Pith. sign in

Paper Citation Record · LEDGER

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks

As of 13 August 2026, this Paper Citation Record lists 52 of 52 outbound references and 0 inbound Pith citation observations for arXiv:2411.15210.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2411.15210 v4

Coverage vector

measured 52 of 52 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T16:50:39.342783Z

measured 52 of 52 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-13T06:32:02.005865+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

52 of 52 outbound references displayed

  • verified exact3
  • verified fuzzy35
  • unresolved13
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 6f59b5e1-a1bc-4132-973b-d6cfeadaee28 · outbound

This paper cites Intriguing properties of neural networks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Intriguing properties of neural networks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.048937Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.048937Z digest=sha256:a7114c40dfd9b45623575b5e629e56566ea74eeb3b3b774d5b03fa63e76dc073

Observation 66973b75-0100-44dc-a0b6-b920a3d769a6 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Explaining and Harnessing Adversarial Examples

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.055705Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.055705Z digest=sha256:3df9bb7b930fba3106b5da9a083f65302acddc7541069eec84b2b67ee3249c88

Observation 20948b61-e006-4fe8-bc50-6593989623fb · outbound

This paper cites Towards evaluating the robustness of neural networks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Towards evaluating the robustness of neural networks,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.275222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.061850Z digest=sha256:3f1890bdf04564cc04b1b01432ba61db861cf11dde93fe3edd1af087bc04e4ed

Observation 001a0f63-188c-4843-b65d-289ce23f6e02 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.067614Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.067614Z digest=sha256:02972127b2352752526abc6b8eb691edc6e977a61635560da9c609f568711af1

Observation 1bea075f-416e-42b1-9be4-5d689d5fc334 · outbound

This paper cites Reliable evaluation of adversarial ro- bustness with an ensemble of diverse parameter-free attacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Reliable evaluation of adversarial ro- bustness with an ensemble of diverse parameter-free attacks,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.259633Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.073631Z digest=sha256:f2c5bc22cd23008b2caca26ce14c9a39699a4714d15816405e9a8e456148e841

Observation 92a9f79d-f2ca-4e0f-be20-fd4ead5becfe · outbound

This paper cites Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.242968Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.079617Z digest=sha256:7f5ff5d880598006c8269c0ffc387d992910bbd08420222f0ced93ba268187ee

Observation 03eb0b7c-3035-462e-819a-98f938dcf976 · outbound

This paper cites Imbalanced gradients: a subtle cause of overestimated adversarial robustness,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Imbalanced gradients: a subtle cause of overestimated adversarial robustness,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.226922Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.087914Z digest=sha256:5709f8f84cfd41c41ddcb56ce2711a5fc02bafb146073e4eb836784f8ce24014

Observation d3e7226e-743c-44f7-a891-39d1abbeec1c · outbound

This paper cites Practical evaluation of adversarial robustness via adaptive auto attack,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Practical evaluation of adversarial robustness via adaptive auto attack,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.210022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.094287Z digest=sha256:b7e3b0e70cbc2c38387db53b560378539a06e5286f2a60b5ad54b4d540ca53c6

Observation d95ddf3b-5c5e-4bce-b4f8-0589fba60d40 · outbound

This paper cites Diversity can be trans- ferred: Output diversification for white-and black-box at- tacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Diversity can be trans- ferred: Output diversification for white-and black-box at- tacks,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.193505Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.102842Z digest=sha256:4fbeb97d46f2dd32f5947bf7fd99f46eefef04d6ae2cdf5f381c3b27a5805ee0

Observation 5258fbb7-4090-46b9-983f-53d9780156d2 · outbound

This paper cites An Alternative Surrogate Loss for PGD-based Adversarial Testing.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks An Alternative Surrogate Loss for PGD-based Adversarial Testing

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.589035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.110782Z digest=sha256:81b41ede3b76a5e6d386af5b409c98c2bd125b577ee8215d4d126e269a11ebbe

Observation 6b8b955b-981e-4dba-9aa6-45094dd5f7a1 · outbound

This paper cites Lafeat: Piercing through adversarial defenses with latent features,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Lafeat: Piercing through adversarial defenses with latent features,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.177537Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.117230Z digest=sha256:9971055a98a18621cc57b5a2c42dc00b5c63eb3c2a692b7fb5d419ba0fbb41da

Observation c0ca2ec6-59b3-4379-a4ae-b35935e080a7 · outbound

This paper cites Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks

Reference 12

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.565376Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.125954Z digest=sha256:b08297f28c2a4c3251a5a442aed0548e45c30b34d1222d9452c015b528b80380

