{"as_of":"2026-07-11T12:32:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:949cb06a6b96890e72a8fd7dd94c6690105889470b8106659a0811b0830a5bc4","coverage":[{"denominator":62,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":62,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T12:53:11.185208Z","state":"measured"},{"denominator":62,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":62,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-07-11T06:31:22.384518+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"html":"/paper/2605.06357/citation-record","json":"/paper/2605.06357/citation-record.json","paper":"/paper/2605.06357"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"e8786baa-d7c9-4f81-abb8-91811b24bcee","year":2018},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:b7d8ffc68ee5c6cb69be6d9ede4b14cda6e8fc1044ee52564c31a79c6e61e9f7","observation_id":"d93ef302-e7c0-43bf-a7fd-091ee6dab8be","resolution":{"observed_at":"2026-05-26T12:57:22.754906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.07397","last_updated":"2018-06-07T16:25:12Z","snapshot_observed_at":"2026-07-06T05:52:21.844797Z","submitted_at":"2017-07-24T04:17:33Z","title":"Synthesizing Robust Adversarial Examples","version":3},"cited_work":{"arxiv_id":"1707.07397","doi":null,"metadata_source":"pith","pith_arxiv_id":"1707.07397","snapshot_observed_at":"2026-07-03T05:47:41.603083Z","title":"Synthesizing Robust Adversarial Examples","venue":"cs.CV","work_id":"c9de6511-5de4-41b5-9363-dfba7173af7a","year":2017},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1707.07397","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:9e635ead2cd8e911bc14ab14da203484f2b612ede4d45dc750367765b8fe3786","observation_id":"6f20da36-4325-440d-b908-c8dc390d7b58","resolution":{"observed_at":"2026-05-11T19:01:18.556734Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2207.08089","last_updated":"2022-07-17T06:50:48Z","snapshot_observed_at":"2026-07-06T13:32:08.499200Z","submitted_at":"2022-07-17T06:50:48Z","title":"Threat Model-Agnostic Adversarial Defense using Diffusion Models","version":1},"cited_work":{"arxiv_id":"2207.08089","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2207.08089","snapshot_observed_at":"2026-07-04T14:19:53.736092Z","title":"Threat model- agnostic adversarial defense using diffusion models","venue":null,"work_id":"4238b023-d051-4c13-a57c-c521c3c8c521","year":2022},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2207.08089","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:08b57df9768f016f45c298b08b19809cf17db94d250f0c470e6118064d4615fd","observation_id":"fc49bd2e-6d62-4d79-88cc-6d574c31f887","resolution":{"observed_at":"2026-05-11T19:01:18.274624Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1712.04248","last_updated":"2018-02-16T14:40:42Z","snapshot_observed_at":"2026-07-06T06:13:56.299732Z","submitted_at":"2017-12-12T11:36:26Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","version":2},"cited_work":{"arxiv_id":"1712.04248","doi":null,"metadata_source":"pith","pith_arxiv_id":"1712.04248","snapshot_observed_at":"2026-07-04T17:09:59.512657Z","title":"Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models","venue":"stat.ML","work_id":"4a48f935-ba2c-4308-a2b0-9f12dd7cb9e7","year":2017},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1712.04248","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:b48a56dbb1e2c8faf540bc3bcd911601d991b40017f0b53e22420d4f1528b21d","observation_id":"d6a3cbd0-44d3-44e7-9b2d-32b0038a392f","resolution":{"observed_at":"2026-05-11T19:01:18.329995Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A zeroth-order block coordi- nate descent algorithm for huge-scale black-box optimization","venue":null,"work_id":"5c078bf8-6294-4af1-a9e4-f62df240eef7","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:eefbd44e49251c6fc71e4de1ed4fb2d306c9647aeb417cc61700c07c26364e96","observation_id":"86045fb3-6704-4182-9617-b866f5ee1ca5","resolution":{"observed_at":"2026-05-26T12:57:22.761784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"51a63f2d-5601-4706-a006-a4426a22dbdc","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:e69231c3af0d98a85ed9f10a8f68994c4ac10c4dfaa5ec9f360af5a841c81c0a","observation_id":"be468451-d078-434b-afd9-88def1d4e5f9","resolution":{"observed_at":"2026-05-26T12:57:22.741966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1608.04644","last_updated":"2017-03-22T17:46:16Z","snapshot_observed_at":"2026-07-06T05:07:10.046451Z","submitted_at":"2016-08-16T15:59:35Z","title":"Towards Evaluating the Robustness of Neural