{"as_of":"2026-08-09T17:40:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:2137621f5d910e3e7805a66650c449db689e6b6ad2d2d586c37d955c892fedff","coverage":[{"denominator":20,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":20,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T19:08:28.641978Z","state":"measured"},{"denominator":20,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":20,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.04680/citation-record","integrity":"/paper/2608.04680/integrity","json":"/paper/2608.04680/citation-record.json","paper":"/paper/2608.04680"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:32.723628Z","title":"Adaptive token sampling for efficient vision trans- formers,","venue":null,"work_id":"6d48a028-65b3-4246-8778-ef4cb757f93a","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:26.920596Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:83ee94fab5a3384afc361af13f4b84490200a817fb0d46bdcdb7aa72d60138c0","observation_id":"2826b79b-b1f3-4660-96ee-00fc5ed7eed8","resolution":{"observed_at":"2026-08-06T19:08:32.904151Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:32.451342Z","title":"Adavit: Adaptive vision transformers for efficient image recognition,","venue":null,"work_id":"195eb8fd-50f8-450d-82ae-09e1cebbce39","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:26.994541Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:39bcc6c08846cf187275968c67cbfd963b89fd9a38975d30b54150756a174779","observation_id":"6a555021-b771-4f5e-97e8-aa0173728abb","resolution":{"observed_at":"2026-08-06T19:08:32.578741Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:32.181491Z","title":"Desparsify: Adversarial attack against token spar- sification mechanisms,","venue":null,"work_id":"98118efc-cd31-47a1-903e-25920758cc92","year":2024},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.124385Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:bd004e1bd87665f7f9f6b1a64c4c2736cefda05afa2350f983478b2857e68352","observation_id":"90ab9cbb-113e-437d-9d3a-0b0102b4222f","resolution":{"observed_at":"2026-08-06T19:08:32.304065Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:31.853876Z","title":"Slowformer: Adversarial attack on compute and energy consumption of efficient vision transformers,","venue":null,"work_id":"a5e45dbc-dc8a-48b1-9bc3-6eec26a96324","year":2024},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.212300Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:4e879dee1dbb42027b1464f7781209d4425e7245865174bc26a4fc351c88ce73","observation_id":"c6b1d4ba-87b0-4bb7-95c3-f1090b5177ce","resolution":{"observed_at":"2026-08-06T19:08:32.006131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:31.577722Z","title":"Curse of dimensionality in adversarial examples,","venue":null,"work_id":"084db082-12bf-4b17-869e-271425133e61","year":2019},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.449562Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:7dd5d1614f20e512e749a3d5752f1ef591a0eb96687564560a5f004da49aca3e","observation_id":"063ce7f1-a2db-4e15-8ec1-6d529ae80fe9","resolution":{"observed_at":"2026-08-06T19:08:31.689639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:31.160582Z","title":"Robustness against adversarial attacks using dimensionality,","venue":null,"work_id":"e1136d4c-50e6-4def-9960-a1e34a4de865","year":2021},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.607505Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:c6d290425deb9fbf53db9804c43e4607f58a80c85b0abb86f342b81d4498992a","observation_id":"76151a66-138b-442c-8d68-555f8ee42383","resolution":{"observed_at":"2026-08-06T19:08:31.345796Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:30.885346Z","title":"Robust perception for autonomous vehicles using dimensionality reduction,","venue":null,"work_id":"42958e33-d075-4514-a810-9e01d49ce0dc","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.735607Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:a027d9cc1adba475fd4726b85cb66775704d5cdf068fb591e4c909f3d30677ec","observation_id":"f6ee1f68-ca43-4f50-bca1-33b41c86c326","resolution":{"observed_at":"2026-08-06T19:08:31.009178Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:30.619231Z","title":"Oddr: Outlier detection & dimension reduction based defense against adversarial patches,","venue":null,"work_id":"383a7159-066e-4730-897f-835ffd1193f8","year":2025},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.803451Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:c9a7722409b866f22a22904ea2c56888c13928a6e5669cfd8ba86518ccb9b587","observation_id":"474a13f5-48fb-4b16-a505-3b1a564e8ebc","resolution":{"observed_at":"2026-08-06T19:08:30.744957Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2402.06249","last_updated":"2024-02-09T08:52:47Z","snapshot_observed_at":"2026-07-06T17:27:49.646799Z","submitted_at":"2024-02-09T08:52:47Z","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","version":1},"cited_work":{"arxiv_id":"2402.06249","doi":null,"metadata_source":"pith","pith_arxiv_id":"2402.06249","snapshot_observed_at":"2026-08-06T19:08:28.772904Z","title":"Anomaly Unveiled: Securing Image Classification against Adversarial Patch Attacks","venue":"cs.CV","work_id":"de1c4094-d04f-4edd-857e-d07adf979f4d","year":2024},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.864986Z"},"links":{"cited_paper":"/paper/2402.06249","citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:c24fe2ffc83325006824a12ec34254d2996f539f2c1c79ccbf2b02c9e34bc83f","observation_id":"20b5cd61-2a6c-445e-ac37-50b129633a1b","resolution":{"observed_at":"2026-08-06T19:08:28.847830Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2010.11929","last_updated":"2021-06-03T13:08:56Z","snapshot_observed_at":"2026-07-06T02:11:23.670680Z","submitted_at":"2020-10-22T17:55:59Z","title":"An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.11929","snapshot_observed_at":"2026-08-06T19:08:27.975792Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:27.975792Z"},"links":{"cited_paper":"/paper/2010.11929","citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:f5147da64b8cf2e78102b303952003e18773f807e68983fb7c60207c11f62830","observation_id":"ec5b2b79-c018-4dfd-ae1e-1a2660246a43","resolution":{"observed_at":"2026-08-06T19:08:27.975792Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:30.352828Z","title":"Vit-togo: Vision transformer accelerator with grouped token pruning,","venue":null,"work_id":"69fe8688-7e11-4d3f-a761-3a1170c52204","year":2024},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.041649Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:7fc4c10eef59f6a893f8ecbb5192053b97cbc5e382601c4cdafeccba15b18aa9","observation_id":"f45081b7-29cc-4c78-96c7-c87b6c609241","resolution":{"observed_at":"2026-08-06T19:08:30.470277Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:28.105153Z","title":"Dynam- icvit: Efficient vision transformers with dynamic token sparsification,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.105153Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:b3c08bdf8286f06240d683e9c1dcf8a2a35f709d3a566d2163d87e972bedfd8b","observation_id":"69adca8d-aa57-4f7b-87f7-3aa2337323cb","resolution":{"observed_at":"2026-08-06T19:08:28.105153Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:28.172464Z","title":"Ilfo: Adversarial attack on adaptive neural networks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.172464Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:cb57ae64138f486ce68f9e5f6a58d3dc04814d26636280ffc2cd9c9f68afadb5","observation_id":"bc0b27cb-b543-4d97-9c82-ad63dace4d96","resolution":{"observed_at":"2026-08-06T19:08:28.172464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:30.136423Z","title":"Skipnet: Learning dynamic routing in convolutional networks,","venue":null,"work_id":"c991d20c-e843-4814-a6a4-8ab89a63d1b9","year":2018},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.245656Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:d17be6a1c7df23454ec99e637db3363c460beb9c50b6783e29f5f58422bf182a","observation_id":"596fd32f-bbef-4978-9ee5-796e6eb93841","resolution":{"observed_at":"2026-08-06T19:08:30.228961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:28.311579Z","title":"Gradauto: Energy-oriented attack on dynamic neural networks,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.311579Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:9a27babd11fdead0c5d20c29d8f471ce8da62965bf079253e6dc30e9734eb6b7","observation_id":"b8764600-8277-43a7-b14e-b612bf721344","resolution":{"observed_at":"2026-08-06T19:08:28.311579Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.02432","last_updated":"2021-02-25T22:38:35Z","snapshot_observed_at":"2026-08-04T03:00:18.680368Z","submitted_at":"2020-10-06T02:06:52Z","title":"A Panda? No, It's a Sloth: Slowdown Attacks on Adaptive Multi-Exit Neural Network Inference","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.02432","snapshot_observed_at":"2026-08-06T19:08:28.375787Z","title":"A panda? no, it’s a sloth: Slowdown attacks on adaptive multi-exit neural network inference,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.375787Z"},"links":{"cited_paper":"/paper/2010.02432","citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:7f4f1eba3b091f982ed91eb87770e2f8ac770e4947e431ff8995996f317f5fe1","observation_id":"228cf454-02ed-4dcc-8d1a-2dbf7525f19f","resolution":{"observed_at":"2026-08-06T19:08:28.375787Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:29.800862Z","title":"Nicgslowdown: Evaluating the efficiency robustness of neural image caption generation models,","venue":null,"work_id":"5b0682c3-6823-4adf-915c-4ef607387a5c","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.460017Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:7ab4b5424b5b83bd3ab052b97a3d25cb1dd3bfecec097e2c52f048beb6c6c024","observation_id":"d7009502-623a-4f81-90f9-ede41e0ed159","resolution":{"observed_at":"2026-08-06T19:08:29.974603Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:29.602387Z","title":"Transslowdown: Efficiency attacks on neural machine translation systems,","venue":null,"work_id":"17400bb2-86c0-4e40-aad0-400e934abcfb","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.522679Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:5b4fa6ceb1c67bb184049ecbfcb384dce2aec538ea2d2249bbe0c1b05ed967db","observation_id":"187e3467-6127-4d47-9f9d-bd61a208a020","resolution":{"observed_at":"2026-08-06T19:08:29.698577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:29.309554Z","title":"Diffpure: Certifiably robust deep learning via diffusion models against adversarial attacks,","venue":null,"work_id":"a1ee8a61-c21e-4732-893c-f30bb6fd4de0","year":2022},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.583834Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:dfb98855e9121b5437d2eaa6ca2d474e9fd01dd6679e930e01e321dcedc63721","observation_id":"2230c753-c202-4e9f-873e-90a400633bef","resolution":{"observed_at":"2026-08-06T19:08:29.438692Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T19:08:29.012051Z","title":"Barrage of random transforms for adversarially robust defense,","venue":null,"work_id":"863ece34-de9a-4f06-ade1-21a8b8102d48","year":2019},"citing_paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T19:08:28.641978Z"},"links":{"citing_paper":"/paper/2608.04680"},"observation_digest":"sha256:5a4cab038f670646a49e47d8012935a87f37e7f2835c0e59400ff8918715105a","observation_id":"3a86de68-4a6b-44da-807b-b604513e69e8","resolution":{"observed_at":"2026-08-06T19:08:29.147442Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2608.04680","last_updated":"2026-08-05T10:47:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T23:12:16.654516Z","submitted_at":"2026-08-05T10:47:58Z","title":"MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs"},"reference_resolution":{"displayed":20,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":5,"verified_exact":1,"verified_fuzzy":14},"total_outbound_references":20},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 20 of 20 outbound references and 0 inbound Pith citation observations for arXiv:2608.04680."}