{"as_of":"2026-08-09T15:10:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d2cec4b6cc21d6628328d9687cbcb468918ad6ffce7bb99ffd4e82ded856dbb9","coverage":[{"denominator":216,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T20:00:15.979299Z","state":"measured"},{"denominator":100,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":100,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04314/citation-record","integrity":"/paper/2608.04314/integrity","json":"/paper/2608.04314/citation-record.json","paper":"/paper/2608.04314"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.372675Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.372675Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:3379b9573669e23f217d75c9a747bc2e713cc227e289073be7e1e0a6e8273623","observation_id":"d4cb9ee7-fb4a-4bcb-8ac0-1155c271ed26","resolution":{"observed_at":"2026-08-08T20:00:15.372675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.378598Z","title":"Proactive schemes: A survey of adversarial attacks for social good,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.378598Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:dd6ed333d1a97bfd7f77a38c6cbe18bae2347d235af83235e7a8c03efc2f4865","observation_id":"794d0aae-30c3-4273-bf86-432be2d3a6ca","resolution":{"observed_at":"2026-08-08T20:00:15.378598Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.383743Z","title":"Adversarial machine learning for social good: Reframing the adversary as an ally,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.383743Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:346144339058f759bc0f9f106259005bb397208d650feede74a1e858bc84852f","observation_id":"5948b9d7-7538-441c-b502-7a66a75c218e","resolution":{"observed_at":"2026-08-08T20:00:15.383743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3673224","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:16.944773Z","title":"Toward a privacy-preserving face recognition system: A survey of leakages and solutions,","venue":null,"work_id":"1832577e-8717-46b1-9aa1-0cfc128a9490","year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.390853Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:929f64384488ffb59aec09df1fc61a1288569e2ecb49c1805c2e846ae70b3ab4","observation_id":"fce5aef8-0ef5-4c04-827f-d46a084aced2","resolution":{"observed_at":"2026-08-08T20:00:16.954513Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2503.23536","last_updated":"2026-07-20T04:28:34Z","snapshot_observed_at":"2026-08-09T05:25:52.024911Z","submitted_at":"2025-03-30T17:41:30Z","title":"A Survey on Unlearnable Data","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2503.23536","snapshot_observed_at":"2026-08-08T20:00:15.397002Z","title":"A survey on unlearnable data,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.397002Z"},"links":{"cited_paper":"/paper/2503.23536","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:a5eec4c780353b46664fd039294b703cb63c6010e202689b4e3bf0e6aea79c57","observation_id":"a6f5af1b-26b3-43e8-b68a-ca1363030452","resolution":{"observed_at":"2026-08-08T20:00:15.397002Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.405459Z","title":"A survey of defenses against AI-generated visual media: Detection, disruption, and authentication,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.405459Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e352769622e033b0caaaa325ed1096112229e01185cf67dadc7fc53f9ed7ae03","observation_id":"41f6b967-4228-4a98-a4a8-ae00bdb4b998","resolution":{"observed_at":"2026-08-08T20:00:15.405459Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.412573Z","title":"A survey on adversarial perturbations and attacks on captchas,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.412573Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:519288004896dc113e78721df1e2796f1f5e588bfddfd0c4b853464ade1e4468","observation_id":"470c1297-c196-4856-ace0-e6589373d403","resolution":{"observed_at":"2026-08-08T20:00:15.412573Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.418674Z","title":"Sok: Watermarking for ai-generated content,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.418674Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:79f805cbc558153608395cfa49e6cd4722dfb661a0779146dc0fdd5595caa2d0","observation_id":"e2f9dc50-013d-4c96-b824-e630d87765f3","resolution":{"observed_at":"2026-08-08T20:00:15.418674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.430516Z","title":"Sok: Anti-facial recognition technology,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.430516Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e5e5ff619ac5baeeecdb5bd99269e331fc4ce2e918e2a539d5f8418f91077a38","observation_id":"276de30a-39fb-4018-a26a-986b0966f4cc","resolution":{"observed_at":"2026-08-08T20:00:15.430516Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.435215Z","title":"A survey on proactive deepfake defense: Disruption and water- marking,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.435215Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9f9d5f8c6080b28093b581284267cac164edb03e155034c102fb7ea537f48ca6","observation_id":"ec98d8cc-550e-4771-991e-34b73d085493","resolution":{"observed_at":"2026-08-08T20:00:15.435215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.440837Z","title":"Towards privacy- preserving visual recognition via adversarial training: A pilot study,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.440837Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:420985701a235361b84c13340cc18ad3a21b01dc89e2d5a84f080ccbe91103b4","observation_id":"6e67cb88-db81-499e-9a89-9dde804b47f7","resolution":{"observed_at":"2026-08-08T20:00:15.440837Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.447986Z","title":"Fawkes: Protecting privacy against unauthorized deep learning models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.447986Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:dd1543c7b821353758028c525736b17809b012b1faa0b09931ca8af92afe4105","observation_id":"d87fde5c-906a-426f-a57f-6ab4a77924a5","resolution":{"observed_at":"2026-08-08T20:00:15.447986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.455860Z","title":"Adver- sarial