-871d-4ced8f94eb5b","resolution":{"observed_at":"2026-08-05T12:01:03.099413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.083679Z","title":"Poltergeist: Acoustic Adversarial Machine Learning against Cameras and Computer Vision","venue":null,"work_id":"fbabadbf-95e5-4c2b-8796-4279198ec46a","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.437878Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:9b9f296a5bcd4a945c8dfb6f9e48d22d2db3ff1a069cada25eb246386c61b102","observation_id":"0cc0bc7c-7f98-48b9-99e1-731d8c51a203","resolution":{"observed_at":"2026-08-05T12:01:03.087358Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.071397Z","title":"Kennedy and R","venue":null,"work_id":"c44d96bf-5bad-494d-aa1f-632a076f1a80","year":1942},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.481538Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1fd63c32632afa6565e7df53adeee6c212a94b7b788a94cfbb2c3e2d8656a1d7","observation_id":"759ea912-1ca1-4695-b528-4b7e17c79514","resolution":{"observed_at":"2026-08-05T12:01:03.075155Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.059164Z","title":"Berg, Wan-Yen Lo, Piotr Doll ´ar, and Ross Girshick","venue":null,"work_id":"a4550296-f4ae-446b-954e-320596811142","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.526813Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:e360bdbe6aa1f41b9df0288d53880f5009281e5064a1d4f6422b0ed2ef5bda82","observation_id":"0bb662c2-946a-4b34-9261-a11e4bfe7754","resolution":{"observed_at":"2026-08-05T12:01:03.063156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.047338Z","title":"Signal Injection Attacks against CCD Image Sensors","venue":null,"work_id":"66215ce9-598b-4ec6-b5b2-cbfbde8ad516","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.559084Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1b543cbdcd60328f7e7d7e5aee25484ba4e42b67213eb5cd7d573298740c7448","observation_id":"5bed3b88-c2b3-4cc9-82fc-c74481c8fa1b","resolution":{"observed_at":"2026-08-05T12:01:03.051079Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.035529Z","title":"Emergent visual sensors for autonomous vehicles","venue":null,"work_id":"7d90ad28-5d8c-4d32-935c-3bf8f334353a","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.596664Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:c3daac3d8cbec59c69bdda9cfea14cfbe6251c3934f400d3b3ce567781914188","observation_id":"d6d87cd2-7edc-4992-bff5-dfdd57e88ad4","resolution":{"observed_at":"2026-08-05T12:01:03.039377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.023314Z","title":"Light can be dangerous: Stealthy and effective physical-world adversarial attack by spot light","venue":null,"work_id":"a5013ad4-1d97-4a92-9780-4391f11e2465","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.661586Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:d79ed9d51df95174d2685cffcb1bd693f69bccc43b56295aaef070aa1a39c55f","observation_id":"e7f9bbe2-de9f-45f5-8b90-972f4cc8f184","resolution":{"observed_at":"2026-08-05T12:01:03.027207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:03.011741Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"c975ba48-b482-4657-8309-07ad77182c8e","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.704156Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:0749ba69abb0bb732e04d1f9152654c0fe3b035428a3db24b3feeb69d29219ef","observation_id":"149a6a48-5cad-4618-8f3d-c1d149b33e1f","resolution":{"observed_at":"2026-08-05T12:01:03.015467Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.999935Z","title":"A Convnet for the 2020s","venue":null,"work_id":"eda1f120-e6b8-479e-b0d6-49e9e11a57e4","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.750551Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:15649bb82507bc128800a467ee6418487dc71638f57eaa6ec3a7524a772a2bab","observation_id":"462927a1-6eda-43a8-8234-7243b00e8db6","resolution":{"observed_at":"2026-08-05T12:01:03.003673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.987539Z","title":"SLAP: Improving physical adversarial examples with Short-Lived adversarial perturbations","venue":null,"work_id":"77f99062-e8ef-4f82-b848-38c44e1b19a2","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.788792Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:5b78b6697a6ab07d06ed0415cde69514628b7378b8b1af9da7bb1c4e8b4b70cb","observation_id":"2502c006-9d4c-4bd6-8336-8f250bf651c8","resolution":{"observed_at":"2026-08-05T12:01:02.991233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.975644Z","title":"Day-Night