Observation ccd0f513-a141-4ad1-b9c6-d5acf4a06dfd · outbound

This paper cites Efficient loss function by minimizing the detrimental effect of floating-point errors on gradient-based attacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Efficient loss function by minimizing the detrimental effect of floating-point errors on gradient-based attacks,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.160205Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.131627Z digest=sha256:b2e836a0c2eb27510b5c89320215d6868a3574d35461c64d86d249639d1ba0c3

Observation 6a6768f9-1244-4e67-830a-3f2c7ab6d88f · outbound

This paper cites Conceptual captions: A cleaned, hypernymed, image alt-text dataset for automatic image captioning,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Conceptual captions: A cleaned, hypernymed, image alt-text dataset for automatic image captioning,

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.144209Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.136443Z digest=sha256:194d76b16c4ae202f38eff9e1e94eebe7b29ecf47c36db8dbe6456578556b95d

Observation ce4da521-63d4-4368-aa4d-26669fcc76df · outbound

This paper cites Adversarial examples in the physical world.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Adversarial examples in the physical world

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.141350Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.141350Z digest=sha256:28a66978848b8c7651bce6530fbd455120c16c297c0480eb3acd7a45a79d7708

Observation 72e81e8a-f7e3-42ae-b84f-226a3c2401a0 · outbound

This paper cites Theoretically principled trade-off between robustness and accuracy,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Theoretically principled trade-off between robustness and accuracy,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.128137Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.146575Z digest=sha256:5a255041551195fb9d0e476803802cf226023f3c2cc5326b0fa6a7b6e11600dd

Observation a5575de3-de62-4c61-8767-ad45ce16317c · outbound

This paper cites Minimally distorted adversarial ex- amples with a fast adaptive boundary attack,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Minimally distorted adversarial ex- amples with a fast adaptive boundary attack,

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.111481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.151364Z digest=sha256:aabca4cec757b3801e3989be1dc58d53557728069b9a5c9744a462166d76a420

Observation 00d3a4b5-5359-4194-921f-00d26b8cd1ab · outbound

This paper cites Square attack: a query-efficient black-box adversarial attack via random search,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Square attack: a query-efficient black-box adversarial attack via random search,

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.094279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.156262Z digest=sha256:b9ba453f8d8ea71a702d14c8e0bb7edbf8c2863f66327d2b3b11b400476ebd47

Observation 093b77bc-24d5-40dd-913f-84c13c29468e · outbound

This paper cites Diversified adversarial attacks based on conjugate gradient method,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Diversified adversarial attacks based on conjugate gradient method,

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.075597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.161188Z digest=sha256:0b7978f993ea41594586866fcbfa4a011208598625e7502d09e3319d861f4d47

Observation e1b7e8b6-1a68-401e-b780-4de9ca1410de · outbound

This paper cites Robust- bench: a standardized adversarial robustness benchmark,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robust- bench: a standardized adversarial robustness benchmark,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.057767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.166313Z digest=sha256:5bb90c113e3f3216144acc5fe40fcfb77b3f5eaaa150c81fbe8d28ac77a47806

Observation 55867ec0-6cd2-4f28-b522-2c3e588058aa · outbound

This paper cites Deep residual learning for image recognition,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Deep residual learning for image recognition,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.041029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.171513Z digest=sha256:00524e418b0b17a074f8f2c5c2c0318ccec5349ccc8e3175525b662b3190fbf5

Observation 1f01e393-66f4-425b-aa8b-cec6fe78598f · outbound

This paper cites Wide Residual Networks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Wide Residual Networks

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.176560Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.176560Z digest=sha256:03ab0a6371322545ba4482a148b064a22910ccaf1eb3c600da63c9d18eebdb96

Observation 48363661-9077-4791-ad13-9829f0137679 · outbound

This paper cites An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.182085Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.182085Z digest=sha256:ec7e07dcb537a522ff74b379310f6a6b8fe1be4d8c01111eb40725e3b9d76398

Observation f8f7634d-1036-4d8e-b40d-5e0b15a2e659 · outbound

This paper cites Xcit: Cross-covariance image transformers,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Xcit: Cross-covariance image transformers,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.024423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.187041Z digest=sha256:24e58b00b95cd713a4b0a3cf6149c25a9fbf7e628712a0a0f8c33bc11eb512f5

Observation 4706e1b8-e5d4-422f-bab7-ef7cc18c2101 · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Swin transformer: Hierarchical vision transformer using shifted windows,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.006124Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.192580Z digest=sha256:94195c36bb4dea6bc2ef562e24c47a4fda2687433e967a2ba4d9810136e858db

Observation c3280815-eead-4902-8efa-5ed8fbfb297e · outbound

This paper cites A convnet for the 2020s,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A convnet for the 2020s,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.986038Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.197701Z digest=sha256:9340e02c221ef821cbbc13adec1663b06332c2cc900991e99a1521cdfd6ef0b4