privacy-preserving filter,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.455860Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:cc4177d93651a6020425d823db3b5f3dfe3aa8a706f2ecb7b454a9b06f9bb3e1","observation_id":"6d870287-a5be-42fe-83f2-6059e7383692","resolution":{"observed_at":"2026-08-08T20:00:15.455860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.462501Z","title":"Lowkey: Leveraging adversarial attacks to protect social media users from facial recognition,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.462501Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:c05095b736647ac9d5efac3459daa276dbf3dcb14e2fa77bc1eb1bcfb5ab1fed","observation_id":"64edf5c4-7a68-4ca8-afb7-f14528952cf2","resolution":{"observed_at":"2026-08-08T20:00:15.462501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.467849Z","title":"Socialguard: An adversarial example based privacy-preserving technique for social images,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.467849Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:d0c381cfb22a243dd926b8e3a3e9e5e8ae56a8f853e2f1cfc9b6a1ed5aeb60c0","observation_id":"3991dd53-88bc-4672-a453-59a76f768486","resolution":{"observed_at":"2026-08-08T20:00:15.467849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.473792Z","title":"Low-mid adversarial pertur- bation against unauthorized face recognition system,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.473792Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:0332a69b294b500618eef1e8a9638ca86951f13f26fce8901c43da71dbbd9d07","observation_id":"6aaee0da-6ad4-4d94-9fe5-e51111ff3210","resolution":{"observed_at":"2026-08-08T20:00:15.473792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2305.03980","last_updated":"2023-05-06T09:00:50Z","snapshot_observed_at":"2026-07-30T22:49:15.418285Z","submitted_at":"2023-05-06T09:00:50Z","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","version":1},"cited_work":{"arxiv_id":"2305.03980","doi":null,"metadata_source":"pith","pith_arxiv_id":"2305.03980","snapshot_observed_at":"2026-08-08T20:00:19.475417Z","title":"Towards Prompt-robust Face Privacy Protection via Adversarial Decoupling Augmentation Framework","venue":"cs.CV","work_id":"5138216f-8ea9-4fc9-9583-b122f710338a","year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.478622Z"},"links":{"cited_paper":"/paper/2305.03980","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:37c29f02d2491ace7902e119ecc49d3b3290eb6bad749e47b5cd010738f49ad9","observation_id":"6f1833bc-81a2-4f04-b06a-09cde2b71ad2","resolution":{"observed_at":"2026-08-08T20:00:19.481705Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.483996Z","title":"Campro: Camera-based anti-facial recognition,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.483996Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:243ea16ca7af6fb1d208ad9437670d35441bdd43459a28539e1d49c336477605","observation_id":"28a50d1e-da2a-4fe4-bcd1-5f471b943ea1","resolution":{"observed_at":"2026-08-08T20:00:15.483996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.490303Z","title":"Enhancing generalization of invisible facial privacy cloak via gradient accumulation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.490303Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:ed4edc87d4c64c0eb225907233e28c36286de58d21a49e6ea2cc856385b176a8","observation_id":"d9a5ccb1-bc1e-49c3-a213-8725753aee09","resolution":{"observed_at":"2026-08-08T20:00:15.490303Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.495267Z","title":"Transferable facial privacy protection against blind face restora- tion via domain-consistent adversarial obfuscation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.495267Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:93cff87eb7aafd1acd859964f56bb612001ac56dbd74198dc2ae9834db76efe2","observation_id":"41c7b8bc-3675-44ee-b35a-18434414e61c","resolution":{"observed_at":"2026-08-08T20:00:15.495267Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2507.08982","last_updated":"2025-07-11T19:34:01Z","snapshot_observed_at":"2026-08-09T05:23:12.933526Z","submitted_at":"2025-07-11T19:34:01Z","title":"VIP: Visual Information Protection through Adversarial Attacks on Vision-Language Models","version":1},"cited_work":{"arxiv_id":"2507.08982","doi":null,"metadata_source":"pith","pith_arxiv_id":"2507.08982","snapshot_observed_at":"2026-08-08T20:00:19.440438Z","title":"VIP: Visual Information Protection through Adversarial Attacks on Vision-Language Models","venue":"eess.IV","work_id":"061b4990-dce5-4e0e-9773-7464bdf619c6","year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.501309Z"},"links":{"cited_paper":"/paper/2507.08982","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:8c887bf5d28d3000487498bc3f34847c5666781a758085f87e3d21ccfc4a47ea","observation_id":"97c63716-c165-4498-a01e-542b5c585d84","resolution":{"observed_at":"2026-08-08T20:00:19.447602Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2512.08503","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:19.390412Z","title":"Dis- rupting hierarchical reasoning: Adversarial protection for geo- graphic privacy in multimodal reasoning models,","venue":null,"work_id":"a914040b-092e-457e-b9a4-b54ba9fb4b5a","year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.506759Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:38603c97cf7d2a454697c67ba0cc7713d3eaf22423413b40a539e84cfa2a52c3","observation_id":"6b2681e2-d1fc-4235-bf71-624aaff44489","resolution":{"observed_at":"2026-08-08T20:00:19.405915Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.512745Z","title":"Geoshield: Safe- guarding geolocation privacy from vision-language models via adversarial