{"as_of":"2026-08-09T19:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:756410c48dc9c29912f63790964dc97324e585cd6c1c60d352f2c29f455eb670","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-03T16:57:30.292348Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.28936/citation-record","integrity":"/paper/2607.28936/integrity","json":"/paper/2607.28936/citation-record.json","paper":"/paper/2607.28936"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:25.802275Z","title":"Privacy-preserving face recogni- tion using trainable feature subtraction,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:25.802275Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:02d424a2b4aef2bd13e9c2184cf5f75c3062256848893ec1c501129ccbded9c8","observation_id":"d3e07d00-a2ff-4d9a-8bb9-9024bdb18e39","resolution":{"observed_at":"2026-08-03T16:57:25.802275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:25.874619Z","title":"Scaling up biologically-inspired computer vision: A case study in un- constrained face recognition on facebook,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:25.874619Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:09341ff24d7447b55d87b8f455c53a96cec0870c923d18153d4bc37bf8820675","observation_id":"31c7fc4f-9128-4b3e-812c-d0298dfac1cc","resolution":{"observed_at":"2026-08-03T16:57:25.874619Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:25.986705Z","title":"From facial expression recognition to interpersonal relation prediction,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:25.986705Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:8f44814603dc1da663ddce032b0a7e400ea45c29a7209fe6b4285c53ad4257ce","observation_id":"13e4dd62-c81d-4d77-be84-b0ed6824ca45","resolution":{"observed_at":"2026-08-03T16:57:25.986705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.083208Z","title":"Null- swap: Proactive identity cloaking against deepfake face swap- ping,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.083208Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:e3d28aab96c062f2b7b7982ab69e992f0c38edf943b549e2d1e115643bc15ea8","observation_id":"f3c696bf-83c3-46d1-a6d7-62344e6bc35a","resolution":{"observed_at":"2026-08-03T16:57:26.083208Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.239298Z","title":"Sok: Anti- facial recognition technology,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.239298Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:e830e7c61ef4a81cd31b05a5f8f48c4790935754728127501211036dbf5b1daf","observation_id":"9f7e1c61-1da2-4470-bab9-5227fc386ace","resolution":{"observed_at":"2026-08-03T16:57:26.239298Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.351217Z","title":"Almeida, K","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.351217Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:1312bf7a596a3317a6062675b6465f363c5599b72b68013d740fa2fed8dc0b3f","observation_id":"72fdc171-516b-4f97-88b6-1688751c5a05","resolution":{"observed_at":"2026-08-03T16:57:26.351217Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.510188Z","title":"Sparse adversarial attack via perturbation factorization,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.510188Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:f889e2deb05aff9b3b8a097c54940c6154d0cb1a47790b488a446946d22b56e7","observation_id":"cd01ca3c-6c2e-450d-8b47-0f2a91c6f851","resolution":{"observed_at":"2026-08-03T16:57:26.510188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.619495Z","title":"Privacynet: Semi- adversarial networks for multi-attribute face privacy,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.619495Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:d95187daf5c260764e62e85185dfb3bc092059f14fa55d7be30c4c1c43f5aa9c","observation_id":"8f2b9396-d9a0-4edd-b8de-872fd2ee139d","resolution":{"observed_at":"2026-08-03T16:57:26.619495Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.727599Z","title":"Pridentity: Generalizable privacy preserving adversarial perturbations for anonymizing facial identity,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.727599Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:8562643994b79f4f9a3a432ccd3d676b9253281730091c4e792d6e3ee0a9da97","observation_id":"89f6f873-3ab8-4698-9d24-cf20f5882e8a","resolution":{"observed_at":"2026-08-03T16:57:26.727599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.890111Z","title":"Privacy-preserving adversarial facial features,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.890111Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:27c194e907c12fdaa5c6478f438cf307a270448d060eaad91a2dcf3b614be950","observation_id":"60499d8b-193c-4555-b196-d52581ea0bc1","resolution":{"observed_at":"2026-08-03T16:57:26.890111Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:26.996623Z","title":"Diffprivate: Facial privacy pro- tection with diffusion models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:26.996623Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:062ac4f401be81250a9df9ce37c9f09887760d085f01764b44973748f3148527","observation_id":"dedcf850-ace1-4181-91ff-99a3c50e9fa4","resolution":{"observed_at":"2026-08-03T16:57:26.996623Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.061120Z","title":"Towards privacy- preserving visual recognition via adversarial training: A pilot