Networks","version":2},"cited_work":{"arxiv_id":"1608.04644","doi":null,"metadata_source":"pith","pith_arxiv_id":"1608.04644","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards Evaluating the Robustness of Neural Networks","venue":"cs.CR","work_id":"d6f0e0e5-1198-4f03-8598-f2cb9e753de8","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1608.04644","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:fa0e0d31bc3f1647c3e28f5496372602319d29a2e0d10bb6612c385c624aed48","observation_id":"07cba9a8-01ee-4f9f-95e2-a2563837a415","resolution":{"observed_at":"2026-05-11T19:01:18.323639Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On evaluating adversarial robustness.IEEE Symposium on Security and Privacy","venue":null,"work_id":"d2df6e8c-7ad5-47e5-8d8d-302783c1a711","year":2019},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:59995493ba57388116029dd4a10b3ff3d74a29300c21bf33ca6bf5a929f0c458","observation_id":"164ae8f4-f79f-4acf-b210-1c106f818bab","resolution":{"observed_at":"2026-05-26T12:57:22.744673Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.15241","last_updated":"2024-05-21T11:07:58Z","snapshot_observed_at":"2026-07-06T15:32:35.999476Z","submitted_at":"2023-05-24T15:25:19Z","title":"Robust Classification via a Single Diffusion Model","version":2},"cited_work":{"arxiv_id":"2305.15241","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2305.15241","snapshot_observed_at":"2026-07-03T15:48:34.982964Z","title":"Robust classification via a single diffusion model","venue":null,"work_id":"b0f91cba-1051-4723-8c80-e4707f57e63c","year":2023},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2305.15241","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:64178dcec8dfb61f0e642825e2e6334dbb05769df5618607a402e96abfe50cac","observation_id":"1327a968-c3e8-494d-bd75-08fd24439c45","resolution":{"observed_at":"2026-05-11T19:01:18.290122Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2212.09058","last_updated":"2022-12-18T10:41:55Z","snapshot_observed_at":"2026-07-06T14:32:07.293340Z","submitted_at":"2022-12-18T10:41:55Z","title":"BEATs: Audio Pre-Training with Acoustic Tokenizers","version":1},"cited_work":{"arxiv_id":"2212.09058","doi":null,"metadata_source":"pith","pith_arxiv_id":"2212.09058","snapshot_observed_at":"2026-07-08T00:04:22.466366Z","title":"Wei-Lin Chiang, Zhuohan Li, Zi Lin, Ying Sheng, Zhanghao Wu, Hao Zhang, Lianmin Zheng, Siyuan Zhuang, Yonghao Zhuang, Joseph E Gonzalez, et al","venue":"eess.AS","work_id":"6fa1caca-8b5c-4837-97d3-f7a701a963d6","year":2022},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2212.09058","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:e387e4d5d1fc815a3696493cdfd7dda0a914f57029fe7918837bb0ecfe950753","observation_id":"5721e150-1e14-4978-a682-d84a42bec402","resolution":{"observed_at":"2026-05-11T19:01:18.489162Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1604.06174","last_updated":"2016-04-22T19:21:36Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-04-21T04:15:27Z","title":"Training Deep Nets with Sublinear Memory Cost","version":2},"cited_work":{"arxiv_id":"1604.06174","doi":"10.48550/arxiv.1604.06174","metadata_source":"pith","pith_arxiv_id":"1604.06174","snapshot_observed_at":"2026-07-11T01:57:49.960653Z","title":"Training Deep Nets with Sublinear Memory Cost","venue":"cs.LG","work_id":"f2c5c287-a500-40e4-a136-e7e3172db1d7","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1604.06174","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:97fb22545876871e4bd1fdc874a868ccc1b0cfba1c79dddf2782013c7a6af9fd","observation_id":"5c599b58-7dbd-4ce0-a93e-e8d82fccfd87","resolution":{"observed_at":"2026-05-12T03:44:07.405726Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-05-21T12:26:33.666045+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-21T12:26:33.666045+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Certified adversarial robustness via randomized smoothing","venue":null,"work_id":"988f52d1-0e44-461a-90e7-6ab19e8bdd93","year":2019},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:da97733e4e0e8090a0752460e64ad0560a287baef74a575b334cf0b49f209bab","observation_id":"3b01f36f-234f-4c73-bbd6-e7b63dbdc4d4","resolution":{"observed_at":"2026-05-26T12:57:22.747950Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"40ed34e9-4750-40b8-b1f1-45aa41ccadd1","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:dc9d47c9c7e198743a1098848ff9c0d966aefa924c8579b8910fe888b34e1ea9","observation_id":"2762746b-115a-4904-8571-07270aac39f3","resolution":{"observed_at":"2026-05-26T12:57:22.751193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mind the box: l1-apgd for sparse adversarial attacks on image