{"as_of":"2026-08-08T06:12:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5287e0e3929553a108805c74086a815eb3285acb5615c60d524c07abf208eff2","coverage":[{"denominator":49,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":49,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-02T00:37:19.996262Z","state":"measured"},{"denominator":49,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":49,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.14974/citation-record","integrity":"/paper/2607.14974/integrity","json":"/paper/2607.14974/citation-record.json","paper":"/paper/2607.14974"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"2502.13923","last_updated":"2025-02-19T18:00:14Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2025-02-19T18:00:14Z","title":"Qwen2.5-VL Technical Report","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2502.13923","snapshot_observed_at":"2026-08-02T00:37:16.490299Z","title":"Qwen2.5-VL technical report","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.490299Z"},"links":{"cited_paper":"/paper/2502.13923","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:ba3d2e1bf8ae4c54658c6c93830e8cc0af19475e565d9cc52c548c2950dbfa3d","observation_id":"352504b4-820f-40f7-938f-ba70939a84e2","resolution":{"observed_at":"2026-08-02T00:37:16.490299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:16.498724Z","title":"SceneTAP: Scene-coherent typographic adversarial planner against vision-language mod- els in real-world environments","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.498724Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:4782c687c71ae62c1d766142b3c5f834728235660e957640d3ee4dd3ab05b3c2","observation_id":"091e9adc-e980-4cac-8050-512448dc2191","resolution":{"observed_at":"2026-08-02T00:37:16.498724Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:16.507437Z","title":"Boosting adversarial attacks with momentum","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.507437Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:5c69c3449d9eab17331f304b192ecf5ce1e0338c7176df883da92eb02f925311","observation_id":"2d24a0b5-66fa-41bc-a302-ec1b73aba938","resolution":{"observed_at":"2026-08-02T00:37:16.507437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:16.572711Z","title":"Boosting transferability in vision-language attacks via diversification along the intersection region of adversarial trajectory","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.572711Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:f2cfc570ca3a4265d966f1f1e887264766678eaa25f1156c8be97d564fe8f4a9","observation_id":"f46fdcf1-bc7c-42ed-9827-0241a4874348","resolution":{"observed_at":"2026-08-02T00:37:16.572711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:16.738520Z","title":"Countering adversarial images using input transformations","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.738520Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:6d9481e6af3643a0be2427a0a03d3af161133c5f32cd63c74a6329cd87616ef9","observation_id":"d1ce7f86-a8b4-426c-b414-8bb5f7b988da","resolution":{"observed_at":"2026-08-02T00:37:16.738520Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04403","last_updated":"2023-12-07T16:16:50Z","snapshot_observed_at":"2026-08-02T17:13:23.195883Z","submitted_at":"2023-12-07T16:16:50Z","title":"OT-Attack: Enhancing Adversarial Transferability of Vision-Language Models via Optimal Transport Optimization","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04403","snapshot_observed_at":"2026-08-02T00:37:16.902636Z","title":"OT-Attack: Enhancing adversarial transferability of vision-language models via optimal trans- port optimization.arXiv preprint, arXiv:2312.04403, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.902636Z"},"links":{"cited_paper":"/paper/2312.04403","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:0654164c1b10878298bbd258f80128bf69c6ebe2d3275878b44d79ccb2b8a161","observation_id":"dae7ca62-ed34-4550-993f-3dec4e3039fe","resolution":{"observed_at":"2026-08-02T00:37:16.902636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2312.04913","last_updated":"2023-12-08T09:08:50Z","snapshot_observed_at":"2026-08-07T21:16:58.470052Z","submitted_at":"2023-12-08T09:08:50Z","title":"SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2312.04913","snapshot_observed_at":"2026-08-02T00:37:17.010873Z","title":"SA-Attack: Improving adversarial transferability of vision-language pre-training models via self- augmentation.arXiv preprint, arXiv:2312.04913, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.010873Z"},"links":{"cited_paper":"/paper/2312.04913","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:fa79fb7bf4c26834e09ba5a1a2d9f4ca6f018b0f3f5bddccc7b0b977314f407a","observation_id":"e0d5434f-f3b0-44b2-b3f7-5fb29cc261ca","resolution":{"observed_at":"2026-08-02T00:37:17.010873Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.119215Z","title":"Feature space perturbations yield more transferable adversar- ial