perturbations,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.512745Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e157566bad6f91a8b91403e04a2933400bf740e438c22a0498aef5ce772f9040","observation_id":"936995f0-2258-4342-89dc-3a0c7a383187","resolution":{"observed_at":"2026-08-08T20:00:15.512745Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.518312Z","title":"Effective de-identification generative adversarial network for face anonymization,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.518312Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:73cc4591ca6d9129bbdef4f40f3a681f9ae2d74022b5dcfc6adc564f970df2e2","observation_id":"d6ef7de2-1de7-46cb-8121-c07823a527df","resolution":{"observed_at":"2026-08-08T20:00:15.518312Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2105.03162","last_updated":"2021-05-07T11:00:35Z","snapshot_observed_at":"2026-07-06T11:07:11.782598Z","submitted_at":"2021-05-07T11:00:35Z","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2105.03162","snapshot_observed_at":"2026-08-08T20:00:15.523748Z","title":"Adv-makeup: A new imperceptible and transferable attack on face recognition,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.523748Z"},"links":{"cited_paper":"/paper/2105.03162","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:dfb3e68804fa291370d9b2c0e340082ceee28a7290b274753e6b2bb6a04cf1e0","observation_id":"2ebd75f1-80cd-433a-8e6a-dd92efd116bd","resolution":{"observed_at":"2026-08-08T20:00:15.523748Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.528971Z","title":"Clip2protect: Pro- tecting facial privacy using text-guided makeup via adversarial latent search,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.528971Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:b7e3a7616507c1f0f458ac05e182ab5d4a4d515eaae57bd36ccbfad3c47de7a1","observation_id":"24e3f444-2456-4149-80a9-1eca56d02d7a","resolution":{"observed_at":"2026-08-08T20:00:15.528971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.536999Z","title":"Diffprotect: Generate adversarial examples with diffusion mod- els for facial privacy protection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.536999Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:58eb9bb885d68ff1ee7367443c34075f732c6677711539db274b60d4580c57d9","observation_id":"6b936007-f646-44ec-9659-249c66145728","resolution":{"observed_at":"2026-08-08T20:00:15.536999Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.542978Z","title":"Privacy-preserving adversarial facial features,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.542978Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:b218104f0cd78c1647a554f7c4ef1e8ab9f3a8e1842c5f523a0f72d23cb76278","observation_id":"8aaf46ea-5b0e-4a5e-a575-5636f66d3179","resolution":{"observed_at":"2026-08-08T20:00:15.542978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.547711Z","title":"3d-aware adversarial makeup generation for facial privacy protection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.547711Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:907dda37543b6074af187152de6f0bf7fc6ccf5246ba807732dcb275c49e5050","observation_id":"b2ef57fe-d3c4-4625-94fb-bad1261fbf29","resolution":{"observed_at":"2026-08-08T20:00:15.547711Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.552481Z","title":"Achieving privacy- preserving multi-view consistency with advanced 3d-aware face de-identification,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.552481Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:0a5936822a273e4eaa59df9577513f74fa8a392f3e73e0d57236fbf077adaa2d","observation_id":"85557a68-a529-4f0d-947c-89762d1e2fc6","resolution":{"observed_at":"2026-08-08T20:00:15.552481Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.557860Z","title":"Transfer- able adversarial facial images for privacy protection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.557860Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:da32f21d110da1b106ddb1a8e0210d1f3b4a3c0ef6537829a736be81aad22ee3","observation_id":"9ca8bbd2-e164-46bc-b4df-94b51f05bc4c","resolution":{"observed_at":"2026-08-08T20:00:15.557860Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.562966Z","title":"Adv- diffusion: imperceptible adversarial face identity attack via latent diffusion model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.562966Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:991195afcbf0f32c92d9a62d32049bf424cffee238340cc2279f4c1b976c625d","observation_id":"f083f563-2f98-4e74-b88f-842e7013211b","resolution":{"observed_at":"2026-08-08T20:00:15.562966Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.568325Z","title":"Diffam: Diffusion- based adversarial makeup transfer for facial privacy protection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.568325Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e0a4c2b31d2cddf77feb3ca9dcb887fb1d7f6163d571ef1556265c2eda760c93","observation_id":"bc619f5c-e359-48b0-9802-5c7099608527","resolution":{"observed_at":"2026-08-08T20:00:15.568325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.573387Z","title":"Diff-privacy: Diffusion-based face privacy protection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.573387Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:8c820cd2816f4994ee5ea4f42776108f074812ecf72021af6df79369d214c6ca","observation_id":"c4dcb92e-1b91-4e2f-9350-6e4c2b5a3d2a","resolution":{"observed_at":"2026-08-08T20:00:15.573387Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.578448Z","title":"Makeup-guided facial privacy protection via untrained neural network priors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.578448Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6a49cbb41d6e706152805d7be137e8237e211aee028afc40484d29f01f7a8fa6","observation_id":"432386ab-dcab-4fb1-924e-3d67fc2ed65e","resolution":{"observed_at":"2026-08-08T20:00:15.578448Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.583566Z","title":"Styleadv: a usable privacy frame- work against facial recognition with adversarial image