classifiers","venue":null,"work_id":"f72917bb-44c1-4519-9a4e-7b572aee6e61","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:421520442ff993ebeac49616fc9b2875e50775d136efa43a061118065d3526d8","observation_id":"65415b5c-4b13-4f36-95bd-3067d5f4711d","resolution":{"observed_at":"2026-05-26T12:57:22.758171Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T06:36:03.268346Z","title":"Imagenet: A large- scale hierarchical image database","venue":null,"work_id":"6ee29c54-0013-4f3e-8bcb-5c870412e0cb","year":2009},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:aabbd0cb4dd6b3fa8fcd2e76d3cd2c6ff7377efcf2aea9f213f2d234a1c8dba3","observation_id":"991685d5-dd73-48c6-82ef-84187da9a7e0","resolution":{"observed_at":"2026-05-26T12:57:22.783020Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":"2010.11929","doi":"10.1175/jcli-d-22-0357.1","metadata_source":"pith","pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","venue":"cs.CV","work_id":"e96730e3-129b-4db6-b981-15ab7932e297","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:fc3df0f0645c4903b51a728640d56db92103707d362fc965b637bd9b85469702","observation_id":"099cd3e6-5228-4fee-8960-11518f882b75","resolution":{"observed_at":"2026-05-11T19:01:18.501347Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Implicit generation and modeling with energy based models","venue":null,"work_id":"9c1ac94f-f906-4952-b75d-5b610e9cbc1f","year":2019},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:6090dbc4f9216a500738f0cf0b72a16052aede7a5fecc4395781dd362a819d50","observation_id":"5325b98a-f94d-4cca-903a-90f90dbeeec2","resolution":{"observed_at":"2026-05-26T12:57:22.858374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1707.08945","last_updated":"2018-04-10T16:22:47Z","snapshot_observed_at":"2026-07-06T05:53:01.519154Z","submitted_at":"2017-07-27T17:37:22Z","title":"Robust Physical-World Attacks on Deep Learning Models","version":5},"cited_work":{"arxiv_id":"1707.08945","doi":"10.48550/arxiv.1707.08945","metadata_source":"pith","pith_arxiv_id":"1707.08945","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Robust Physical-World Attacks on Deep Learning Models","venue":"cs.CR","work_id":"35af1ad0-c1cc-4087-886e-d31fdbac5225","year":2017},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1707.08945","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:7a192017e433656e4480dfbc98082a767333aa296052aa6cec7082a990afd6a4","observation_id":"966ccf2b-c2a8-454e-8f2e-22f416dac98c","resolution":{"observed_at":"2026-05-11T19:01:18.266806Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"AST: Audio spectrogram transformer.Inter- speech","venue":null,"work_id":"ba86a88d-d2d7-4c72-aa88-0171c0daa38c","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:a51bc01b7bda2901a7278fa0d9ed79261ef4da8c75d998819b14c7e264ec9866","observation_id":"8673088f-9b48-4fff-a423-b1b954a2ee01","resolution":{"observed_at":"2026-05-26T12:57:22.854944Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Generative adversarial nets","venue":null,"work_id":"718c1325-64f9-400e-b396-544290d403ac","year":2014},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:5237e4dace54b579d2ed8b76ddfe68224f82e9551879014ec6d240f1b9a39c1f","observation_id":"a3632412-7bd2-479d-82c6-7c6d0b32dc35","resolution":{"observed_at":"2026-05-26T12:57:22.861761Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Explaining and harnessing ad- versarial examples.Proceedings of the 33rd International Conference on Machine Learning","venue":null,"work_id":"19cf6d62-3833-4bba-99fa-fcced5c73120","year":2014},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:da1903d789c01b6620ac5d1e112c44eb4671922cc3a2b2b160b4a653e2667bb3","observation_id":"e0f59019-d991-4172-9acc-2c70d6f0e3ae","resolution":{"observed_at":"2026-05-26T12:57:22.865539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Your classifier is secretly an energy based model and you should treat it like one","venue":null,"work_id":"c15c17fe-7156-4870-9d74-0c7f69b4ec33","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:8f9ad0c8c3ed9c261f08bb8e08f047e99fbe623532de7a250f610f20428338af","observation_id":"1ad59a31-b305-44b9-a4dc-98f1b6c2820f","resolution":{"observed_at":"2026-05-26T12:57:22.837293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-11T03:47:55.367441Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"9a00f23b-71b4-4f99-a115-0d30a296f178","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:e232d002e0043b66d6c8a31bf2bb182a2dc185c428179112e6db91a4db529061","observation_id":"cfce7e43-ea6c-45cc-a23f-42d2c6fcb16f","resolution":{"observed_at":"2026-05-26T12:57:22.851629Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Stochastic