{"as_of":"2026-08-12T13:17:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b3f6ea5c3b586bbdaca1671c00b8b7821fdcd1b1ee21453989fbcfbab0f72b66","coverage":[{"denominator":40,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":40,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-10T20:15:02.244110Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-12T06:34:41.77262+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-06-30T22:48:53.926480Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-07-01T13:45:45.886005Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"cited_work":{"arxiv_id":"2501.09086","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.09086","snapshot_observed_at":"2026-07-01T13:45:45.886005Z","title":"Salient information preserving adver- sarial training improves clean and robust accuracy","venue":null,"work_id":"382c6b8c-c2a2-4dd0-89e9-7a509c1bf6c1","year":2025},"citing_paper":{"arxiv_id":"2605.11502","last_updated":"2026-06-05T23:14:21Z","snapshot_observed_at":"2026-08-12T13:02:05.093943Z","submitted_at":"2026-05-12T04:22:26Z","title":"Robust Biomedical Publication Type and Study Design Classification with Knowledge-Guided Perturbations","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-13T02:22:32.352808Z"},"links":{"cited_paper":"/paper/2501.09086","citing_paper":"/paper/2605.11502"},"observation_digest":"sha256:c34f863da5fb08be21280d1c0d169a75913cc28da10175f4b2c151c4d311939c","observation_id":"a9a437b6-98e7-496f-b6ea-b7e667d69798","resolution":{"observed_at":"2026-05-13T02:27:07.550107Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"cited_work":{"arxiv_id":"2501.09086","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2501.09086","snapshot_observed_at":"2026-07-01T13:45:45.886005Z","title":"Salient information preserving adver- sarial training improves clean and robust accuracy","venue":null,"work_id":"382c6b8c-c2a2-4dd0-89e9-7a509c1bf6c1","year":2025},"citing_paper":{"arxiv_id":"2605.11502","last_updated":"2026-06-05T23:14:21Z","snapshot_observed_at":"2026-08-12T13:02:05.093943Z","submitted_at":"2026-05-12T04:22:26Z","title":"Robust Biomedical Publication Type and Study Design Classification with Knowledge-Guided Perturbations","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-06-30T22:48:53.926480Z"},"links":{"cited_paper":"/paper/2501.09086","citing_paper":"/paper/2605.11502"},"observation_digest":"sha256:8fc92a6acb658235d781ee66c20c3ebacf53cb18d7c5bec6c78ff110fcb80471","observation_id":"0f293f2d-42d3-47fb-a6ea-c539f01b63cb","resolution":{"observed_at":"2026-07-01T13:45:45.887714Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2501.09086/citation-record","integrity":"/paper/2501.09086/integrity","json":"/paper/2501.09086/citation-record.json","paper":"/paper/2501.09086"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:03.087202Z","title":"Square attack: a query-efficient black-box adversarial attack via random search","venue":null,"work_id":"5d2bc1c7-efb8-4ee7-b96e-31f22344284e","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.033988Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:9d587987b7be6a1a66f2e2cdb4e41a4985a9a31eb07d842d9a19fce82a3091cc","observation_id":"ac8bc25e-038f-44fa-ac33-1f2dc759b8c2","resolution":{"observed_at":"2026-08-10T20:15:03.094948Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:03.062833Z","title":"Obfus- cated gradients give a false sense of security: Circumventing defenses to adversarial examples","venue":null,"work_id":"27c8989a-e79b-46ed-b143-9c6f64875b90","year":2018},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.039582Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:89583f3a632706851398a24b1027b240914dc44493e8075df7a30459472dfd36","observation_id":"7e20896f-a937-4daa-b0e1-eb9280588255","resolution":{"observed_at":"2026-08-10T20:15:03.068744Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:03.044161Z","title":"Are transformers more robust than cnns? Advances in Neural Information Processing Systems, 34:26831–26843, 2021","venue":null,"work_id":"d66458f5-1dcf-46f2-b2d0-988462214ce9","year":2021},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.045400Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:bf55a89d7b52971ffb6f9133d7dd6208655fad7c95274532a0732d5e1364128d","observation_id":"ca002be3-c804-4dda-954d-9f0887df14d8","resolution":{"observed_at":"2026-08-10T20:15:03.049872Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:03.021408Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"f341c210-7062-461d-8dff-3efac24c9f6a","year":2017},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.050412Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:0676daf736f3fcf2b12d757c8a818d16fd5ebdb802224b180656ca20050b407b","observation_id":"f880818a-d3a4-41aa-84db-a113e7311747","resolution":{"observed_at":"2026-08-10T20:15:03.028840Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.996435Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","venue":null,"work_id":"92ea4f6a-6212-4036-be8d-a227caf9b6b9","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.055990Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:87e6cec0edf19a121d69fa4dcc453ab7614746e42b098f7871f94ed83b83e9c9","observation_id":"9208ca10-8749-47cb-b244-648be0285b50","resolution":{"observed_at":"2026-08-10T20:15:03.003942Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.974176Z","title":"Reliable