study,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.061120Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:ff040b962110586aa989d830baa1e1b41cb08f0f0762be6cd517537baa005fd8","observation_id":"c03d8222-4919-46b6-92c3-743035afa75e","resolution":{"observed_at":"2026-08-03T16:57:27.061120Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.185472Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.185472Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:3b556661859a1b8c062607d1ebd356da92fe3ba81aa1fac6d8d9f6469c37f16d","observation_id":"f159b559-ed16-4bd2-9396-7aab62ee2349","resolution":{"observed_at":"2026-08-03T16:57:27.185472Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.254377Z","title":"Advhat: Real-world adver- sarial attack on arcface face id system,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.254377Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:b427873c7760a28b18c88435a0831c772eb45342687b3328716055b317c30492","observation_id":"21bb7df0-301f-4022-b1d4-6e8df4004e15","resolution":{"observed_at":"2026-08-03T16:57:27.254377Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.359347Z","title":"Adv-attribute: Inconspicuous and transferable adversarial attack on face recognition,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.359347Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:08652d96d8ce6d0f0c84fe3569873a6fd2be9e0f2d597b6b626ce3b2006503a5","observation_id":"671ae6e8-21c1-433f-b14a-299e1f087dc1","resolution":{"observed_at":"2026-08-03T16:57:27.359347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.467781Z","title":"Boosting adversarial attacks with momentum,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.467781Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:8c5b17ff9923bb10c7d40de4d4eda33f41bf74ad531387dd7b1f27d12cb001bd","observation_id":"8f3e96fe-9083-4a9d-90ca-a567781ab89b","resolution":{"observed_at":"2026-08-03T16:57:27.467781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-04T18:06:26.992880Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-03T16:57:27.557413Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.557413Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:d3452507a8b033922eaa6eb3eb4ecf5fae5b0f710791e323ecb8729dc60f536b","observation_id":"b12f1e3e-a643-4e9a-a49d-b140b7c4775f","resolution":{"observed_at":"2026-08-03T16:57:27.557413Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.686631Z","title":"Se- manticadv: Generating adversarial examples via attribute- conditioned image editing,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.686631Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:e5cd0d2772bf24d794015261ef25d317da5ef2eee2f2afbd0061f473c34fc715","observation_id":"0810366c-44b9-4ac3-a336-22f0248bdf6e","resolution":{"observed_at":"2026-08-03T16:57:27.686631Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:27.839604Z","title":"Acces- sorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:27.839604Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:69da95b5de5f7dfad97e01f0c000ec4a9269598fa8a7c213447001b5eee2a372","observation_id":"f1745105-10bc-4cab-9ad0-5b4c60ea079d","resolution":{"observed_at":"2026-08-03T16:57:27.839604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.009130Z","title":"Protecting facial privacy: Generating adversarial identity masks via style-robust makeup transfer,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.009130Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:07718f4222aa883f110633889ce82d8d3053bac8989d6dbd688616d51292437f","observation_id":"c3c94ca1-0ee5-47d5-94d6-3ad0a48bcc45","resolution":{"observed_at":"2026-08-03T16:57:28.009130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.181129Z","title":"Fakelo- cator: Robust localization of gan-based face manipulations,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.181129Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:36b9adecb993dd68fa1b406519f005511a04ba8e729a81906611762c70dd2de8","observation_id":"a326d0c4-fa1c-4cdb-a338-f3fe92fcff1b","resolution":{"observed_at":"2026-08-03T16:57:28.181129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.354673Z","title":"Gan-based facial attribute manipulation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.354673Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:86857ce1cf85c1948d586c1e0cabfc0592adc26859137f62654dc4931e5b5339","observation_id":"4cff52dd-ca28-4c0c-bd9f-b6fce034aa6b","resolution":{"observed_at":"2026-08-03T16:57:28.354673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.512081Z","title":"Pfa-gan: Progres- sive face aging with generative adversarial network,","venue":null,"work_id":null,"year":2031},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.512081Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:1813bcb73e815dc91e670ccbb5ec1685a075071fefee19bb4c8d25d83c311f4b","observation_id":"8b663d06-dcdb-4c4c-b03f-54ca493fb4ff","resolution":{"observed_at":"2026-08-03T16:57:28.512081Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.629375Z","title":"High-resolution image synthesis with latent diffusion models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.629375Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:41ab7d714372256f2f7720d03bec4f2e9c888008e08243fac03a5f7e2b2e05ae","observation_id":"d29c889d-e7cd-4f4b-a5ef-a5f736061ace","resolution":{"observed_at":"2026-08-03T16:57:28.629375Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.701112Z","title":"Diffprotect: Generate adversarial examples with diffusion models for facial privacy protection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.701112Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:11ef29ab5f4a5961be136896d93535b88ca4cde122bd512a9486d0a5db490f36","observation_id":"a6992094-7ea0-4e3c-a005-2f51f38da1c8","resolution":{"observed_at":"2026-08-03T16:57:28.701112Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.807671Z","title":"Adv-diffusion: Imperceptible adversarial face identity attack via latent diffusion model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.807671Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:7043a24c916f869fb07b655420551e654a20e151a8e0d4fb78728b62296eb1b5","observation_id":"eafef0ec-33bc-44e3-9d34-a5d7b56baf9c","resolution":{"observed_at":"2026-08-03T16:57:28.807671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:28.894018Z","title":"Adv-cpg: A customized portrait generation framework with facial adversarial attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.894018Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:dc9e894c7cc0c53dab10d9b77a55c04df793c0e058aa5df76383c5f5e59e9d8c","observation_id":"975b8bef-48f7-4ca1-9672-ab0e9ecf4b00","resolution":{"observed_at":"2026-08-03T16:57:28.894018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2606.11615","last_updated":"2026-06-16T23:04:52Z","snapshot_observed_at":"2026-08-07T04:31:53.831397Z","submitted_at":"2026-06-10T03:28:00Z","title":"Adv-TGD: Adversarial Text-Guided Diffusion for Face Recognition Impersonation Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2606.11615","snapshot_observed_at":"2026-08-03T16:57:28.946154Z","title":"Adv-tgd: Adversarial text- guided diffusion for face recognition impersonation attacks,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:28.946154Z"},"links":{"cited_paper":"/paper/2606.11615","citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:b8626d9df7e98a5281ad946d5a9e59acdd5e303d9d94372d24feb93523b7b0ae","observation_id":"7a7f2cfc-609c-4be2-a081-e46ddd3cdd86","resolution":{"observed_at":"2026-08-03T16:57:28.946154Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.092488Z","title":"A general framework for adversarial at- tacks on face recognition systems,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.092488Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:728b499f67fe96e857388079f8817d698784255a7ca2cb703d79d81fb2d1317c","observation_id":"8f10cc64-1a41-4c46-af65-e26111a9de30","resolution":{"observed_at":"2026-08-03T16:57:29.092488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.169614Z","title":"Unrestricted adversarial examples via diffusion models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.169614Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:5e32f053ad35068e27388918cbb3d8667bff7daa76f07b96657e32f867c973f2","observation_id":"9083bd27-9c10-4db9-9895-f3dce0bd4060","resolution":{"observed_at":"2026-08-03T16:57:29.169614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.231855Z","title":"Adv-makeup: A new imperceptible and transferable attack on face recognition,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.231855Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:6494d74355bfe1f45c4aa1ac752c2cc07af70679c0613b4700ce0a42ba63e011","observation_id":"209f859c-d04f-45ad-93e6-0d0c8f4f9fb5","resolution":{"observed_at":"2026-08-03T16:57:29.231855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.293711Z","title":"Denoising diffusion probabilis- tic models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.293711Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:d0f020deb28dde259c70b7fe589c273a9c6298e8a337cb679bc13c755b43baa5","observation_id":"cd9cee42-e0e0-4cea-aeb2-d6eabd49bc57","resolution":{"observed_at":"2026-08-03T16:57:29.293711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.353673Z","title":"Score-based generative modeling through stochastic differential equations,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.353673Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:40304420abb04a412b6a4ebdd4bc307e377d9d8ea9f0409b74d9c5da846a7762","observation_id":"beac6d03-1b00-4ebe-aba7-909c5586ef4c","resolution":{"observed_at":"2026-08-03T16:57:29.353673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.413012Z","title":"Lora: Low-rank adaptation of large language models,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.413012Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:65768709fc5805faec17f94c7e9725fa654a48c58c57cd8d162008ead3bc7cac","observation_id":"a24ecbe0-99da-4a98-b395-02bfd581681b","resolution":{"observed_at":"2026-08-03T16:57:29.413012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2211.05100","last_updated":"2023-06-27T09:57:58Z","snapshot_observed_at":"2026-08-04T18:56:03.233715Z","submitted_at":"2022-11-09T18:48:09Z","title":"BLOOM: A 176B-Parameter Open-Access Multilingual Language Model","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2211.05100","snapshot_observed_at":"2026-08-03T16:57:29.472745Z","title":"Lora for stable diffusion: Fine-tuning text-to- image diffusion models,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.472745Z"},"links":{"cited_paper":"/paper/2211.05100","citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:d989a7e8bc5cf4efb28ab6687d5c78de1bd29118b5d240d7b43b618f7e6465a3","observation_id":"e63044ce-9c9d-4a9c-b6f0-2b388fdec88a","resolution":{"observed_at":"2026-08-03T16:57:29.472745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.537892Z","title":"Customdiffusion: Multi- concept customization of text-to-image diffusion,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.537892Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:57c4f1e82b38d17abde827ac1d78aeea3d19afdb69df088fe9366ea30db15d96","observation_id":"c17c712a-e151-49ab-83f4-8fe02985bcc4","resolution":{"observed_at":"2026-08-03T16:57:29.537892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.620506Z","title":"Diffam: Diffusion- based adversarial makeup transfer for facial privacy pro- tection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.620506Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:226e1e68e107f3f0f0efc6cd9a874d25aef73eb4c3672a26e6814d0c9d5354e4","observation_id":"f9c5dd33-e191-4be2-8c78-0af24c04ddb1","resolution":{"observed_at":"2026-08-03T16:57:29.620506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.686874Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.686874Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:0236ae9971bb8c2786df4b370f36379044f4f7a13feb211bbd23257fde29ed7e","observation_id":"f1611568-4458-4790-b03f-1bf4ba670487","resolution":{"observed_at":"2026-08-03T16:57:29.686874Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.740729Z","title":"Evading defenses to transferable adversarial examples by translation-invariant attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.740729Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:b543c5eabb67829d0a7f81686a52b23de55b15d3aad41c8326f3bae09475b944","observation_id":"64be144f-e532-43cd-9551-68eda4c051f8","resolution":{"observed_at":"2026-08-03T16:57:29.740729Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.796186Z","title":"Towards face encryption by generating adversarial identity masks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.796186Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:79a6a225d6ce103d44691d046e12842095700a0b0bcef9de1c32422f6cd9d651","observation_id":"7143202c-9979-4f70-8fad-3346833eed51","resolution":{"observed_at":"2026-08-03T16:57:29.796186Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.860306Z","title":"Personalized pri- vacy protection mask against unauthorized facial recognition,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.860306Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:3847cbc56fa83000b602ba7584ee5b3ad35d2fa53efd6b3ebca055a6420c7e0c","observation_id":"4a37959e-e893-4741-8cc5-e5b7620ed1e1","resolution":{"observed_at":"2026-08-03T16:57:29.860306Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.920055Z","title":"Clip2protect: Protecting facial privacy using text-guided makeup via adver- sarial latent search,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.920055Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:dcb4c39e9b0231fcb265043246a4e1e7175b16611bd04e7a2536201954a756b6","observation_id":"eb4b3624-6ae9-412c-b7b7-518355972d8f","resolution":{"observed_at":"2026-08-03T16:57:29.920055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:29.987803Z","title":"Makeup-guided facial privacy protection via untrained neural network priors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:29.987803Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:a7f65e4cac2b420b4bd21eef565460d0ccf2be11129499370fe1e3b557e2dbf2","observation_id":"50242165-8471-494f-8510-6457ba99a8aa","resolution":{"observed_at":"2026-08-03T16:57:29.987803Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:30.064360Z","title":"Diffusion-based adver- sarial identity manipulation for facial privacy protection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:30.064360Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:b1da9f28f9812dc1b3a1d1b38baaf782d95dfd43d4043e34ff553861e758a7c0","observation_id":"c741be97-1385-432d-a0c1-752b3074d12f","resolution":{"observed_at":"2026-08-03T16:57:30.064360Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:30.135498Z","title":"Transferable adversar- ial face attack with text controlled attribute,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:30.135498Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:ed5061763828397d9a9dc6f14d0b4d87570a18eb2ab3b712b073ddba8b71c3e9","observation_id":"f5f8fca3-4859-492c-942c-79084d3edd4e","resolution":{"observed_at":"2026-08-03T16:57:30.135498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1710.10196","last_updated":"2018-02-26T15:33:34Z","snapshot_observed_at":"2026-07-06T06:06:26.276752Z","submitted_at":"2017-10-27T15:28:35Z","title":"Progressive Growing of GANs for Improved Quality, Stability, and Variation","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1710.10196","snapshot_observed_at":"2026-08-03T16:57:30.231809Z","title":"Progressive growing of gans for improved quality, stability, and variation,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:30.231809Z"},"links":{"cited_paper":"/paper/1710.10196","citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:cbcf153b904ac372f1e722edae3828da49aad6e42af0d324e1bd81acebc6c4f3","observation_id":"bdde75ce-0cd5-4c74-9ca0-11d632accfd7","resolution":{"observed_at":"2026-08-03T16:57:30.231809Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-03T16:57:30.292348Z","title":"A style-based generator architecture for generative adversarial networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-03T16:57:30.292348Z"},"links":{"citing_paper":"/paper/2607.28936"},"observation_digest":"sha256:fd9a6f572043ec7bc181d5c6bc5cfd8ba743d35f3558d173989ae76862ce49e7","observation_id":"78517386-60d5-425e-b5a7-04ea379c9b83","resolution":{"observed_at":"2026-08-03T16:57:30.292348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.28936","last_updated":"2026-07-31T01:33:53Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-07T08:38:15.536042Z","submitted_at":"2026-07-31T01:33:53Z","title":"DiffAttack: Evasion Attacks Against Face Recognition via Latent Diffusion Models"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":47,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2607.28936."}