imaging without Infrared Cutfilter removal based on metal-gradient perovskite single crystal photodetector","venue":null,"work_id":"9615ac52-a337-4799-b4ae-b265b38a0fc3","year":2024},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.825376Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:dd99b0ea1413c43fda23e4bc43140a055d67c132bb85359132406e979782f919","observation_id":"4702d61c-c9ca-4607-b3b2-156792e18c6f","resolution":{"observed_at":"2026-08-05T12:01:02.979341Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.963675Z","title":"Berkay Celik, and Ryan Gerdes","venue":null,"work_id":"076fedc3-db85-486c-880f-0cc6df26b4ff","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.834797Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:b398997efff3557d7830209495b0d8e786b65083a1a8859a05af7d693c655823","observation_id":"0d6b1cbe-669a-476e-a022-73d0cbea60c6","resolution":{"observed_at":"2026-08-05T12:01:02.967491Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.951382Z","title":"Image method of image sensor, imag- ing apparatus and electronic device","venue":null,"work_id":"45234723-3d84-405d-ba2e-9fd75ba1b217","year":2018},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.863188Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1ec034f6a0bab5e14ad94cdca8d21a68af01c460558a034edfb5e543177e5b6f","observation_id":"59c436ac-1b43-41ba-b8fc-69b643e5915f","resolution":{"observed_at":"2026-08-05T12:01:02.955647Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.939713Z","title":"Trivedi, and Thomas B","venue":null,"work_id":"4f4d3744-6faa-48bc-9fc2-c797e1f7e4d7","year":2012},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.918288Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:1103c33a668bdecf5ec090f4b253e955a082897af05cdd0b6f58d0138c7f4975","observation_id":"6277906f-6c6a-472c-b559-36ef1b90da19","resolution":{"observed_at":"2026-08-05T12:01:02.943277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.927624Z","title":"Phantom of the ADAS: Securing Advanced Driver- Assistance Systems from Split-Second Phantom Attacks","venue":null,"work_id":"57263cbb-72b0-430b-afdb-eab55f511824","year":2020},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.960213Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:be4b8b49946b12b20972493b32626f80bc8f2b176afc9f45cc2036978d4a0a58","observation_id":"0c82e90e-1fd6-4a48-9b87-14ac51cfdbbc","resolution":{"observed_at":"2026-08-05T12:01:02.931503Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.916186Z","title":"Arora, Yuhang Wu, and Hao Yang","venue":null,"work_id":"1b47f1b8-7c32-4771-a007-c6bb62cd865d","year":2020},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:56.973661Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:e61afb200e12abb4fad9e75edcedb74b4e01b7634ab6625914a19e64f96053cf","observation_id":"6c7a0965-f6db-4d67-b08d-2868e1703749","resolution":{"observed_at":"2026-08-05T12:01:02.919663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.904341Z","title":"Adversarial Imaging Pipelines","venue":null,"work_id":"be4b3c96-fb6b-4999-a25c-9071453d4765","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.006212Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:0c4d8c004a6553b412613c425ebe5347e9eaeaf83fa76d6918f9a4c2de5f0ec3","observation_id":"402412a0-ec6c-4f99-8dfa-25975d2befbf","resolution":{"observed_at":"2026-08-05T12:01:02.907911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.891710Z","title":"The convergence of the random search method in the extremal control of a many parameter system","venue":null,"work_id":"c2217df5-0852-478a-af4f-885f3eb6d71c","year":1963},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.048989Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:23441b51b7fc1fb81e851d0710ee1a26a1a6787417ed2f02f88112a5316cac3c","observation_id":"e30c250f-da45-4022-8f6c-4de897a8a990","resolution":{"observed_at":"2026-08-05T12:01:02.895549Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.879656Z","title":"Girshick, and Jian