Paper Citation Record · LEDGER

Distillation-Enhanced Physical Adversarial Attacks

As of 11 August 2026, this Paper Citation Record lists 32 of 32 outbound references and 2 inbound Pith citation observations for arXiv:2501.02232.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2501.02232 v1

Coverage vector

measured 32 of 32 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-10T22:17:06.462391Z

measured 34 of 34 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-11T06:34:44.6726+00:00

measured 2 of 2 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links, observed 2026-08-11T04:16:45.154556Z

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: pith, observed 2026-08-06T22:05:02.550126Z

Reference resolution

32 of 32 outbound references displayed

verified exact2
verified fuzzy28
unresolved2
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 41502597-d2b7-4766-81c6-5a3fba321ab9 · outbound

This paper cites Mysticmask: Adversarial mask for impersonation attack against face recognition systems,.

Distillation-Enhanced Physical Adversarial Attacks Mysticmask: Adversarial mask for impersonation attack against face recognition systems,

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.874045Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 72fcc5ef-97ef-4907-b4e2-2b0cf7e4911b · outbound

This paper cites An analysis of adversarial attacks and defenses on autonomous driving models,.

Distillation-Enhanced Physical Adversarial Attacks An analysis of adversarial attacks and defenses on autonomous driving models,

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.862646Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation e32c060f-7ca8-4ee8-8977-7cdd288883e6 · outbound

This paper cites Invisible pedestrians: Synthesizing adversarial clothing textures to evade industrial camera-based 3d detection,.

Distillation-Enhanced Physical Adversarial Attacks Invisible pedestrians: Synthesizing adversarial clothing textures to evade industrial camera-based 3d detection,

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.851001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 7ec5dfa7-bae4-4f81-bf0c-1543261dd8a2 · outbound

This paper cites Universal physical camouflage attacks on object detectors,.

Distillation-Enhanced Physical Adversarial Attacks Universal physical camouflage attacks on object detectors,

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.839595Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation b332f043-1267-4b7e-9b40-bb4731ba7fba · outbound

This paper cites Naturalistic physical adver- sarial patch for object detectors,.

Distillation-Enhanced Physical Adversarial Attacks Naturalistic physical adver- sarial patch for object detectors,

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.828988Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation f36de3bf-69b5-437e-9c43-ca34ccc6face · outbound

This paper cites Dap: A dynamic adversarial patch for evading person detectors,.

Distillation-Enhanced Physical Adversarial Attacks Dap: A dynamic adversarial patch for evading person detectors,

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.816997Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation f338ac70-6261-449a-aef2-2a04d585324f · outbound

This paper cites Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,.

Distillation-Enhanced Physical Adversarial Attacks Physically realizable natural-looking clothing textures evade person detectors via 3d modeling,

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.804943Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 5cb2911b-4cd7-4fbe-87de-c0f12d3eb285 · outbound

This paper cites Prompt-Guided Environmentally Consistent Adversarial Patch.

Distillation-Enhanced Physical Adversarial Attacks Prompt-Guided Environmentally Consistent Adversarial Patch

Reference 8

Resolution: verified exact; local_arxiv, observed 2026-08-10T22:17:06.549840Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 94304e0c-b840-455e-8fe6-605ee069fc14 · outbound

This paper cites CapGen:An Environment-Adaptive Generator of Adversarial Patches.

Distillation-Enhanced Physical Adversarial Attacks CapGen:An Environment-Adaptive Generator of Adversarial Patches

Reference 9

Resolution: verified exact; local_arxiv, observed 2026-08-10T22:17:06.529650Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 726ff8e4-716d-4ae5-94c7-94a3ca1b7744 · outbound

This paper cites Fooling automated surveillance cameras: adversarial patches to attack person detection,.

Distillation-Enhanced Physical Adversarial Attacks Fooling automated surveillance cameras: adversarial patches to attack person detection,

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.793854Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation bf8096d6-c9eb-49fc-9d84-cf9b9ebd9e94 · outbound

This paper cites The v1 hypothesis-creating a bottom-up saliency map for preattentive selection and segregation,.

Distillation-Enhanced Physical Adversarial Attacks The v1 hypothesis-creating a bottom-up saliency map for preattentive selection and segregation,

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.782612Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation d5e1d1a2-8a9c-4dc0-a63e-e5838cf11a91 · outbound

This paper cites Attention capture by eye of origin singletons even without awareness—a hallmark of a bottom-up saliency map in the primary visual cortex,.

Distillation-Enhanced Physical Adversarial Attacks Attention capture by eye of origin singletons even without awareness—a hallmark of a bottom-up saliency map in the primary visual cortex,

Reference 12

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.771563Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 8c84fe93-16ac-435d-8695-8249ce450b15 · outbound

This paper cites Physical adversarial examples for object detectors,.

Distillation-Enhanced Physical Adversarial Attacks Physical adversarial examples for object detectors,

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.760306Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation c388ba16-94f6-483b-99b0-42c1278b51cc · outbound

This paper cites Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,.

Distillation-Enhanced Physical Adversarial Attacks Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition,

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.749914Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 69dc3a2e-38a5-427c-9e35-8438f9d4287a · outbound

This paper cites Seeing isn’t believing: Towards more robust adversarial attack against real world object detectors,.