Observation 05a1413a-e6be-463d-b988-0814abb915bc · outbound

This paper cites Robust Principles: Architectural Design Principles for Adversarially Robust CNNs.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robust Principles: Architectural Design Principles for Adversarially Robust CNNs

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.202552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.202552Z digest=sha256:09b08165d60f0b548e4ec8df389006f43bd757abef99c83a4786ab308dff6ae4

Observation d3d1bbc1-4ec8-428c-ad79-f86df6f10161 · outbound

This paper cites Better diffusion models further improve adversarial training,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Better diffusion models further improve adversarial training,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.967684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.207841Z digest=sha256:218003df7a0619a13928d44c39012e0da9bfa4062020e9d6c7704404e085758e

Observation a58e0303-2c86-4edd-b023-56c2a6e7f120 · outbound

This paper cites Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing

Reference 29

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.473682Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.212916Z digest=sha256:c13d4826e134e7990a1180feae223a6e87c337bfb794a632a14d48458459bb6d

Observation 6f2e0ccd-ba98-4c44-a04f-f7bf381d5b29 · outbound

This paper cites Decoupled Kullback-Leibler Divergence Loss.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Decoupled Kullback-Leibler Divergence Loss

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.218130Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.218130Z digest=sha256:fcff633c02b51f296ec89bd3f6b0263a3191806dfc940d0a91e703ad55e65152

Observation 0cd4bb0f-ec2d-45c9-ba09-8448d12ed434 · outbound

This paper cites Fixing Data Augmentation to Improve Adversarial Robustness.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Fixing Data Augmentation to Improve Adversarial Robustness

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.223345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.223345Z digest=sha256:aea3fe131d0cfc9f561a625766593b3a779bf74db36ad53e6509cc256da7c1da

Observation 3b63f931-945c-4271-aaa2-532af2a3c20c · outbound

This paper cites Improving robustness using generated data,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Improving robustness using generated data,

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.950760Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.228699Z digest=sha256:61c0a985f3300ee2b5ff92e736c1b48f57b63ccc0674b0e178af49dc7fb488e6

Observation 061d4fbb-7772-45a5-8088-03185beb5e40 · outbound

This paper cites Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.233846Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.233846Z digest=sha256:1e77bdb3044dfe762bfd0977ca969a5353a94faf0b63e94296c17914cf6ab81d

Observation cecf9fe4-d556-46c3-8f74-b2c7e5583326 · outbound

This paper cites Revisiting residual networks for adversarial robustness,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Revisiting residual networks for adversarial robustness,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.932352Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.240176Z digest=sha256:5132f12c916c19ebfc0b715ead767514badcd8351db0e7582051f4c7e38c39c1

Observation 4fc4d796-b473-4c26-83f0-aa9354e95035 · outbound

This paper cites A light recipe to train robust vision transformers,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A light recipe to train robust vision transformers,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.913640Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.246191Z digest=sha256:206d01b818fb8023865e217a0ba0e56b76fb176f9c0a1e5be671bdddac5e68b3

Observation 636a85df-0fbb-47c9-9d5c-9d19c3f2cb96 · outbound

This paper cites Robustness and accuracy could be reconcilable by (proper) definition,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robustness and accuracy could be reconcilable by (proper) definition,

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.896837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.253927Z digest=sha256:e90ee66fd92c564ee7dbee744cd6a5f6b3a4f4e5f46ee831e5f249522863478e

Observation adb0ea16-2fd4-420c-a660-971d233620fb · outbound

This paper cites A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.259074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.259074Z digest=sha256:bbfb5f5845d885376c9fb4873cd0e6a6bc3fd458e0e990eb37ad70a6ab55a555

Observation 4ac9dd59-6524-40e3-ba64-c354d573bda1 · outbound

This paper cites MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.264508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.264508Z digest=sha256:202c6ca844bf120863841ea6327a312ca6e712a58bc3919489881aface3f1656

Observation 4ed3dd59-1d7e-4eac-90a3-5ef95f535980 · outbound

This paper cites Revisiting adversarial training for imagenet: Architectures, training and general- ization across threat models,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Revisiting adversarial training for imagenet: Architectures, training and general- ization across threat models,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.880021Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.269625Z digest=sha256:fa80e9dec5671152cdaec67dd054aee5e0f4ae10f123dcc90d719829d71f1ed2

Observation cc00f5e4-2df8-42d5-900e-cce4e152dba3 · outbound

This paper cites Local intrinsic dimensionality I: an extreme- value-theoretic foundation for similarity applications,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Local intrinsic dimensionality I: an extreme- value-theoretic foundation for similarity applications,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.863245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.274360Z digest=sha256:b0fe58334b370d1de20a8de9442bfa49daf95a1a6b7077529f49f938f9d632bd