Sun","venue":null,"work_id":"280ea809-f169-40a5-8cba-8e0a95175320","year":2015},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.081790Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:38cab88cbfd0498ea663d6e6b4379d71d24badb9a396df815693e92d5fd5c790","observation_id":"3062dccd-ac0e-422d-870c-369dc0b2bcb0","resolution":{"observed_at":"2026-08-05T12:01:02.883279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.866661Z","title":"Invisible Reflections: Leveraging Infrared Laser Reflections to Target Traffic Sign Perception","venue":null,"work_id":"cdb952e7-7520-472b-b9ad-947daa931205","year":2024},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.109227Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:5b5b5779845e9e4221b1993e9fa18c3c73ff208536117326ed4a2f6013e58fe9","observation_id":"09d0ce5d-afdd-496e-a17f-8c94e5574315","resolution":{"observed_at":"2026-08-05T12:01:02.871404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.854296Z","title":"Invisible Perturbations: Physical Adversarial Examples Exploiting the Rolling Shutter Effect","venue":null,"work_id":"d1155eb8-ac09-44c6-b426-bb4aa4b078a9","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.152019Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:f568d5f4993eaa6ffc40e2ac7930166a9419afa80829c990ef243b963837bbc9","observation_id":"f02c8d4c-71ec-49a2-aaa6-157b6c24a961","resolution":{"observed_at":"2026-08-05T12:01:02.858261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.693297Z","title":null,"venue":null,"work_id":"b32b529a-5065-475c-85f0-f157ca0ef099","year":2016},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.216305Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:927ebf79d63f66ae0bd4516b2035bc93b53d8ac5d016c2d1557fcac0577f46b0","observation_id":"d4551d65-380a-461e-b19f-c66dbf359972","resolution":{"observed_at":"2026-08-05T12:01:02.840708Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2203.05314","last_updated":"2024-04-26T04:16:18Z","snapshot_observed_at":"2026-08-16T17:15:36.674995Z","submitted_at":"2022-03-10T12:00:34Z","title":"SoK: On the Semantic AI Security in Autonomous Driving","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2203.05314","snapshot_observed_at":"2026-08-05T12:00:57.277447Z","title":"SoK: On the semantic AI security in autonomous driving","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.277447Z"},"links":{"cited_paper":"/paper/2203.05314","citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:7db6543264e90091b7447087640f7dad4d6a3aa27d5c31ced5acc6529eba0433","observation_id":"2968a25b-0028-4fe4-9126-d9191e0d125b","resolution":{"observed_at":"2026-08-05T12:00:57.277447Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.418748Z","title":null,"venue":null,"work_id":"f481ca1e-a0ff-4fc1-8ea3-1d9cc9d4edef","year":2012},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.340723Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:3c9cb86716aead461e8de553b13022f02341dfe0e5624980c6380ea5be190629","observation_id":"62a6c6ae-f3cf-4cac-bca2-3ea5f9ea3c3c","resolution":{"observed_at":"2026-08-05T12:01:02.580613Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:02.216666Z","title":"Legitimate Adversarial Patches: Evading Human Eyes and Detection Models in the Physical World","venue":null,"work_id":"168c7b23-80dc-4d4f-bb75-71f6c10b0fac","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.418831Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:cd12f6fd1e614e66516850ac3aded86c66bc9d55eb67b5864a9bdb46aa5ee14b","observation_id":"66edecdc-230e-4a34-8f16-38c24c3be1db","resolution":{"observed_at":"2026-08-05T12:01:02.304966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:01.968124Z","title":"Fooling Automated Surveillance Cameras: Adversarial Patches to Attack Person Detection","venue":null,"work_id":"bd431073-e15e-4808-98d5-92c9d66765ea","year":2019},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.475929Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:2b3c5cc0ab94712859e411d70b2bcb9ed993c26abee4b975f2d56e7f51efad0e","observation_id":"e06e32a5-1c4e-4e53-b0e7-4326264513f4","resolution":{"observed_at":"2026-08-05T12:01:02.083475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:01.658407Z","title":"I Can See the Light: Attacks on Autonomous Vehicles Using Invisible