examples","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.119215Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:32cb52f44dbb96243666dcf0ec539aa3ff3082a07cdc425141651827cbeb025d","observation_id":"29127e9e-5ce4-41c8-a5b1-666596a22858","resolution":{"observed_at":"2026-08-02T00:37:17.119215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.173636Z","title":"Tsang, and Xiaochun Cao","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.173636Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:46e09b1dd1f492cf8028a5f1a439d568dd436ea3742a701c9430e86b0bbbd553","observation_id":"f45539e8-6980-47f6-802d-a79b07205b2a","resolution":{"observed_at":"2026-08-02T00:37:17.173636Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.275496Z","title":"BERT: Pre-training of deep bidirectional trans- formers for language understanding","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.275496Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:e1081703c40cd4dbdd099159dfdb922dec30679b14d16cf6577cc235c9478a59","observation_id":"88cb1f7c-4217-4a78-8aec-aeb640d6a596","resolution":{"observed_at":"2026-08-02T00:37:17.275496Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.295682Z","title":"Align before fuse: Vision and language representation learning with momentum distillation","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.295682Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:e2f3f6120de5c32dcfef1323d8888e3b76fe14f26d987c27af1ddb63a14fa602","observation_id":"b1fe12b4-6d3a-429f-bb9e-b6b9eb1d0d3e","resolution":{"observed_at":"2026-08-02T00:37:17.295682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.353814Z","title":"BLIP: Bootstrapping language-image pre-training for unified vision- language understanding and generation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.353814Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:7fea55aeb40e7c375c10c623b04ce8d98a689eca9c5b4c5680fa1409faa22f62","observation_id":"f05176c0-6571-4900-8388-99247de2bca9","resolution":{"observed_at":"2026-08-02T00:37:17.353814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.415024Z","title":"BERT-Attack: Adversarial attack against BERT using BERT","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.415024Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:70068ae7f73b044852e3e41dc17a8d8ac55f23f47e22692d5faac42c412d5b7e","observation_id":"1c7f8afd-9561-40d2-8659-999d7156fde5","resolution":{"observed_at":"2026-08-02T00:37:17.415024Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.481240Z","title":"Microsoft COCO: Common objects in context","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.481240Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:62fd21b65002634f2b994fb9939ecc2aa087b8384299c33d1d414eac15ead630","observation_id":"d3eaa9f5-cede-4482-8bfe-3379a9d88797","resolution":{"observed_at":"2026-08-02T00:37:17.481240Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.548074Z","title":"Visual instruction tuning","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.548074Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:6a8dd2f61360fdccdabd857a9ccde505ba1e0f97da8af9aa8a3febfe823574c5","observation_id":"3413413e-29e6-487a-a2ff-baec98fb0f7b","resolution":{"observed_at":"2026-08-02T00:37:17.548074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.662082Z","title":"GLEAM: En- hanced transferable adversarial attacks for vision-language pre-training models via global-local transformations","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.662082Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:0b9352668cc35a9232e7b97ab6a071f407a6aa1d69f3b5dbe632f783a806c57f","observation_id":"7b828fa5-dbf0-4943-9600-96cf1339d45b","resolution":{"observed_at":"2026-08-02T00:37:17.662082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.732127Z","title":"Frequency domain model augmentation for adversarial attack","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.732127Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:5004816e48e1ac5de55277e9abf231c56fc37f3ed01c98e9ba35720521f591e3","observation_id":"68e84312-a3e2-454a-8da9-206ca991a970","resolution":{"observed_at":"2026-08-02T00:37:17.732127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.790295Z","title":"Set-level guidance at- tack: Boosting adversarial transferability of vision-language pre-training models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.790295Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:b3e6892815742f8417d897044f4924e672071419722cc465aa6f04a6cbabf9e7","observation_id":"ae7b6609-9f59-4247-952d-4ea63d84ecb8","resolution":{"observed_at":"2026-08-02T00:37:17.790295Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-02T00:37:17.890261Z","title":"Towards deep learn- ing models resistant to adversarial attacks.arXiv