{"as_of":"2026-08-12T05:51:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:4a5ae91493bbec33df60f8676ed7ed853805ac94f015d60e36a13ac812f39001","coverage":[{"denominator":41,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":41,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-11T04:16:45.187332Z","state":"measured"},{"denominator":41,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":41,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-11T06:34:44.6726+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04559/citation-record","integrity":"/paper/2608.04559/integrity","json":"/paper/2608.04559/citation-record.json","paper":"/paper/2608.04559"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.048362Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.048362Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:206c69135bdf5822edecbf3bcfa53aefd68f457ef0076ab14bfb9065d11d9032","observation_id":"8ae614c3-3342-47d0-9587-185e28eb4224","resolution":{"observed_at":"2026-08-11T04:16:45.048362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.052440Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.052440Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:75087a88f4a29707192099c1849f31606638f0d856f06627d20446cce487a22c","observation_id":"a64adbb9-688e-4dd6-a1e6-c11c18f17bae","resolution":{"observed_at":"2026-08-11T04:16:45.052440Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.056340Z","title":"Position guided dynamic receptive field network: A small object detection friendly to optical and sar images,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.056340Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:eea5a2de9953550cf250e501f8911636d05abe37bfdf4b68bafaa7d563ee8a26","observation_id":"a6da3329-39dc-4761-b725-b1923cff2148","resolution":{"observed_at":"2026-08-11T04:16:45.056340Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.060272Z","title":"Fldet: Faster and lighter aerial object detector,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.060272Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:8583987771fff9a6e840ee797ce537858293fd67f33e3caf3288871416bf53fa","observation_id":"4c101e82-80c2-47b5-bc2c-4e1fad82a7ce","resolution":{"observed_at":"2026-08-11T04:16:45.060272Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.064031Z","title":"Fooling automated surveil- lance cameras: Adversarial patches to attack person detection,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.064031Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:a26fc8de89cd75610a2aa2370e10a04893a2a7224bb886f527d153e68925c3d9","observation_id":"8e4f033b-0976-46b8-9ccb-58426b2e3494","resolution":{"observed_at":"2026-08-11T04:16:45.064031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-10T07:54:29.099788Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-11T04:16:45.067571Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.067571Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:3df2c5594461303abb6d660d8efe0eb60e0a6dc8dcd9c6acac6ac6cb5be053ac","observation_id":"489510a1-6c90-4520-b6e3-91d468fc0834","resolution":{"observed_at":"2026-08-11T04:16:45.067571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.072075Z","title":"A unified framework for adversarial patch attacks against visual 3d object detection in autonomous driving,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.072075Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:4d6d2370dfa9c7cbeca22171b5a016af3411f65a4ecfc86d07c80bb327e739d1","observation_id":"4ebdf849-0121-4c7f-854f-970b096ba077","resolution":{"observed_at":"2026-08-11T04:16:45.072075Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.075853Z","title":"Dual attention suppression attack: Generate adversarial camouflage in physical world,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.075853Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:a56f32824adebb5505e416b548f080bfdc114ee7f598ed66cbe6dcf4d74abfbe","observation_id":"51808ca3-896c-4a0d-9551-05ff8e5876a9","resolution":{"observed_at":"2026-08-11T04:16:45.075853Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.079209Z","title":"Fca: Learning a 3d full-coverage vehicle camouflage for multi-view physical adversarial attack,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.079209Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:3e4206725179d586cdd2069ece5408a6c3d04f11042712ca977b8d3e8d54387a","observation_id":"17c81535-95c2-4f75-a8a3-3080408f92cc","resolution":{"observed_at":"2026-08-11T04:16:45.079209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.082529Z","title":"Naturalistic physical adversarial camouflage for object detection via differentiable rendering and style