security: Adversarial defense using long-run dynamics of energy-based models","venue":null,"work_id":"346a3b5f-c18d-4380-8739-1b3bbf1b24b0","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:9e82b24c407359bb14718798adf4508e10dda062468fbfd46b385a1cc87490c0","observation_id":"d264ed76-a475-4714-bc2c-9ceed8c46438","resolution":{"observed_at":"2026-05-26T12:57:22.822985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T11:07:02.779137Z","title":"Denoising diffusion probabilistic models","venue":null,"work_id":"1b680941-4e21-4ca7-a2b4-c83e6389d614","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:0b1e276e0b4646eb6fd10becefcb4616fc324cab5df4d265bb2869a95b102ea2","observation_id":"dbf44743-8139-48b6-acc3-c6e7139dfc60","resolution":{"observed_at":"2026-05-26T12:57:22.826712Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffattack: Evasion attacks against diffusion-based adversarial purification.Advances in Neural Information Processing Systems, 36","venue":null,"work_id":"69709387-40f6-4d3f-8a77-67cf18873f03","year":2024},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:f0c9e3bcbcc8ec2ae10b5475a92841b811adc53fedb26d4392e4f1e553be9616","observation_id":"0c312c01-c51c-4c5f-a5eb-5b7f587b8d43","resolution":{"observed_at":"2026-05-26T12:57:22.810792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2411.16598","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Diffbreak: Is diffusion-based purification robust?","venue":null,"work_id":"e4cfd698-5040-42ba-8aff-e2d9518f8271","year":2024},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:931b52af48fba26c34dcd88c8106f2ed8d8f8192f98a9ae50c7eb7966eb2e362","observation_id":"edb677e7-9773-45e1-be83-b5b8c0970e2f","resolution":{"observed_at":"2026-05-11T19:01:18.311455Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Curvature-aware derivative-free optimization.Journal of Scientific Computing, 103(43):1–28","venue":null,"work_id":"2982edd0-1bc9-4be0-a1f0-777bcabb5bd2","year":2025},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:b5edfe1aa5500a2518cf326428ab985c154a5c4c489b21b39f8bcc49f275a29b","observation_id":"ee2b693d-0c51-464e-8bf2-9c4f96eac64c","resolution":{"observed_at":"2026-05-26T12:57:22.814273Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Springer","venue":null,"work_id":"16a608aa-3709-4034-8dbf-0700f6587ee0","year":1992},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:2659b2800857cc2a229ef72d5047c0dba0a88141f5ea41a32cf324ebc5689b19","observation_id":"d72902cc-ff5d-4ee5-a799-8181d680f948","resolution":{"observed_at":"2026-05-26T12:57:22.819052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.7717/peerjcs.633/fig-5","metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T11:47:03.723149Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"3807822d-12bd-4f6f-89ab-c3132c0cbfff","year":2009},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:9f2eebd750776ddb4e30ecb924071d95be7b81907b083d1797aa4cb7ef66d3f9","observation_id":"74c1b6e6-988c-4c58-8005-7f1d965ed65c","resolution":{"observed_at":"2026-05-26T12:57:22.832534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Imagenet classification with deep convolutional neural networks","venue":null,"work_id":"bb1531c1-e5c2-4dbf-a62d-2e29e0abb772","year":2012},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:4947ac045b6d5bd9a13310067c154f6cf1ed8e8320def837ddf30e17641400ac","observation_id":"b4c29865-6851-496c-8fef-f41290fd8376","resolution":{"observed_at":"2026-05-26T12:57:22.846120Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.09051","last_updated":"2023-12-03T19:26:11Z","snapshot_observed_at":"2026-07-06T15:04:03.662436Z","submitted_at":"2023-03-16T02:47:59Z","title":"Robust Evaluation of Diffusion-Based Adversarial Purification","version":3},"cited_work":{"arxiv_id":"2303.09051","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2303.09051","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust evaluation of diffusion-based adversarial purification","venue":null,"work_id":"8929bcf4-73f5-490d-9b57-4764b48f86e6","year":2023},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2303.09051","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:5be45f097770e2f91c0c5c110e82313f05ff828571f374720f91c592e5ede6d9","observation_id":"ec0452d1-4462-4316-a02d-fde0f23c1171","resolution":{"observed_at":"2026-05-11T19:01:18.533580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2408.00315","last_updated":"2025-03-19T05:26:47Z","snapshot_observed_at":"2026-07-06T18:55:24.393147Z","submitted_at":"2024-08-01T06:26:05Z","title":"ADBM: Adversarial diffusion bridge model for reliable