preprint, arXiv:1706.06083, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.890261Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:9336be1053c462ee441c86394f233533129eb7e09055379d343f3d64437e27a9","observation_id":"69b2f3e0-25a4-459d-836a-c8a9cf69d765","resolution":{"observed_at":"2026-08-02T00:37:17.890261Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:17.986577Z","title":"Understanding zero-shot adversarial robust- ness for large-scale models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:17.986577Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:d1b92c2fffa1e166b7e1d4787c0f17d2f7f71dbf5dfe7cf924f70a70726079ef","observation_id":"a1c4af72-890d-4694-aa5a-eb09b0502055","resolution":{"observed_at":"2026-08-02T00:37:17.986577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.045963Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.045963Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:8322674b04078afb0dc203a996d93e588b2543d7bb3f151396fd75b4606c5615","observation_id":"cb710224-9148-492e-a5b9-1fca39993c2a","resolution":{"observed_at":"2026-08-02T00:37:18.045963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.151733Z","title":"Plummer, Liwei Wang, Chris M","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.151733Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:636a87978a8304638bf5a44ca84e5c4d2d7d6ba1d5120158211588efbad9ed97","observation_id":"82bb905c-6145-4a20-9887-31d85ae9ea85","resolution":{"observed_at":"2026-08-02T00:37:18.151733Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.159647Z","title":"Boosting the transferability of ad- versarial attacks with reverse adversarial perturbation","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.159647Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:fbede653833cdf625027c905641c05eebc1f950fcbb8ff06b2dc0da0ca037125","observation_id":"59767d46-1560-4c79-bae4-a5c4f7281e67","resolution":{"observed_at":"2026-08-02T00:37:18.159647Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.08734","last_updated":"2024-07-20T03:11:22Z","snapshot_observed_at":"2026-08-06T04:08:05.635098Z","submitted_at":"2024-01-16T17:42:36Z","title":"Bag of Tricks to Boost Adversarial Transferability","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2401.08734","snapshot_observed_at":"2026-08-02T00:37:18.262177Z","title":"Enhancing adversarial transferability through neighborhood conditional sampling.arXiv preprint, arXiv:2401.08734,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.262177Z"},"links":{"cited_paper":"/paper/2401.08734","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:3733628b2d0f47f1312a7af1ea79b9e9788bc8e5da77ec83b9e82510dfdf638d","observation_id":"3e61e326-8602-48e6-98bf-25ad4e5f49e6","resolution":{"observed_at":"2026-08-02T00:37:18.262177Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.420646Z","title":"Learning transferable visual models from natural language supervi- sion","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.420646Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:eb2c3c9d735f7b70dcd84f154ec160943e3094a70a38428c60dc2eae0da20b9c","observation_id":"b90aa68c-ee73-42f5-836a-c7ed91aa5f77","resolution":{"observed_at":"2026-08-02T00:37:18.420646Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.530615Z","title":"Improving adversarial transferability on vision transformers via forward propagation refinement","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.530615Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:2143a9dfeaff4b1a55495e7bbdc992975b8954ddd5aa389fe29c523aaac45aec","observation_id":"5478d8ac-8c3a-41be-936b-3ac91b08076c","resolution":{"observed_at":"2026-08-02T00:37:18.530615Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.590590Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.590590Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:46819b144778c7a4263729a409268cc9199ee42e49bdcff2e43924ec7ca37e96","observation_id":"2f779f0c-1dce-4f14-987c-3c770d784997","resolution":{"observed_at":"2026-08-02T00:37:18.590590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.696949Z","title":"Robust CLIP: Unsupervised adversar- ial fine-tuning of vision embeddings for robust large vision- language models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.696949Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:e94872c6ffbbd12a11400907de7f6e0c3bf4cf46f35b84be6be9c5dfdc2f9d29","observation_id":"558a3da0-4436-4248-a952-484d47610924","resolution":{"observed_at":"2026-08-02T00:37:18.696949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.802064Z","title":"FaceNet: A unified embedding for face recognition and clus- tering","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.802064Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:004a9ac0d4a0bb6e937592129c9dcad59d3474678b4a31aa19646b9e4c204679","observation_id":"6ac3fa16-da80-43e2-b672-771e4d20e27d","resolution":{"observed_at":"2026-08-02T00:37:18.802064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:18.978039Z","title":"Selvaraju, Michael Cogswell, Abhishek Das, Ramakrishna Vedantam, Devi Parikh, and Dhruv