learning,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.082529Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:c3e91dc60c622e501a8ef94240df2519057ef8c59fd12d9496a53a4607eb359b","observation_id":"f286a72d-2f1d-42db-8cb3-f8ba907b36e1","resolution":{"observed_at":"2026-08-11T04:16:45.082529Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.085721Z","title":"Practical black-box attacks against machine learning,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.085721Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:d846c1ba831b0a53d30123d9238e968a9456d2d5e23f1fef8edf22058cccf543","observation_id":"d9fdda46-5f68-4c12-affd-7043f29292d3","resolution":{"observed_at":"2026-08-11T04:16:45.085721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.089068Z","title":"One pixel attack for fooling deep neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.089068Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:997b53173aae430c775c386b16ae3e99905db1e3343b6e25f96e86583c5ce374","observation_id":"55f787a4-fd8a-4f87-918f-41cf0db0b926","resolution":{"observed_at":"2026-08-11T04:16:45.089068Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.093055Z","title":"Rfla: A stealthy reflected light adversarial attack in the physical world,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.093055Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:7e25c794f73dcb1caaf2b4cb915aedc15b289801139cda0456beb7b8e4bebd28","observation_id":"55294ec7-da45-41a6-9df1-d0444e115459","resolution":{"observed_at":"2026-08-11T04:16:45.093055Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.096339Z","title":"Black-box adversarial patch attacks using differential evolution against aerial imagery object detectors,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.096339Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:b7b2d3d7804891f18f6447ecbbe755a2f1d0a4ef0cc79901c2bd0a560ceac141","observation_id":"6f895c22-b8f7-4e1c-bd3f-98bdd577b026","resolution":{"observed_at":"2026-08-11T04:16:45.096339Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.099407Z","title":"Lesep: Boosting adversarial transferability via latent encoding and semantic embedding perturbations,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.099407Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:27f6f492baf987ede3736570f121cb736e85a247687548019245cf2ed39e6faa","observation_id":"01300662-de7b-4558-9eaf-ce8865b28620","resolution":{"observed_at":"2026-08-11T04:16:45.099407Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.102541Z","title":"Query efficient black- box adversarial attack on deep neural networks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.102541Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:abf10b679900e1589268982ea555047d9bc2421f6863a51d0c1951b0374a1037","observation_id":"44489d89-4674-4e6c-ad20-8fb851e67b36","resolution":{"observed_at":"2026-08-11T04:16:45.102541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.106463Z","title":"Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.106463Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:eca9e88d152f00058be16334d9e2750615c757d2f35a64772da578f7f29b3e36","observation_id":"86748dd0-6d05-494a-a95d-c349b64d345b","resolution":{"observed_at":"2026-08-11T04:16:45.106463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.109542Z","title":"Genattack: practical black-box attacks with gradient- free optimization,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.109542Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:caf41f1a8f8399f42315d0591a5f97adf44790a1f5f32472d6765e742319208a","observation_id":"015f064d-4419-427a-8dbc-fff77860f7fc","resolution":{"observed_at":"2026-08-11T04:16:45.109542Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.113330Z","title":"Pso-based closed box adversarial patch attack against face recognition,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.113330Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:0aac08cd0861f2c3418e329cabfb6f699d7ff40a87bdf67a71ee56cf492b8144","observation_id":"4925f872-23e8-41ed-b7ad-308394e6448e","resolution":{"observed_at":"2026-08-11T04:16:45.113330Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.116657Z","title":"Simultaneously optimizing perturbations and positions for black-box adversarial patch attacks,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.116657Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:b4390ee07d988fb1158e37e1304e7961748813fe3a317682dfd0670c19788b42","observation_id":"f950d7ee-7512-48e4-8e9f-efb84ad940e5","resolution":{"observed_at":"2026-08-11T04:16:45.116657Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.120775Z","title":"Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.120775Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:6426ffde81e37a589533aa1e0d203883ee7c53475265cdcfb7055dc0954cd2e7","observation_id":"402579c9-95ab-4da6-bd6b-d8c803d50214","resolution":{"observed_at":"2026-08-11T04:16:45.120775Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.124254Z","title":"A