adversarial purification","version":4},"cited_work":{"arxiv_id":"2408.00315","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2408.00315","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adbm: Adversarial diffusion bridge model for reliable adversarial purification","venue":null,"work_id":"ab2f3a52-9a3b-4b6d-886d-51d15025aa4c","year":2024},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2408.00315","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:432a8dc68a958e80b07ec078fe815b484e9cf2303ca7f58d1dc20f67945b9000","observation_id":"3e4b8f61-be6d-410d-a810-134d03d94305","resolution":{"observed_at":"2026-05-11T19:01:18.571019Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Scalable gradients and variational inference for stochastic differential equations","venue":null,"work_id":"39cfe013-e626-45ff-ba57-317eac4d201a","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:f1e4d0b6e347b8695a5a347633326275349a1770817276c424ed115d8deb09c8","observation_id":"165b1282-4da8-4aa8-b04d-fb2687c604c9","resolution":{"observed_at":"2026-05-26T12:57:22.799546Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.14309","last_updated":"2025-04-05T02:30:06Z","snapshot_observed_at":"2026-07-06T18:03:51.687441Z","submitted_at":"2024-04-22T16:10:38Z","title":"Towards Understanding the Robustness of Diffusion-Based Purification: A Stochastic Perspective","version":3},"cited_work":{"arxiv_id":"2404.14309","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.14309","snapshot_observed_at":"2026-07-03T20:18:55.612495Z","title":"Towards understanding the robustness of diffusion-based purification: A stochastic perspective","venue":null,"work_id":"07036398-82b5-47f1-b85b-f5fbf328d1db","year":2024},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2404.14309","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:bae81a5953ff4efc1d3e8a15eac98c5492cb828762a55abf077e28e592407a9f","observation_id":"83229549-ea71-436c-a867-d3bbd7edbfe9","resolution":{"observed_at":"2026-05-11T19:01:18.356136Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T04:05:56.361110Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":"202f1d62-46c4-478b-bad8-70c9db9fbf32","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:1340b5de9b733788337e800e5eeda7888eae691373fa623dcae9d73c927ccf55","observation_id":"8473bd96-bc33-47cb-bad5-4e7421922488","resolution":{"observed_at":"2026-05-26T12:57:22.803260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T15:47:23.562675Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"9d3ee6b8-fcd8-4800-b042-16d7f39f96bc","year":2018},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:5714e05470c2b56a019f1858b3a41d8653a4811117030905f58783725451fdf1","observation_id":"652723ae-7283-40aa-8142-038220c6e6c7","resolution":{"observed_at":"2026-05-26T12:57:22.796028Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-07-06T13:10:13.191724Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":"2205.07460","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-07-02T22:27:25.965269Z","title":"Diffusion models for adversarial purifi- cation.arXiv preprint arXiv:2205.07460","venue":null,"work_id":"4ea851d8-0e2f-4c1e-a45a-ec7fbacc5113","year":2022},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:9a0095d77074422d56c4daf0fa759b78655541a0a64396697fc89c184647fb6b","observation_id":"63804e53-6d6d-4731-a8a6-1cbdba489607","resolution":{"observed_at":"2026-05-11T19:01:18.466349Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":"2303.08774","doi":"10.1002/tea.20265","metadata_source":"pith","pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"GPT-4 Technical Report","venue":"cs.CL","work_id":"b928e041-6991-4c08-8c81-0359e4097c7b","year":2023},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:cfa5e23a7fa1bc96f32caa2e07d8f52fe43b00fe08fcf02b99cc5cb10da86b7c","observation_id":"6d32a8dd-647e-417f-97c1-faf38ec92279","resolution":{"observed_at":"2026-05-11T19:01:18.592580Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1602.02697","last_updated":"2017-03-19T14:50:18Z","snapshot_observed_at":"2026-07-06T04:45:29.624765Z","submitted_at":"2016-02-08T19:12:25Z","title":"Practical Black-Box Attacks against Machine Learning","version":4},"cited_work":{"arxiv_id":"1602.02697","doi":"10.48550/arxiv.1602.02697","metadata_source":"pith","pith_arxiv_id":"1602.02697","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Practical Black-Box Attacks against Machine