Lights","venue":null,"work_id":"9243f35c-8ef8-4efe-83b9-3b5f508da908","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.534981Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:65c113c71a93aaba112e78afeb5fe55c3f1fc69d088ba850fc7b84904dbb8235","observation_id":"985cb40b-6daa-4d47-92c9-a774415e52e5","resolution":{"observed_at":"2026-08-05T12:01:01.836420Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:01.416532Z","title":"HOTCOLD block: Fooling thermal infrared detectors with a novel wearable design","venue":null,"work_id":"ee4b3fbc-47ce-4ea2-95c8-90df74ec374d","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.617830Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:e6d4e23ecd661c5ab64bfb7be786e44f1f61d2cd517052058d8d99699476cb83","observation_id":"8616e3d6-957b-441a-95c9-054b6b2d5573","resolution":{"observed_at":"2026-08-05T12:01:01.515766Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:01.157356Z","title":"Unified adversarial patch for cross-modal attacks in the physical world","venue":null,"work_id":"538c1860-efb4-4372-b2ca-f98e8ff594b0","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.681177Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:58efbf9a80d589803908f997e29e63aa2d4cf458a28581f2856b320f9882ee3c","observation_id":"b044f929-b484-4394-a93c-f50922950c80","resolution":{"observed_at":"2026-08-05T12:01:01.304367Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:00.935741Z","title":"Physically Adversarial Infrared Patches with Learnable Shapes and Locations","venue":null,"work_id":"3987d2e9-b998-4798-8946-01d900d0bc57","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.762047Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:21cf6b898f85698cc51a46410fe0f88fd4c656c020899ad2c1a43acb4b713281","observation_id":"8853a149-5ec0-4330-a222-061b9516c670","resolution":{"observed_at":"2026-08-05T12:01:01.028822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:00.724470Z","title":"PatchCleanser: Certifiably robust defense against adversarial patches for any image classifier","venue":null,"work_id":"37675ad9-d6cd-42bf-8613-993665953dda","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.878170Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:f0c5af0ab0cfe9eedbdb3e65e83fd45abab6d083f2a9195e1e4fd4633210359a","observation_id":"b1bcee65-09cb-4e08-b2de-b8914664adde","resolution":{"observed_at":"2026-08-05T12:01:00.839711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:00.454470Z","title":"Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networks","venue":null,"work_id":"275a361d-e2bc-43bb-afb8-e28fc9928f8f","year":2018},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:57.935506Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:9c541d09ef912d65444e8e1da5ae81667c4d86b50ff5563c46292ad90b7eec0c","observation_id":"f2c5b039-bbcf-4ff6-9d37-4504e625fe96","resolution":{"observed_at":"2026-08-05T12:01:00.576745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:00.288112Z","title":"PhyScout: Detecting Sensor Spoofing Attacks via Spatio- temporal Consistency","venue":null,"work_id":"2bca0784-dc05-4606-987c-c505d24901c0","year":2024},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.026221Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:2a7b5e6b61a4794d47640a317366f94b0da48aa29341556ddc3847e13adab828","observation_id":"c5eba27b-359e-4b02-9ea7-e3f71ae95bf5","resolution":{"observed_at":"2026-08-05T12:01:00.387064Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:01:00.096963Z","title":"GTSRB-CNN","venue":null,"work_id":"249c76de-2f89-4a66-89ae-440412b3d9d1","year":null},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.088286Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:8919c3171aab7b58fabf382251cf308d877ad433fcc80e252e0e1d5950499223","observation_id":"234242be-30fb-4946-bfa4-f0d304ae194f","resolution":{"observed_at":"2026-08-05T12:01:00.142143Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.902153Z","title":"Rolling colors: Adversarial laser exploits against traffic light recognition","venue":null,"work_id":"4d59d2bd-99b3-450e-a418-2c68bd06281a","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.169971Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:b7b3c9c0b4f5e6528ae94c7441de70121dbf52fe41eb9afa3ba178ce0724c010","observation_id":"ca0ade72-7481-4188-94e4-5a6acc1dcba0","resolution":{"observed_at":"2026-08-05T12:01:00.035861Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.738483Z","title":"PhySense: Defending Physically Realizable