general framework for adversarial examples with objectives,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.124254Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:5752d1d09c2a85e09c8479ac737e7b32f47e9742f2da15b08276ce227586e0e7","observation_id":"9b77bdb0-e949-474a-8334-682cd32ef34d","resolution":{"observed_at":"2026-08-11T04:16:45.124254Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.128247Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.128247Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:e00af615bbd5798826668744986c8f6d25bd8525e9b598821df02a53834bac5e","observation_id":"fd6919d0-7b10-4c99-beea-fef2e8179bac","resolution":{"observed_at":"2026-08-11T04:16:45.128247Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.131362Z","title":"Facenet: A unified embed- ding for face recognition and clustering,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.131362Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:b65fd3957c1bcb31aaadf7436e544e6731a3fc67b41208927281df4be6eb2079","observation_id":"a2aee7b1-c8bb-47f0-b6b5-7f283c92f194","resolution":{"observed_at":"2026-08-11T04:16:45.131362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.134561Z","title":"Yolo9000: Better, faster, stronger,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.134561Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:0bbbd3a0403509a91a542844dcc3bbc18d517f13dd8f8ef40ef3bf5849c19c0a","observation_id":"581bdcb8-a1e7-4836-b559-4d0f7b3e6bb7","resolution":{"observed_at":"2026-08-11T04:16:45.134561Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.138121Z","title":"Adversarial t-shirt! evading person detectors in a physical world,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.138121Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:160e6fe9173ec98cca74263c9d8ef84e27cf4523280f9493cb7d03f14572daa1","observation_id":"d39362be-6fd8-4df1-8ddd-b94f8530c977","resolution":{"observed_at":"2026-08-11T04:16:45.138121Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.141429Z","title":"Shapeshifter: Robust physical adversarial attack on faster r-cnn object detector,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.141429Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:88dc6b86e1c6b461c46c5be716399a985aeadb2b7d3f8eb337ba148c94d8ae4a","observation_id":"52aa873a-9117-4f5e-bc6d-5bb119d4d05f","resolution":{"observed_at":"2026-08-11T04:16:45.141429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.144522Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.144522Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:48bf41ada7a4c4140dd79391463daa61e512d0c2bf0df123e59e39cd7fb8b49d","observation_id":"34f9fc8c-d10d-47da-89c2-17593ea806c3","resolution":{"observed_at":"2026-08-11T04:16:45.144522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.148202Z","title":"Generative adversarial nets,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.148202Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:cb5e615f5876d9364debdcefe3f4a8df83a5ac6986fc0db2fc2014eb9f566e46","observation_id":"39bbad2d-d833-4363-ba11-10bb65d646ba","resolution":{"observed_at":"2026-08-11T04:16:45.148202Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.151425Z","title":"Tnt attacks! universal naturalistic adversarial patches against deep neural network systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.151425Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:b3e1da1253022e4b46e5f04c95a8ba9ebdf82eb798f20c04d11286fce2a6002b","observation_id":"12b8f5c7-0531-4457-92ca-88bdf7f7e1a8","resolution":{"observed_at":"2026-08-11T04:16:45.151425Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2501.02232","last_updated":"2025-01-04T08:38:20Z","snapshot_observed_at":"2026-08-10T22:11:55.313814Z","submitted_at":"2025-01-04T08:38:20Z","title":"Distillation-Enhanced Physical Adversarial Attacks","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2501.02232","snapshot_observed_at":"2026-08-11T04:16:45.154556Z","title":"Distillation-enhanced physical adversarial attacks,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.154556Z"},"links":{"cited_paper":"/paper/2501.02232","citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:da1d7a30c4ec288cd32effd40c6e3821f9446cef0524b95eaf6796b31ce2487a","observation_id":"17bd6729-fdbd-4e57-affd-43439bec9869","resolution":{"observed_at":"2026-08-11T04:16:45.154556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.158510Z","title":"Adversarial camouflage: Hiding physical-world attacks with natural styles,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.158510Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:9152e6a9b18cf3ceedc170a8e2e695d1e85e197c28649846369c04b7043525c0","observation_id":"083dbb43-9548-4de8-9dfe-84f523b0b5e6","resolution":{"observed_at":"2026-08-11T04:16:45.158510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.161802Z","title":"Wasserstein