editing,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.583566Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:2b81b0ee9d2cfbd86f24f1c163df38d16a09a9b1f80e058a220d8cfc19eccc14","observation_id":"a8fdd537-42a9-4096-aefe-ba73bdc70332","resolution":{"observed_at":"2026-08-08T20:00:15.583566Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.589987Z","title":"Sd4privacy: exploiting stable diffusion for protecting facial privacy,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.589987Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9537918414f5fa54e90adc3f4f649c683adb607958d54a9b8b1ca50b85a18ad6","observation_id":"1917236f-1136-48fa-97dd-8f35d0d9de30","resolution":{"observed_at":"2026-08-08T20:00:15.589987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.594857Z","title":"Adversarial 3d generation based on diffusion models for anti-facial recognition,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.594857Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:77ae2eaeae0da42915985d2e852b32f81f2795ccf0f5d37e1c6b85c5d1ff6d78","observation_id":"2f8bb520-7046-4bda-b831-756f73c534df","resolution":{"observed_at":"2026-08-08T20:00:15.594857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.600347Z","title":"Advcloak: Customized adversarial cloak for privacy protection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.600347Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e885d3ec3c5717be78c569b5c05fe02ef5232416b29a50cc744bc17fc9aff67e","observation_id":"d1ccd216-1747-4053-9692-b07e905a29ff","resolution":{"observed_at":"2026-08-08T20:00:15.600347Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.606156Z","title":"Crfd: A novel face privacy preservation via fine-grained controllable and reversible de-identification,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.606156Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:eed0060c8cb7726e44cc16c0a81ca5d5ef34775eb5a2f5650913fe23e55d6472","observation_id":"be483233-685b-4889-925e-fdadd45ed062","resolution":{"observed_at":"2026-08-08T20:00:15.606156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.611604Z","title":"Machine pareidolia: Protecting facial image with emotional editing,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.611604Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6f9c305d658a778be284040edcca56a48cc5a32c0fe51ca19776144b416b9ff1","observation_id":"dbd9868f-0721-413f-ae79-127a6e703601","resolution":{"observed_at":"2026-08-08T20:00:15.611604Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.617502Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.617502Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:ccc7c5aec191c900cf170312e5c1f0b3ce14e50046dce20142959c271ab336da","observation_id":"adde3731-2214-4b2b-b833-9fe199bb66ac","resolution":{"observed_at":"2026-08-08T20:00:15.617502Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.624682Z","title":"Adversarial face de-identification,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.624682Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:441159eae384a4c4d59162a78df86d0a8585dc5295c3c765169cf72e2cbfcddf","observation_id":"394915b4-1bdd-446c-9552-fcda92917c54","resolution":{"observed_at":"2026-08-08T20:00:15.624682Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.629740Z","title":"To- wards face encryption by generating adversarial identity masks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.629740Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e1c4bcaac0632b5b0f90ef7282d981bdbed2bc7bcfe38ef7ebd382f43d3a5e07","observation_id":"f6ff3999-4525-4cb7-8099-dbde4f289cf3","resolution":{"observed_at":"2026-08-08T20:00:15.629740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.635012Z","title":"Adversarial attacks on face detection algorithms using anti-facial recognition t-shirts,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.635012Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:2f442b9efadca7c01011639f69915604f33dc6ced5121e8e83a0bd9bbecf718e","observation_id":"f6ecc3c4-f4d7-49cf-9f16-18a3b3770968","resolution":{"observed_at":"2026-08-08T20:00:15.635012Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.642212Z","title":"Identi- tymask: Deep motion flow guided reversible face video de- identification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.642212Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:35e7a41829282b9ab467247aba0f81fddb4b8f74adfd7379967975425d0012a5","observation_id":"6293fe9e-753a-4c80-b913-bac73b08cacd","resolution":{"observed_at":"2026-08-08T20:00:15.642212Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.647611Z","title":"Opom: Customized invisible cloak towards face privacy protection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.647611Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:54ade44ed4517976663907db8b800cd5c8bade496adaa205394fffdba6fa53b2","observation_id":"71f0fecc-ecad-4c0c-bde1-336d0ea43126","resolution":{"observed_at":"2026-08-08T20:00:15.647611Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.653740Z","title":"Protecting facial privacy: Generating adversarial identity masks via style-robust makeup transfer,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.653740Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:a91e2e0eded28debdc1346b4cd85e047bd3955fe3f7d8cde0a6196d2d6928479","observation_id":"87e366cb-bcf9-4248-8d85-8f03b2af306d","resolution":{"observed_at":"2026-08-08T20:00:15.653740Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.658694Z","title":"Collaborative face privacy protection method based on adversarial examples in so- cial networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.658694Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9ca2fea9450b40d521a4bfaff89b5bd7286d20d7e52ecb66762c358d0fb743c2","observation_id":"108058f3-3aa1-4358-b81b-5b59c7d8663f","resolution":{"observed_at":"2026-08-08T20:00:15.658694Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.664628Z","title":"Diversity-driven privacy protection masks against unautho- rized face