Attacks for Autonomous Systems via Consistency Reasoning","venue":null,"work_id":"568e34fd-f4d4-4e53-861b-0ed265fff03d","year":2024},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.259806Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:52aae19ccd8746488e237f9a8f33e4e2504fc437aa9a8f5118aa22216956bc2c","observation_id":"57dd6d3f-ff27-4b58-8b6e-40d11c8953bf","resolution":{"observed_at":"2026-08-05T12:00:59.809502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.554718Z","title":"CAPatch: Physical adversarial patch against image captioning systems","venue":null,"work_id":"d6284ea0-bd32-44c9-86a2-82fd98b7e746","year":2023},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.345680Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:2ac7f75d55e21932c352b55833a3d89e68034df73a2948d05bc58db3a6bc520f","observation_id":"354f89be-f55a-4d16-a4d2-51dc2005811a","resolution":{"observed_at":"2026-08-05T12:00:59.629578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.388464Z","title":"Shadows can be Dangerous: Stealthy and Effective Physical- world Adversarial Attack by Natural Phenomenon","venue":null,"work_id":"1fbdd392-ccb1-4848-9036-f925f1bb315a","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.439036Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:a089fc9fa5eed59c89f971ca1d020cec1b3033d4a45024b4be4c1d246715524c","observation_id":"40b02757-4dc6-4d11-aae1-cbfc0bca57bf","resolution":{"observed_at":"2026-08-05T12:00:59.467722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.247101Z","title":"DeepBillboard: Systematic physical-world testing of autonomous driving systems","venue":null,"work_id":"fac1baca-cd06-4860-8079-f6dc43ea70ae","year":2020},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.500176Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:bee293114edaa7206b19fd74d5e508dbd245f37cdb887a40c3d0b20c63bb05e1","observation_id":"43b605e4-6ee8-411c-ab8e-b3b6ff1fb0bd","resolution":{"observed_at":"2026-08-05T12:00:59.319292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.04683","last_updated":"2018-03-13T08:51:01Z","snapshot_observed_at":"2026-08-15T04:53:17.095622Z","submitted_at":"2018-03-13T08:51:01Z","title":"Invisible Mask: Practical Attacks on Face Recognition with Infrared","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.04683","snapshot_observed_at":"2026-08-05T12:00:58.579878Z","title":"Invisible mask: Practical attacks on face recognition with infrared","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.579878Z"},"links":{"cited_paper":"/paper/1803.04683","citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:52e16562bc37f15fb5cdf9281656975dc44702d1be4c267271e985ce467b54dd","observation_id":"ff4ca174-f786-4159-889e-cdb52b5b06a4","resolution":{"observed_at":"2026-08-05T12:00:58.579878Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:59.067946Z","title":"Infrared Invisible Clothing: Hiding from Infrared Detectors at Multiple Angles in Real World","venue":null,"work_id":"27317ccb-8e67-4a57-ac4a-ca856cba2642","year":2022},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.667563Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:920e03b7147f6b669b6ea8ef539809373752c1040349f626b6fe9ace36aeb8f8","observation_id":"4bf6726d-88c8-4d4c-8e08-6a8bdb361941","resolution":{"observed_at":"2026-08-05T12:00:59.155483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T12:00:58.909321Z","title":"Fooling thermal infrared pedestrian detectors in real world using small bulbs","venue":null,"work_id":"faf120a1-0c11-4872-b2e9-36a765f17e4a","year":2021},"citing_paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-05T12:00:58.752989Z"},"links":{"citing_paper":"/paper/2509.02042"},"observation_digest":"sha256:aa5d8d8155b6304201e448aeefe64bad826461f3e840d662103271bf3f7753ce","observation_id":"fa1739d4-5578-44c6-82c9-e2d9521f3b3a","resolution":{"observed_at":"2026-08-05T12:00:58.973580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2509.02042","last_updated":"2025-09-02T07:37:10Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T09:25:21.501880Z","submitted_at":"2025-09-02T07:37:10Z","title":"Targeted Physical Evasion Attacks in the Near-Infrared Domain"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":0,"verified_fuzzy":48},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2509.02042."}