generative adver- sarial networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.161802Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:1d9b7a8103da5414961a2cf2f2258ba73ee41029a9bfe8d03018a746bd96d559","observation_id":"3854df9d-0230-4a1f-88d1-8d3369fa01a8","resolution":{"observed_at":"2026-08-11T04:16:45.161802Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.164995Z","title":"Generating natural adversarial remote sensing images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.164995Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:218f11b5b7a7fc81d8ffecd4c98c94912384695418d350c16232f535fbca6291","observation_id":"04969073-c867-4a4f-b10a-76202cddab32","resolution":{"observed_at":"2026-08-11T04:16:45.164995Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.168395Z","title":"Universal adversarial examples in remote sensing: Methodology and benchmark,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.168395Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:679dc0cd88ca7aa6bc7b8880c8427cb5800cfa8bcf2f7e633a21c4c693b9d349","observation_id":"8c018a4d-575f-4154-927a-19aa23384743","resolution":{"observed_at":"2026-08-11T04:16:45.168395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.171555Z","title":"Dempaa: Deployable multi-mini-patch adversarial attack for remote sensing image classification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.171555Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:cd3efe44c57df13784eca4868452401084716bbba8b4c1b64081aea5e045f239","observation_id":"171a374f-31b2-4964-8b34-fd525d0101a7","resolution":{"observed_at":"2026-08-11T04:16:45.171555Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.174743Z","title":"Adversarial patch attack on multi-scale object detection for uav remote sensing images,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.174743Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:ff34deaf26ca1cb3790c4a2f3c6881bf91d4c6cbe097f040f743d81079c303c1","observation_id":"b79c5fc1-98d4-4a77-969c-2b533756a37a","resolution":{"observed_at":"2026-08-11T04:16:45.174743Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.177725Z","title":"Benchmarking adversarial patch against aerial detection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.177725Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:f40985d104744cb0473e492dffe2dc5d93be93330abb52f12e339dda2780abdc","observation_id":"0bea6e22-eb02-4376-8ffe-b3899ed47307","resolution":{"observed_at":"2026-08-11T04:16:45.177725Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.180836Z","title":"Threatening patch attacks on object detection in optical remote sensing images,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.180836Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:fbd6694f65676903beecd327c2a0ceccd5c1349f475e87a15ad8b9cb2d7060f7","observation_id":"55d61d2e-82c8-46a1-b12c-670979ae3a11","resolution":{"observed_at":"2026-08-11T04:16:45.180836Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.184082Z","title":"Object detection in optical remote sensing images: A survey and a new benchmark,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.184082Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:a8ed3b1608920f6c4ac3e9787754736e4387a50ec161b290757b22775b31c1cc","observation_id":"14bc2fcf-3c0a-4055-84f7-3beaa2877bb3","resolution":{"observed_at":"2026-08-11T04:16:45.184082Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-11T04:16:45.230855Z","title":"Fooling aerial detectors by background attack via dual-adversarial-induced error identification,","venue":null,"work_id":"47ee9f3f-82ad-4918-b726-e6e3b034356a","year":2024},"citing_paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-11T04:16:45.187332Z"},"links":{"citing_paper":"/paper/2608.04559"},"observation_digest":"sha256:c7dacc012c40b75a48c5473643ee51d60cf59fe8552f4afa332a7764884e33dd","observation_id":"808d6845-53a3-4480-9b65-e1854b96a066","resolution":{"observed_at":"2026-08-11T04:16:45.236661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.04559","last_updated":"2026-08-10T11:16:00Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T05:19:59.619359Z","submitted_at":"2026-08-05T07:53:26Z","title":"ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection"},"reference_resolution":{"displayed":41,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":40,"verified_exact":0,"verified_fuzzy":1},"total_outbound_references":41},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-11T06:34:44.6726+00:00","source":"crossref"},{"observed_at":"2026-08-11T06:34:36.301508+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2608.04559."}