recognition,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.664628Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:a480ff53102c3fd4dc3a45f1ca9fc81250b65f32b9698b06f32ec16b717e390c","observation_id":"5730c4fc-dfd3-49c2-a7c7-00e7a015c18c","resolution":{"observed_at":"2026-08-08T20:00:15.664628Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.669861Z","title":"Reversible privacy preserving on vision-language models via adversarial multimodal key,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.669861Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:fcb44a84f834f243c247eabeebe75c1d1a235a883606eaffaa86f50085069e35","observation_id":"f8e5c399-0e05-4164-8519-7c87f12251a5","resolution":{"observed_at":"2026-08-08T20:00:15.669861Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.675463Z","title":"Erasablemask: A robust and erasable privacy protection scheme against black-box face recognition models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.675463Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:996da328b16c60afb60c78fcf8da480421df432a878bb6a78c2b48cbccf77f99","observation_id":"fcc23f09-f11e-485d-a1c1-52af4cbffa39","resolution":{"observed_at":"2026-08-08T20:00:15.675463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.13248","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:19.125715Z","title":"Dualtap: A dual-task adversarial protector for mobile mllm agents,","venue":null,"work_id":"0dd196ed-c3c0-4f83-986a-7b2f36d371a7","year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.680607Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9baa3aaf50d79b5d0cfed473f9cb38ebdd1e684eb137328cf8f3e7a8e201cd45","observation_id":"5e7a18fb-7641-4b6c-be89-04af70bb0151","resolution":{"observed_at":"2026-08-08T20:00:19.136350Z","resolver_source":"raw_fallback","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.685964Z","title":"Adversarial examples make strong poisons,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.685964Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:7f6f7e531bcc77b51ae7d4bc6e73f2af9bf60140ee3b670905f9bdab5c8528b2","observation_id":"03dbc9b9-2b5f-4a37-b7a6-d8106f42538f","resolution":{"observed_at":"2026-08-08T20:00:15.685964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.691522Z","title":"Un- learnable examples: Making personal data unexploitable,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.691522Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:5c19a9d1181ae5f2f01ce54b025d710020000cfedfb71727daa1f929fcf4825e","observation_id":"ad3ae65e-2928-45ce-8f58-c39d7957fa91","resolution":{"observed_at":"2026-08-08T20:00:15.691522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2111.13244","last_updated":"2021-11-25T20:32:15Z","snapshot_observed_at":"2026-07-06T12:12:18.828330Z","submitted_at":"2021-11-25T20:32:15Z","title":"Going Grayscale: The Road to Understanding and Improving Unlearnable Examples","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2111.13244","snapshot_observed_at":"2026-08-08T20:00:15.697771Z","title":"Going grayscale: The road to under- standing and improving unlearnable examples,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.697771Z"},"links":{"cited_paper":"/paper/2111.13244","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e0a670a4fb47dc9ebd537f6a8edc7f64b52bb4b2981dd75eb423b649b6764af7","observation_id":"7e9391c6-7110-458c-8d56-6e85f804df96","resolution":{"observed_at":"2026-08-08T20:00:15.697771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.704403Z","title":"Robust unlearnable examples: Protecting data privacy against adversarial learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.704403Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e06be6fa24961635db8da1e90d1bf423ada508614cf17add26bcfcaf6f8f41fe","observation_id":"849a1534-d6b6-4c4e-ba01-a46c83134435","resolution":{"observed_at":"2026-08-08T20:00:15.704403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.709288Z","title":"Re-thinking data availability attacks against deep neural networks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.709288Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e27ea84aee4f3558050402eab707cbb67dbe74f690da48a0ad80758e7bce257d","observation_id":"73f2b3dc-5b23-4533-8774-300bcffdf2c0","resolution":{"observed_at":"2026-08-08T20:00:15.709288Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.715092Z","title":"Stable unlearnable example: Enhancing the robustness of unlearnable examples via stable error-minimizing noise,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.715092Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:cf21759c5d8651d8bf5cb88c8af54e2f9c164ff9143d6373878428e0b6b63f60","observation_id":"5abfa463-28a6-44bf-b15c-81a8258fc94b","resolution":{"observed_at":"2026-08-08T20:00:15.715092Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.725088Z","title":"Armor: Shielding unlearnable examples against data augmentation,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.725088Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:0403c35c758ce595a72e1df8c2f602401a966351df1e36c812d9d5d080a72ec6","observation_id":"f9e590b8-0acf-448d-8c27-e926d7787acd","resolution":{"observed_at":"2026-08-08T20:00:15.725088Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2303.02559","last_updated":"2023-03-05T03:09:03Z","snapshot_observed_at":"2026-07-06T14:58:44.419522Z","submitted_at":"2023-03-05T03:09:03Z","title":"Securing Biomedical Images from Unauthorized Training with Anti-Learning Perturbation","version":1},"cited_work":{"arxiv_id":"2303.02559","doi":null,"metadata_source":"pith","pith_arxiv_id":"2303.02559","snapshot_observed_at":"2026-08-08T20:00:18.994974Z","title":"Securing Biomedical Images from Unauthorized Training with Anti-Learning Perturbation","venue":"cs.LG","work_id":"afa41c35-744f-4bb7-a265-ee5f6c707233","year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.731027Z"},"links":{"cited_paper":"/paper/2303.02559","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:79d0b95e877997762fa36b49b4cb2d70e318c1a4e11c4382894c120ed61a5db4","observation_id":"622dc5a3-d0ae-4bba-ba86-5e32b9ddaec8","resolution":{"observed_at":"2026-08-08T20:00:19.001549Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.739178Z","title":"Self-ensemble