Learning","venue":"cs.CR","work_id":"1b05d282-aaaa-4fe0-929a-fc84136dacda","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1602.02697","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:5c8d76b0f0eda1375925132ae8e1ea5a86ef0c43c18bdbb954516a96167db433","observation_id":"92a848fe-7af2-40f5-a1fb-355edfb4a245","resolution":{"observed_at":"2026-05-11T19:01:18.580785Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.06605","last_updated":"2018-05-18T00:20:52Z","snapshot_observed_at":"2026-07-06T06:39:38.420540Z","submitted_at":"2018-05-17T05:38:55Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","version":2},"cited_work":{"arxiv_id":"1805.06605","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.06605","snapshot_observed_at":"2026-07-09T12:56:14.818342Z","title":"Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Models","venue":"cs.CV","work_id":"3a388840-f6da-42b0-9587-1b76e05d547d","year":2018},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1805.06605","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:78268c0cb2d3ff8d8935f29d8956da842764bff46fb49623f47bea76a974ebda","observation_id":"b9979b5e-520b-4c53-a8e9-65db3382c6b7","resolution":{"observed_at":"2026-05-11T19:01:18.343054Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02502","last_updated":"2022-10-05T20:19:21Z","snapshot_observed_at":"2026-07-06T10:01:50.133383Z","submitted_at":"2020-10-06T06:15:51Z","title":"Denoising Diffusion Implicit Models","version":4},"cited_work":{"arxiv_id":"2010.02502","doi":"10.48550/arxiv.2010.02502","metadata_source":"pith","pith_arxiv_id":"2010.02502","snapshot_observed_at":"2026-07-11T02:47:49.167563Z","title":"Denoising Diffusion Implicit Models","venue":"cs.LG","work_id":"8fa2128b-d18c-405c-ac92-0e669cf89ac0","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2010.02502","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:985c72ef70c5c8fc245a869907cb5304eac3530bdc3cc3411fd2f6b964ff4318","observation_id":"a6b03e9b-8f4e-4302-8451-ef68ea6bd1c4","resolution":{"observed_at":"2026-05-11T19:01:18.449027Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sliced score matching: A scalable approach to density and score estimation","venue":null,"work_id":"a73e0f90-b697-4417-a0cd-98593191c4a5","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:ffd5eab4353ca07e6e7b8afa1e82f424e6d9c29d1b0c707eb7e78d4854ffbdb0","observation_id":"48f9137b-236c-4fc8-98ed-79a43a0b2f35","resolution":{"observed_at":"2026-05-26T12:57:22.806966Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2011.13456","last_updated":"2021-02-10T18:17:04Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-11-26T19:39:10Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","version":2},"cited_work":{"arxiv_id":"2011.13456","doi":"10.1088/1748-9326/aae98d","metadata_source":"pith","pith_arxiv_id":"2011.13456","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"Score-Based Generative Modeling through Stochastic Differential Equations","venue":"cs.LG","work_id":"d9110e53-a5d4-4794-a4c5-a575e91c31ad","year":2020},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2011.13456","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:6ce6d0f4dc8ef3a7f0f754f44a1e47925f090b811b60a48b1930b941cae49e0a","observation_id":"611705e5-a03b-4df9-a9c6-4ae25d626e14","resolution":{"observed_at":"2026-05-11T19:01:18.543339Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-06-01T22:58:00.812405+00:00","source":"crossref_status_cache"},{"observed_at":"2026-06-01T22:58:00.812405+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"One pixel attack for fooling deep neural networks.IEEE Transactions on Evolutionary Computation, 23(5):828–841, October","venue":null,"work_id":"aae5c126-19d3-492f-b53f-d09e20d3534c","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:7f76181b081989ad9c72a89e42249b895612099eda84a5d3c58f74be52b35f95","observation_id":"d90a146a-0e7e-4d2b-8d16-96e866deee96","resolution":{"observed_at":"2026-05-26T12:57:22.842165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/tevc.2019.2890858","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T12:15:00.875560Z","title":"doi: 10.1109/tevc.2019.2890858","venue":null,"work_id":"1a361758-9e68-4eb1-a053-58371c1363b2","year":1941},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:4f120c300c1adf30259e96962f86a1fbe91365bcbce6dccbeb6fe235ef452de6","observation_id":"e8cec621-e5e9-48e5-98cd-39e9cf79bff7","resolution":{"observed_at":"2026-05-08T21:34:14.409219Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":"1312.6199","doi":"10.48550/arxiv.1312.6199","metadata_source":"pith","pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-07-10T19:57:34.021284Z","title":"Intriguing properties of neural