Distillation-Enhanced Physical Adversarial Attacks Seeing isn’t believing: Towards more robust adversarial attack against real world object detectors,

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.737638Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 1762d385-5d20-4577-ad75-c417ab24a6b5 · outbound

This paper cites Adversarial t- shirt! evading person detectors in a physical world,.

Distillation-Enhanced Physical Adversarial Attacks Adversarial t- shirt! evading person detectors in a physical world,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.725880Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation e615fe86-f060-42be-8261-a930d07c5bf1 · outbound

This paper cites Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices,.

Distillation-Enhanced Physical Adversarial Attacks Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices,

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.714057Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 945c49f4-a67d-409d-b88d-e303cec2b181 · outbound

This paper cites Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon,.

Distillation-Enhanced Physical Adversarial Attacks Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phenomenon,

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.703623Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 9e2f5383-7362-4bc5-bb23-633228c58203 · outbound

This paper cites {SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,.

Distillation-Enhanced Physical Adversarial Attacks {SLAP}: Improving physical adversarial examples with {Short-Lived} adversarial perturbations,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.692862Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 2decfe1c-dd18-49af-87ab-1784c3c68327 · outbound

This paper cites Distilling the Knowledge in a Neural Network.

Distillation-Enhanced Physical Adversarial Attacks Distilling the Knowledge in a Neural Network

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-10T22:17:06.414785Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1ee2f4da-6038-4a6a-9058-3de6e3461d64 · outbound

This paper cites Learning without forgetting,.

Distillation-Enhanced Physical Adversarial Attacks Learning without forgetting,

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.681385Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 98099dd2-2a46-4954-930c-30242660b00c · outbound

This paper cites Mimicking very efficient network for object detection,.

Distillation-Enhanced Physical Adversarial Attacks Mimicking very efficient network for object detection,

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.670260Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 6616342b-2152-4d14-99ff-38428497e703 · outbound

This paper cites Online model distillation for efficient video inference,.

Distillation-Enhanced Physical Adversarial Attacks Online model distillation for efficient video inference,

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.658716Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 6a3a2870-1c08-4693-a560-8b6a8e4f4b61 · outbound

This paper cites Distillation as a defense to adversarial perturbations against deep neural networks,.

Distillation-Enhanced Physical Adversarial Attacks Distillation as a defense to adversarial perturbations against deep neural networks,

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.648047Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation b0d1bdfa-168d-41cd-9a8a-926404c6febe · outbound

This paper cites Extending Defensive Distillation.

Distillation-Enhanced Physical Adversarial Attacks Extending Defensive Distillation

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-10T22:17:06.434675Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation fd22598f-be19-4a6f-ab61-e458e635796a · outbound

This paper cites Ad- versarially robust distillation,.

Distillation-Enhanced Physical Adversarial Attacks Ad- versarially robust distillation,

Reference 26

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.636166Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 2a6048fc-8850-42e2-806e-48bf2b2431d8 · outbound

This paper cites Revisiting adversarial robustness distillation: Robust soft labels make student better,.

Distillation-Enhanced Physical Adversarial Attacks Revisiting adversarial robustness distillation: Robust soft labels make student better,

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.624908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation caa1ae7e-0440-4499-ad7a-199e89242597 · outbound

This paper cites A* sampling,.

Distillation-Enhanced Physical Adversarial Attacks A* sampling,

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.613813Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 4b095fa6-755b-4b42-a12d-61a009f04a60 · outbound

This paper cites I-divergence geometry of probability distributions and minimization problems,.

Distillation-Enhanced Physical Adversarial Attacks I-divergence geometry of probability distributions and minimization problems,

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.601980Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 69438373-d44e-4b37-a495-e773f60a5008 · outbound

This paper cites Histograms of oriented gradients for human detection,.

Distillation-Enhanced Physical Adversarial Attacks Histograms of oriented gradients for human detection,

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.588224Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation e5341b0d-f19a-403d-a122-b21518624a57 · outbound

This paper cites Synthesizing robust adversarial examples,.

Distillation-Enhanced Physical Adversarial Attacks Synthesizing robust adversarial examples,

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.575483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 4e6b3ba7-5cd7-4abe-b99d-ed5d3052945e · outbound

This paper cites T-sea: Transfer-based self-ensemble attack on object detection,.

Distillation-Enhanced Physical Adversarial Attacks T-sea: Transfer-based self-ensemble attack on object detection,

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T22:17:06.563358Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Pith citing papers

Observation 600e0510-1e62-4928-a63e-0d250220ceac · inbound

ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection cites this paper.

ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection Distillation-Enhanced Physical Adversarial Attacks

Reference 31

Resolution: verified exact; local_arxiv, observed 2026-08-06T22:05:02.759034Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-11T06:34:44.6726+00:00.

Observation 17bd6729-fdbd-4e57-affd-43439bec9869 · inbound

ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection cites this paper.

ColorFD: A Finite-Difference Guided Black-Box Physical Adversarial Attack for Remote Sensing Object Detection Distillation-Enhanced Physical Adversarial Attacks

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-11T04:16:45.154556Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.