protection: Training checkpoints are good data protectors,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.739178Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:b7f66784f6b9b9c9f3dcdb92ecd4a5d3e3cf2dda086ab9a85834d5bc456bea52","observation_id":"67c46a55-b122-424a-bec4-424fc936a7cf","resolution":{"observed_at":"2026-08-08T20:00:15.739178Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.744340Z","title":"Neural tangent generalization at- tacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.744340Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:b247338a9c1c0452e363dd112b6b95ab52908cca1b085eac1002c78652e0983c","observation_id":"ad5b9f58-7d74-486b-b9db-b8d4f1b68fdb","resolution":{"observed_at":"2026-08-08T20:00:15.744340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.750917Z","title":"Is adversarial training really a silver bullet for mitigating data poisoning?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.750917Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9c190be284671596d309a00a1338cf99fe33d71dd7c164f67cb78d53670d6984","observation_id":"bb359e0a-cf1b-4190-8f55-f62bc63f237d","resolution":{"observed_at":"2026-08-08T20:00:15.750917Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.755649Z","title":"Semantic deep hiding for robust unlearnable examples,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.755649Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6d4c0af855ff605da1ee713d585f8e9213ac5cf2a875af752536deae8ec0a798","observation_id":"3ff5de3c-a4a4-4073-8133-e8a04efd0416","resolution":{"observed_at":"2026-08-08T20:00:15.755649Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.760780Z","title":"Why do unlearnable examples work: A novel perspective of mutual information,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.760780Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:22cdb3a1f041dfd5c22e5d367d05e59956a5c54b96b1d23bea274af41500020c","observation_id":"4115109c-5115-4304-8f16-f67eccb616db","resolution":{"observed_at":"2026-08-08T20:00:15.760780Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.768220Z","title":"Transferable unlearnable examples,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.768220Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:0e8d1ff81440e3dc2234c4867981370fadf8e77253f79d0623a1e0104e0c82e9","observation_id":"5590926e-1fb8-422b-aaae-116d99f6acc5","resolution":{"observed_at":"2026-08-08T20:00:15.768220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.773674Z","title":"Efficient availability attacks against supervised and contrastive learning simultaneously,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.773674Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:f744731ee65d25e5ed235c829af039e1d309e7c2dad8aaa2db466760ba9f5729","observation_id":"b506df2d-fa29-4305-a6de-3e166b793dce","resolution":{"observed_at":"2026-08-08T20:00:15.773674Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.779068Z","title":"Unlearnable clusters: Towards label-agnostic unlearnable exam- ples,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.779068Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:d5fb3ce1d1b4b4a76d8ce7a43dc1cc74768ebd271db9d335e612e6b56c59595d","observation_id":"8759951d-beda-45e7-8d03-7152fd80ed3a","resolution":{"observed_at":"2026-08-08T20:00:15.779068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.784263Z","title":"One for all: A universal generator for concept unlearnability via multi-modal alignment,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.784263Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:381820a47e6893b5f736545e4e2ef398cca0bf3ce21cc0756b24bb7bb13bc433","observation_id":"6ee591e2-0fa7-4d6e-b4fa-305a027eef63","resolution":{"observed_at":"2026-08-08T20:00:15.784263Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.791854Z","title":"Multimodal unlearn- able examples: Protecting data against multimodal contrastive learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.791854Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:dc62b3d913f39e27a06de62ca35af84e992b3e8d1f2a9f8f36231cc7dfe0f813","observation_id":"9121c4f5-f985-4422-bf5c-888184f70339","resolution":{"observed_at":"2026-08-08T20:00:15.791854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.803290Z","title":"Unseg: One universal unlearnable example generator is enough against all image segmentation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.803290Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:1a568dcda9042758b099d51f4f7040f4a9add08b9a4e5bd757354b78e83a7202","observation_id":"51bdc760-88c7-416d-8456-126f6cf62bbe","resolution":{"observed_at":"2026-08-08T20:00:15.803290Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.811215Z","title":"T2ue: Generating unlearnable examples from text descriptions,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.811215Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6cbc42ec45ecc4a988fe84af89dc40cbf110463a528a58ae4c11e3bead7a37db","observation_id":"0f1cab8e-3236-41dd-a68d-430789851435","resolution":{"observed_at":"2026-08-08T20:00:15.811215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.818021Z","title":"Versatile transferable unlearnable example generator,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.818021Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:757817c5d3faba855c9410497069f80f321c4c23dc08b9db8a30c832913cdd58","observation_id":"ba2bba7a-bca3-4d8c-8af9-a812a342fe4b","resolution":{"observed_at":"2026-08-08T20:00:15.818021Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.823558Z","title":"Game-theoretic unlearnable example