networks","venue":"cs.CV","work_id":"7bcd9f41-780c-4b4b-9a08-830d4177cdd8","year":2013},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:b2132321a99094a9097af724fdc7073376f8816c67661cc45862aacaf10b1992","observation_id":"d478a849-5c41-4dac-bdfd-043d707cba85","resolution":{"observed_at":"2026-05-11T21:55:15.262808Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2302.13971","last_updated":"2023-02-27T17:11:15Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2023-02-27T17:11:15Z","title":"LLaMA: Open and Efficient Foundation Language Models","version":1},"cited_work":{"arxiv_id":"2302.13971","doi":"10.48550/arxiv.2302.13971","metadata_source":"pith","pith_arxiv_id":"2302.13971","snapshot_observed_at":"2026-07-11T03:47:48.508181Z","title":"LLaMA: Open and Efficient Foundation Language Models","venue":"cs.CL","work_id":"c018fc23-6f3f-4035-9d02-28a2173b2b9d","year":2023},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2302.13971","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:722ea25c54e9911d6e2ea7418bb5d01a220b70be8e6071adbb898178314ac762","observation_id":"0f3f4627-fdbf-4627-8a1f-4074f1ccfcc1","resolution":{"observed_at":"2026-05-11T19:01:18.403165Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-05-22T13:22:41.000069+00:00","source":"crossref_status_cache"},{"observed_at":"2026-05-22T13:22:41.000069+00:00","source":"openalex_status_cache"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Attention is all you need","venue":null,"work_id":"4feac375-1d6c-4fd7-8699-a3307ab558e5","year":2017},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:3a6e427e28ac7232ac8aadd2393240feda073f31775edf2835a41cdbebf7aecc","observation_id":"0b8d2e92-5637-4ad7-a366-1435454e419e","resolution":{"observed_at":"2026-05-26T12:57:22.789047Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T16:56:21.891812Z","title":"A connection between score matching and denoising autoencoders.Neural computation, 23(7):1661–1674","venue":null,"work_id":"4916a397-3618-4c3f-932f-e99d927d0add","year":2011},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:c0928df5cb5397c643bf9248e7dc0b4412ed7d509db1a9f033fea618b39a12b8","observation_id":"582f0d66-a209-480c-ac3b-f61c6b041c55","resolution":{"observed_at":"2026-05-26T12:57:22.792622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A theory of generative convnet","venue":null,"work_id":"b19fb23f-a3ce-4b9b-b9d2-450b61fd91b0","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:3693626865374ecdaf55ed00de37386c1e7cb9bb3893cfa108cefcfb72d25b07","observation_id":"24fc61d9-e97c-42ae-ab3b-9744d3e4a89e","resolution":{"observed_at":"2026-05-26T12:57:22.873665Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.06041","last_updated":"2021-06-11T04:35:36Z","snapshot_observed_at":"2026-07-06T11:18:09.557612Z","submitted_at":"2021-06-11T04:35:36Z","title":"Adversarial purification with Score-based generative models","version":1},"cited_work":{"arxiv_id":"2106.06041","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2106.06041","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial purification with score-based generative models","venue":null,"work_id":"6d1ba87f-d367-4a2f-9425-cdabbb1c9402","year":2021},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/2106.06041","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:03a3af4e92d6479c3eb3543d1cf1f9b439d622c1dd509f81cc92726362487b09","observation_id":"8369067b-9f2d-4fb9-a8dd-883db1600e94","resolution":{"observed_at":"2026-05-11T19:01:18.417150Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07146","last_updated":"2017-06-14T06:06:48Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2016-05-23T19:27:13Z","title":"Wide Residual Networks","version":4},"cited_work":{"arxiv_id":"1605.07146","doi":null,"metadata_source":"pith","pith_arxiv_id":"1605.07146","snapshot_observed_at":"2026-07-10T12:07:03.509352Z","title":"Wide Residual Networks","venue":"cs.CV","work_id":"1b918c80-6bca-4d06-8019-569626fb1cf2","year":2016},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1605.07146","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:df7af58893aea75a29949d1eeeee25c8c27414f7ba8469b84f8125bb53912227","observation_id":"6dd37624-2d41-4b82-97a2-7d4b466e1419","resolution":{"observed_at":"2026-05-13T01:25:01.652283Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Visualizing and understanding convolutional networks","venue":null,"work_id":"326bc892-89d9-423b-8b4d-ff6bfe1c89b0","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:f91c7f06c7f4c6ca3723af7c14b90651139ac7167da498ce7d1dd3da97cdc90f","observation_id":"a2f52c58-2d77-48be-9062-febdc2e3eb12","resolution":{"observed_at":"2026-05-26T12:57:22.779933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1311.2901","last_updated":"2013-11-28T23:04:01Z","snapshot_observed_at":"2026-07-06T03:27:59.630070Z","submitted_at":"2013-11-12T20:02:22Z","title":"Visualizing