Observation 69776b6f-3fc4-4725-b87e-b10940994ebd · outbound

This paper cites Char- acterizing adversarial subspaces using local intrinsic dimen- sionality,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Char- acterizing adversarial subspaces using local intrinsic dimen- sionality,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.847589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.279349Z digest=sha256:74a96280f0b1212ee45b96658ccd89fa0866252cbf06687d49cb0996a4816ff0

Observation 97231832-92c9-4e54-8791-688fe90b455d · outbound

This paper cites Collider: A robust training framework for backdoor data,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Collider: A robust training framework for backdoor data,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.830794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.284282Z digest=sha256:0a25d9b25a817100a7e0eb77a946dce7253e15a4f0c5e0f91cb13e70386fd67e

Observation 0528c785-c639-4a56-8d36-77f39fe78e3d · outbound

This paper cites Detecting backdoor samples in contrastive language image pretraining,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Detecting backdoor samples in contrastive language image pretraining,

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.807334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.290241Z digest=sha256:7f217cf2687d8256672237e96ce39d3c1f50adea40efd310abb62bfedff1b3cf

Observation 03152866-be24-41ac-9960-f4326b003d01 · outbound

This paper cites Ldreg: Local dimensionality regular- ized self-supervised learning,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Ldreg: Local dimensionality regular- ized self-supervised learning,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.790171Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.296148Z digest=sha256:555ce110ef59aab4ece87741dfb9cf96d8d675682a87bcf53fbb98cfed6cb8f9

Observation 4f216019-d157-48ee-9165-5e4d103491f9 · outbound

This paper cites an unresolved cited work.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Unresolved cited work

Reference 45

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:50:39.773848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.301860Z digest=sha256:d3955bbf6749b6482e6a9bd650e35f0386e0f2f1128cf91e7d821530f21a65dc

Observation 544386ef-d984-4876-b27c-23a50f3a9c43 · outbound

This paper cites Figure 2.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Figure 2

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.757626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.307807Z digest=sha256:6c4dea603b2c49f22d8a14122ef1e559865bd2f24ce15295f78d026d1a62a382

Observation b8560c3d-d955-4c9d-8db9-738269a80a79 · outbound

This paper cites The models’ robustness (%) evaluated on different K ′ values.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks The models’ robustness (%) evaluated on different K ′ values

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.740766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.313168Z digest=sha256:d83ec71937ec7d8eb4d596885c68052aa179872e4093bb4caf210075642177c1

Observation ccfc8d40-5e3c-4ab1-b4a6-8a3b4b73a849 · outbound

This paper cites Seven defense models from the CIFAR10 dataset were subjected to a con- straint of 100 attack steps.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Seven defense models from the CIFAR10 dataset were subjected to a con- straint of 100 attack steps

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.722766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.318959Z digest=sha256:ea6ffac235f4cadf8340d772c347b696473f145647261f2e76497ed655a1d44a

Observation dc84a6ad-d7f2-40bc-b130-58743a07591e · outbound

This paper cites To extend our analysis, this section introduces comparative experiments with optimizer-based approaches, focusing on the widely recognized Adam optimizer.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks To extend our analysis, this section introduces comparative experiments with optimizer-based approaches, focusing on the widely recognized Adam optimizer

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.706401Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.325248Z digest=sha256:badfd1cdc644cd4030b5a8010fd2ce87dc6b620495adb8cf3bed621a8e4349d8

Observation 41b4df7c-b369-4913-9ba2-ebc8dea89eb2 · outbound

This paper cites The robustness (%) of the models, evaluated using the PGDpm attack with varying β values, on the CIFAR10 and Ima- geNet datasets.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks The robustness (%) of the models, evaluated using the PGDpm attack with varying β values, on the CIFAR10 and Ima- geNet datasets

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.689671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.332508Z digest=sha256:f35fc31d59666ea6c0ba71ad9299e011d843814514abf2a2fe5d540d13300196

Observation b34c366c-5182-4bcc-8699-3afcec9acc30 · outbound

This paper cites We assessed the same set of five ImageNet defense models discussed in the main body of the paper.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks We assessed the same set of five ImageNet defense models discussed in the main body of the paper

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.673117Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.337942Z digest=sha256:95c7416111d7ff4f725286fdab57e24dc93f392e28556a0cd5bb3978034d6c0f

Observation e70793d8-d271-4927-989d-b198850d6690 · outbound

This paper cites We tested perturbation ranges of 1, 2, and 3, with a batch size of 32.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks We tested perturbation ranges of 1, 2, and 3, with a batch size of 32

Reference 52

Resolution
malformed identifier
raw_fallback, observed 2026-08-12T16:50:39.656094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.

source=pdf_text observed=2026-08-12T16:50:39.342783Z digest=sha256:9b13ef34d419f31ef147f88c438fe65c2a7c657775c8830815bc90f703132a24

Pith citing papers

No inbound Pith citation observations are available.