generator,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.823558Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:4a34f51d7a4c25d52cd211844e5b4f19d74ca946feaad4bf70cf9c2cdb969df9","observation_id":"aa3fe5cb-9d7f-45f8-b01a-7a8e979fd882","resolution":{"observed_at":"2026-08-08T20:00:15.823558Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.829411Z","title":"When priors backfire: On the vulnerability of unlearnable ex- amples to pretraining,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.829411Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:401d04ae24e4a00362b4c41ffe7bb52714b2d80ddd9652d8ba4c7cfb1a140a24","observation_id":"9b9da51e-20c9-496b-b679-f5180dbc07c2","resolution":{"observed_at":"2026-08-08T20:00:15.829411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.834165Z","title":"Provably unlearnable data examples,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.834165Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:63df66f0de8fbf562cef85a46591315a69932a5fec71542c36a7a1d15acc8c15","observation_id":"d19122b5-3d16-42ae-8672-c9e657c781ce","resolution":{"observed_at":"2026-08-08T20:00:15.834165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.840661Z","title":"Segue: side-information guided generative unlearnable examples for facial privacy protection in real world,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.840661Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:858270ae41ec5511626c829bddabc3a7b0c77fa915d7291946a46096f8416bd8","observation_id":"274aa1af-12ae-4a08-b60f-733a9b7eba70","resolution":{"observed_at":"2026-08-08T20:00:15.840661Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.846540Z","title":"Availability attacks create shortcuts,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.846540Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:13b1ad2bdd512d6ff9b11e3e4093c2590ba21ec42a393ecf40d8645cdbc3306b","observation_id":"fa4eada4-f0dc-4d99-918f-8895e087181e","resolution":{"observed_at":"2026-08-08T20:00:15.846540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.852165Z","title":"Autoregressive perturbations for data poisoning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.852165Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:12314ee8099edf3eaa1e6b39aae39777df89a5da5c58797b1e40a29e2e238ad1","observation_id":"2e74002c-29d7-4d6d-9d58-9a91bb8f0d75","resolution":{"observed_at":"2026-08-08T20:00:15.852165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.857728Z","title":"One-pixel shortcut: On the learning preference of deep neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.857728Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:f0307669438dbc98cbfc409e13639227a31824c21d1aeaee6fe5adc10168fdfe","observation_id":"7f166d32-3187-41b1-ad7d-67ca6fdcce27","resolution":{"observed_at":"2026-08-08T20:00:15.857728Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.862761Z","title":"Cuda: Convolution-based unlearnable datasets,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.862761Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:4bd2c12312e2995aed40f18b0f37caa6d9199623442e9148d201b47d3519a557","observation_id":"3b729a52-cca2-4b67-9963-a3d27b5472ef","resolution":{"observed_at":"2026-08-08T20:00:15.862761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.868395Z","title":"Leverag- ing imperfect restoration for data availability attack,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.868395Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:aba5aa28a4799536008abc5ff5921489453c074bc83cffbdcd78cc2a5f0d2c84","observation_id":"862057d9-5604-4b68-a198-e4efc5686c21","resolution":{"observed_at":"2026-08-08T20:00:15.868395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.875775Z","title":"K-space bispectrum steganography for robust unlearnable data,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.875775Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:c2773cfcfc478d2fddfc487a2038bc1f644024e985557582c72249ee664b30f8","observation_id":"8ad3e822-0f32-432a-bdda-6d044909c622","resolution":{"observed_at":"2026-08-08T20:00:15.875775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2403.14250","last_updated":"2024-03-21T09:22:23Z","snapshot_observed_at":"2026-08-02T10:02:29.243489Z","submitted_at":"2024-03-21T09:22:23Z","title":"Safeguarding Medical Image Segmentation Datasets against Unauthorized Training via Contour- and Texture-Aware Perturbations","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.14250","snapshot_observed_at":"2026-08-08T20:00:15.880801Z","title":"Safeguarding medical image segmen- tation datasets against unauthorized training via contour-and texture-aware perturbations,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.880801Z"},"links":{"cited_paper":"/paper/2403.14250","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:f37e608ccb97760c0f8e4ad10e9901f7ec21d76aef6ec794f1e9bca64f9b17ec","observation_id":"4612335e-ea18-4a0f-93bc-ba8fe6c331bd","resolution":{"observed_at":"2026-08-08T20:00:15.880801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.886791Z","title":"Temporal unlearnable examples: Preventing personal video data from unauthorized exploitation by object tracking,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.886791Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:1fbd3c7f754ff9c1bc28aea26974097e882cacc6df877b2cdf058e4dda7d1442","observation_id":"633a7c53-6306-47e7-a190-c3e04228e121","resolution":{"observed_at":"2026-08-08T20:00:15.886791Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.895519Z","title":"Adversarial example does good: preventing paint- ing imitation from diffusion models via adversarial examples,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.895519Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:a2f2ff76e41a22397d8d23ab23617e763689c8f685aefd0f0a63f39d7798621f","observation_id":"13b2adcf-91db-47ff-8f3c-5bffe83d75e3","resolution":{"observed_at":"2026-08-08T20:00:15.895519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.901509Z","title":"Glaze: Protecting artists from style mimicry