and Understanding Convolutional Networks","version":3},"cited_work":{"arxiv_id":"1311.2901","doi":"10.48550/arxiv.1311.2901","metadata_source":"pith","pith_arxiv_id":"1311.2901","snapshot_observed_at":"2026-07-10T06:15:00.866473Z","title":"Visualizing and Understanding Convolutional Networks","venue":"cs.CV","work_id":"2af3d77f-49d1-4bf9-ac8b-c9e9762b4b26","year":2013},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"cited_paper":"/paper/1311.2901","citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:6dea28cfa5bc583c22cca376f1d17e6e47fe6d39cfccc46328dbcc3fb9d634ec","observation_id":"b1d2a907-aa29-495d-96fb-6293bdb44fac","resolution":{"observed_at":"2026-05-11T19:01:18.298341Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"detach () 1# ME fr am wo rk Code : Full g ra die nt computation , input : CE loss 2n e t _ g r a d s = torch","venue":null,"work_id":"12f8a235-df77-4509-aeda-720893d1b243","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:663250fa6a2266290f580c8ab3a045d93402102f9f5a2d95199fac55f8edb648","observation_id":"2ab4dc1c-8da7-48f2-8f29-2badac4f3637","resolution":{"observed_at":"2026-05-26T12:57:22.776274Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"to ( device ) 7next_t = next_ts [n -i -1]","venue":null,"work_id":"300d7d71-1e2e-4421-a9b7-f056c424f50a","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:99ead18f501aeabe5fdd19b7109cf78fc86245b4a3c64c04432f8af790f90d6b","observation_id":"e9d305dd-0fd4-4b3c-82a8-6668ec0cbec6","resolution":{"observed_at":"2026-05-26T12:57:22.785965Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"to ( device ) 14prev_t , prev_y = curr_t , curr_y 15next_layer , c u r r _ e x t r a = self","venue":null,"work_id":"f72d7b8a-aefb-43f4-89a5-5b31c47e67bf","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:fd92afe4ef1eee76516b879ff1cd1e38348cddce1c006c63df6c90774eef6566","observation_id":"7524b45c-4bc8-401d-9081-67bc738bc77b","resolution":{"observed_at":"2026-05-26T12:57:22.772907Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"view ( 29X _ r e p e a t _ p u r i f i e d","venue":null,"work_id":"2d169ad8-9886-45f9-9dc4-7fc83c5b543b","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:6ceef5f823cc87724ac513ce407533304d05aef3f532fdfc0324b683a611d31c","observation_id":"0e1a73a5-36f7-485a-9208-083b9b4d584f","resolution":{"observed_at":"2026-05-26T12:57:22.770308Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"detach () 1# MEFA F r a m e w o r k Code : Full gr ad ie nt computation , input : n e t _ g r a d s 2net_out = x _ d i f f _ l i s t [ n - k - 1] 3net_out = torch","venue":null,"work_id":"abbcc1c1-c89f-4e11-9f32-7f239ff1bc0b","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:68c89caf0ca1cbb2e93c8855c14bc17d7a2c1136e605a1fba9a95421db57267a","observation_id":"f376b2b2-f813-4bae-ad23-444e014196b7","resolution":{"observed_at":"2026-05-26T12:57:22.767754Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"sample","venue":null,"work_id":"a081ea84-1bca-47c5-8b55-4072ddc2f5e9","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:70589b3be260976920dd2cc53d676c6c900abcddf3387866cd2a60c3b64f8eb9","observation_id":"548706f6-a496-402b-b405-1e48de4e2c51","resolution":{"observed_at":"2026-05-26T12:57:22.870220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"leakiness","venue":null,"work_id":"cd6aace3-241a-4a23-b111-3459fb34f782","year":null},"citing_paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-05-08T12:53:11.185208Z"},"links":{"citing_paper":"/paper/2605.06357"},"observation_digest":"sha256:308761cd4b6f21c45174e7391e91d703f811ec1305c0ce29064f3d35e77c6234","observation_id":"5dcefdb0-3ebc-4890-9421-0be7105f2145","resolution":{"observed_at":"2026-05-26T12:57:22.764637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-07-11T06:31:22.384518+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2605.06357","last_updated":"2026-05-07T14:35:04Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-07-06T23:18:51.157048Z","submitted_at":"2026-05-07T14:35:04Z","title":"Memory Efficient Full-gradient Attacks (MEFA) Framework for Adversarial Defense Evaluations"},"reference_resolution":{"displayed":62,"state_counts":{"malformed_identifier":0,"metadata_mismatch":2,"parse_uncertain":0,"unresolved":0,"verified_exact":23,"verified_fuzzy":37},"total_outbound_references":62},"schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-07-11T06:31:22.384518+00:00","source":"crossref"},{"observed_at":"2026-07-11T06:31:17.797779+00:00","source":"retraction_watch"}]}