Batra","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:18.978039Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:25ea68b8b7587b050a3a008fed206c6472785cd8e8f321e5743edefd2325eee4","observation_id":"e741f3f1-ed7e-413e-acdd-76cb315da3e3","resolution":{"observed_at":"2026-08-02T00:37:18.978039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.040138Z","title":"A little robustness goes a long way: Leveraging robust features for targeted transfer attacks.Advances in Neural Information Processing Systems, 34:9759–9773, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.040138Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:7274c851442e90afecedf41e0a66165e400636800f02be2666dfaf86ca2bffb8","observation_id":"21b84fae-8469-427c-bd5e-cbc5871b9e43","resolution":{"observed_at":"2026-08-02T00:37:19.040138Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.099437Z","title":"Circle loss: A unified perspective of pair similarity optimization","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.099437Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:2355a24ccaf2bde2af9eadfbaf7cc03ac76edd5e66a965e523410437958b75f0","observation_id":"8ad722d9-e321-41a1-aff4-b01c049790a5","resolution":{"observed_at":"2026-08-02T00:37:19.099437Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.157058Z","title":"Enhancing the transferability of adversarial attacks through variance tuning","venue":null,"work_id":null,"year":1924},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.157058Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:b832995b13d5ae216e495077fe28aa3801fd7735fadfe320ddf530d9be636ae2","observation_id":"7ab9b3d3-c51d-4c75-84eb-8a368995d182","resolution":{"observed_at":"2026-08-02T00:37:19.157058Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2308.12636","last_updated":"2025-06-02T08:14:09Z","snapshot_observed_at":"2026-07-06T16:09:51.953140Z","submitted_at":"2023-08-24T08:22:21Z","title":"Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2308.12636","snapshot_observed_at":"2026-08-02T00:37:19.179078Z","title":"Exploring transferability of multimodal adversarial samples for vision-language pre- training models with contrastive learning.arXiv preprint, arXiv:2308.12636, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.179078Z"},"links":{"cited_paper":"/paper/2308.12636","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:f2bc0bd4a793e4e7d3ed0f17ef726945e6c21cac638f172cac7659b266decbfa","observation_id":"156e28e3-1779-4883-9642-29205ad7bd1b","resolution":{"observed_at":"2026-08-02T00:37:19.179078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.231311Z","title":"Bovik, H.R","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.231311Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:8ef5071cddd3732bb20a3a46a24b57f9d06b9c32db40782c28e82a6655a28b56","observation_id":"89b46bf0-af62-47db-8087-c37ba5ac59d6","resolution":{"observed_at":"2026-08-02T00:37:19.231311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1901.06706","last_updated":"2019-01-20T17:55:05Z","snapshot_observed_at":"2026-07-06T07:27:52.425939Z","submitted_at":"2019-01-20T17:55:05Z","title":"Visual Entailment: A Novel Task for Fine-Grained Image Understanding","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.06706","snapshot_observed_at":"2026-08-02T00:37:19.299049Z","title":"Visual entailment: A novel task for fine-grained image understand- ing.arXiv preprint arXiv:1901.06706, 2019","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.299049Z"},"links":{"cited_paper":"/paper/1901.06706","citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:236910632d9d06e4ec121db0503150d842816e8024cf1c400da521b9719a6d09","observation_id":"6f37ea30-a41f-4794-9670-83bf08551dec","resolution":{"observed_at":"2026-08-02T00:37:19.299049Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.381457Z","title":"Stochastic variance reduced ensemble adversarial attack for boosting the adversarial transferability","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.381457Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:cd5077de8cef96b387fe6396fb7c1b8402a2c2419b2215c5419085299a5d860a","observation_id":"4696764c-e6f1-4221-90ee-29244af4c0df","resolution":{"observed_at":"2026-08-02T00:37:19.381457Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.541922Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.541922Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:4d42cc59bb79c039a0f09f57473ffd71b6b2cb1507570975778fb3659d155c14","observation_id":"a7706da6-716c-4e3c-a61b-b3e44d4d434f","resolution":{"observed_at":"2026-08-02T00:37:19.541922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.699438Z","title":"Vision-language pre-training with triple contrastive learning","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.699438Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:376cd2aca3247917b500d027223f078eae96846ae7dad433026eebe1e43cc0b4","observation_id":"297dfc33-9c1a-40b8-9c11-52301f2a263c","resolution":{"observed_at":"2026-08-02T00:37:19.699438Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.865466Z","title":"VLATTACK: Multimodal adversarial attacks on vision- language tasks via pre-trained models","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.865466Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:2dafddf74a3029411598553979f8c1e1c302715f54a841f3f68af797b398623e","observation_id":"4b7908d7-4bd6-4972-946e-7d64dfeddc9e","resolution":{"observed_at":"2026-08-02T00:37:19.865466Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.979107Z","title":"Modeling context in referring expres- sions","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.979107Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:01034cfb1dbf7b66695835132e2dfb93186e4f76bbc3a46ea845acc6bd5a339a","observation_id":"5b3eec2e-c89a-488d-bd6a-434533d2cb8c","resolution":{"observed_at":"2026-08-02T00:37:19.979107Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.981623Z","title":"Towards adversarial attack on vision-language pre-training models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.981623Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:b69eb8b27b195e503e0efd541ce8dbb4741af3e72cfb5208be25739979621d6f","observation_id":"001d439f-ec6e-443b-bac1-8e3ca4e7c476","resolution":{"observed_at":"2026-08-02T00:37:19.981623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.986984Z","title":"Univer- sal adversarial perturbations for vision-language pre-trained models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.986984Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:ad9e7d51035ee93a482313ca8b526b548ed56ce46fbaa9f6e036ac8207eede29","observation_id":"08f15439-45c9-45b5-a6a9-9311eb37c41c","resolution":{"observed_at":"2026-08-02T00:37:19.986984Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.989443Z","title":"On success and simplicity: A second look at transferable targeted attacks","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.989443Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:99f04dd9e44708fd72352947a868f9bcf2c70a5e43461e537598c1804e587b8f","observation_id":"e1dc834d-1fd5-480b-abe9-2eb7f9ffad16","resolution":{"observed_at":"2026-08-02T00:37:19.989443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.991759Z","title":"A unified understanding of adversarial vulnerability regarding unimodal models and vision-language pre-training models","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.991759Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:e879c0900aa4824a48bd649cbd3b370aa0a54fa70c79fb6ca1479dd54a3740da","observation_id":"5a01e94e-993b-4ed1-8752-976ce108a98f","resolution":{"observed_at":"2026-08-02T00:37:19.991759Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.993970Z","title":"AdvCLIP: Downstream-agnostic adversarial examples in multimodal contrastive learning","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.993970Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:1f6353059cc35e7197f1129f2dc8999911dba3c09b7a4dae493ec04b41564c88","observation_id":"509402f6-a747-4364-8593-d30901e0e544","resolution":{"observed_at":"2026-08-02T00:37:19.993970Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.996262Z","title":"Boosting adversarial transferability via gradi- ent relevance attack","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.996262Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:d21a34cd2cd12a5d6ab24cf0712176efa0a8281b16cba8b3005e427bcf91fdc2","observation_id":"f7de823e-eb24-4a9a-9cd3-4d95d13f1193","resolution":{"observed_at":"2026-08-02T00:37:19.996262Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:19.984181Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:19.984181Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:541c6ee987ed78fa2d4f24d8a0ddd03af261703a1d9a3160303b9f1b3eec2ad1","observation_id":"4bffe8d0-1837-49f1-b489-370aba334042","resolution":{"observed_at":"2026-08-02T00:37:19.984181Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-02T00:37:16.626722Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline","version":1},"reference_index":2025,"source":"pdf_text","source_observed_at":"2026-08-02T00:37:16.626722Z"},"links":{"citing_paper":"/paper/2607.14974"},"observation_digest":"sha256:08965491d78d1a2e771b2c06d8bb08d082a0d3c427d59729e8508afd16864771","observation_id":"0514e689-b90f-42bb-a363-fc78671cd745","resolution":{"observed_at":"2026-08-02T00:37:16.626722Z","resolver_source":null,"status":"parse_uncertain"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.14974","last_updated":"2026-07-16T13:28:59Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-08T02:09:56.816611Z","submitted_at":"2026-07-16T13:28:59Z","title":"On Success and Simplicity: A Second Look at Transferable Vision-Language Attack Pipeline"},"reference_resolution":{"displayed":49,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":2,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":49},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 49 of 49 outbound references and 0 inbound Pith citation observations for arXiv:2607.14974."}