by{Text- to-Image}models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.901509Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:fa9420b0c3bdee38f2a22dfa9537d95647cfe7a8c973d2b0277a498e9daf8ce1","observation_id":"cae92576-8373-49a0-be24-b1cc24acae13","resolution":{"observed_at":"2026-08-08T20:00:15.901509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.906696Z","title":"Nightshade: Prompt-specific poisoning attacks on text-to-image generative models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.906696Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:56b2193680e15e341b20edf7a63b9749678065ae5ab19d9270fe15c948125a53","observation_id":"5f6757e9-4228-4596-a3b0-a79a607ce9ac","resolution":{"observed_at":"2026-08-08T20:00:15.906696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.912824Z","title":"Toward effective protec- tion against diffusion-based mimicry through score distillation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.912824Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:25a2a821ff3cae5cdc952747a22117a503352e4c41b86385323c442d8484f8fc","observation_id":"02b70336-1b6b-4147-9cc8-322a7a063077","resolution":{"observed_at":"2026-08-08T20:00:15.912824Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.919216Z","title":"Styleguard: Pre- venting text-to-image-model-based style mimicry attacks by style perturbations,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.919216Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:9de28e6a97374a490d71a538edb3b62fee0c2068ac01982e27ef4248b02a0066","observation_id":"b4292016-ecda-4312-8a3f-092ea597cdd8","resolution":{"observed_at":"2026-08-08T20:00:15.919216Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.926327Z","title":"Styleprotect: Safeguarding artistic identity in finetuned diffusion models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.926327Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:ba7c04a06acea7f0dde0054397786c84616041d83310240d46f0b6ecd278dc70","observation_id":"89b5fecb-d524-4f0d-ae0c-2f8cd864c0de","resolution":{"observed_at":"2026-08-08T20:00:15.926327Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.933509Z","title":"Nearly zero-cost protection against mimicry by personalized diffusion models,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.933509Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:1d949dd480321a8daa569219dde97b4b2f8608141f85b1b1840bae01108cf45a","observation_id":"00b7d90a-f31f-42a1-babb-dfb196beee51","resolution":{"observed_at":"2026-08-08T20:00:15.933509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.941282Z","title":"Anti-dreambooth: Protecting users from personalized text-to-image synthesis,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.941282Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:13eda25b45239056ec954561932885af898948f879b06bd0c5d1624b19d5fa4c","observation_id":"e4383f1c-81f1-484d-8f01-0d26fd022537","resolution":{"observed_at":"2026-08-08T20:00:15.941282Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.947372Z","title":"Countering personalized text-to- image generation with influence watermarks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.947372Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6f0f9e356cccaa57b5fc5f634a546ed6f11884ba9768a9d63cd86d412c450e63","observation_id":"16ed9a63-d13a-4a36-93f1-02f71098bdfd","resolution":{"observed_at":"2026-08-08T20:00:15.947372Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.955035Z","title":"Metacloak: Preventing unauthorized subject-driven text-to-image diffusion- based synthesis via meta-learning,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.955035Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:a592e8ee36cc26b0229813a8eb768e405ca50341247498d243b9c3d89b45a106","observation_id":"07a47c37-4ba7-4efc-a39a-43c63477765f","resolution":{"observed_at":"2026-08-08T20:00:15.955035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.960762Z","title":"An h-space based adversarial attack for protection against few-shot person- alization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.960762Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:6d8ddba61b7606af9126a3bb27f6269cf51009ad71097ff09c3239e0fc5b4f57","observation_id":"8435c277-583f-4e05-a162-a2f63af22ab6","resolution":{"observed_at":"2026-08-08T20:00:15.960762Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.966927Z","title":"Harness- ing global-local collaborative adversarial perturbation for anti- customization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.966927Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:555a4e3988bacbf651c775beb43b4e3f8ef9d699c54dde2d917c2993430e7fea","observation_id":"2b9b9ee1-629b-4083-a9bb-4930977cfdba","resolution":{"observed_at":"2026-08-08T20:00:15.966927Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.972370Z","title":"Dis- rupting diffusion: Token-level attention erasure attack against diffusion-based customization,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.972370Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:082200c455768628cca380208c920a87d7d0cca72fb5d1893f42e57ea3187262","observation_id":"46b7b746-9c85-45b3-b8a7-dc08b1f706e8","resolution":{"observed_at":"2026-08-08T20:00:15.972370Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T20:00:15.979299Z","title":"Targeted attack improves protec- tion against unauthorized diffusion customization,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:15.979299Z"},"links":{"citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:e1cbd53aff8a2f40d0540808214dc4f11ab0ff3be3f2d61f676de9f9f1d4b180","observation_id":"1fe341dd-bb91-43e9-9448-ae1e45e977c8","resolution":{"observed_at":"2026-08-08T20:00:15.979299Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T05:23:40.725336Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":94,"verified_exact":6,"verified_fuzzy":0},"total_outbound_references":216},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 100 of 216 outbound references and 0 inbound Pith citation observations for arXiv:2608.04314."}