evalua- tion of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"82835c9e-b1a9-4fd0-b41f-82ccc2975dee","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.061123Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:2bf565824c62c6662c7bfeb5e9ef1e0de7576d89a62d2d0ab3f08a8a2cb044f8","observation_id":"bac1af56-b73d-4e88-bb5e-de63f20289d8","resolution":{"observed_at":"2026-08-10T20:15:02.980457Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.954004Z","title":"On the connection between adversarial ro- bustness and saliency map interpretability","venue":null,"work_id":"132593a5-eb33-443c-b5dc-95c78f551166","year":null},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.067083Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:324e781ff407958db03b9b5cc55f5e4c6ee69c91ce70660c254059f266c32fed","observation_id":"3f677c65-a672-4d84-9c2a-c24ee4435f1c","resolution":{"observed_at":"2026-08-10T20:15:02.960402Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.935843Z","title":"Cub-200-2011 segmentations, 2022","venue":null,"work_id":"e1f1ab81-5df3-480e-8aa7-3646904d6005","year":2011},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.073395Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:ae02fb8dac2e411ac196a0d7b9f85bec57e0a714c2afb55bb91ddb42e652d13e","observation_id":"111670ee-291f-482f-845e-06692a7f262b","resolution":{"observed_at":"2026-08-10T20:15:02.941207Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02774","last_updated":"2018-09-10T17:08:27Z","snapshot_observed_at":"2026-07-06T06:17:47.185268Z","submitted_at":"2018-01-09T03:24:53Z","title":"Adversarial Spheres","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02774","snapshot_observed_at":"2026-08-10T20:15:02.078782Z","title":"Adversarial spheres","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.078782Z"},"links":{"cited_paper":"/paper/1801.02774","citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:291f915eaf81d33dad32b630c63a289ab92d074d1796e5668d758bf12a5c76de","observation_id":"f78a7551-165b-498f-b67e-65135da74d0a","resolution":{"observed_at":"2026-08-10T20:15:02.078782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-10T20:15:02.084393Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.084393Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:4b1269b5e33656899460a776018a015abf8884cd417651f4d8dc4b0c2fa73b49","observation_id":"93942ba1-ca4d-4b1c-b313-5723fbbe8cbe","resolution":{"observed_at":"2026-08-10T20:15:02.084393Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.915936Z","title":"Delving deep into rectifiers: Surpassing human-level per- formance on imagenet classification","venue":null,"work_id":"d4eeb720-2616-4037-acf4-eb8ff54fd50c","year":2015},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.091022Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:d16ad27a17ff206342a95aacee76fb426c0f72396e2fc49dbbdb5a7cf67f2cdc","observation_id":"edbce7f2-e915-4e62-94be-f11781c85c20","resolution":{"observed_at":"2026-08-10T20:15:02.922799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.895036Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"fd9ec38e-d620-4be6-b184-fa8ec6566069","year":2016},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.096162Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:7ee4a2145bf2af1522302436f3e52c652ce05f036318fa2234c60ecb39436651","observation_id":"a856cb1b-d8ff-4da2-a2c0-7f91191c54ae","resolution":{"observed_at":"2026-08-10T20:15:02.901189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.874963Z","title":"Adversarial example defenses: ensembles of weak defenses are not strong","venue":null,"work_id":"4367ac70-2ab9-4970-b7bb-bd1fba71f95c","year":2017},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.101743Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:6cbaea7a56d4435dd6e2e41650bdcf6611a2bf17b9ebd792e2693a8372c30567","observation_id":"fe380880-6dc9-4bbd-bd14-aa12237347bc","resolution":{"observed_at":"2026-08-10T20:15:02.881670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.848180Z","title":"Densely connected convolutional net- works","venue":null,"work_id":"73c6311e-e748-43c4-8ba0-96628fd4f1a0","year":2017},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.107218Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:d064565bf9e738d7b13b84faf00a1c5cd73073b7ee6dd556d37fb7ae2cde4d42","observation_id":"a581722d-d35c-4970-aa2f-a9659275d7fc","resolution":{"observed_at":"2026-08-10T20:15:02.856429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.820716Z","title":"Adversar- ial examples are not bugs, they are features","venue":null,"work_id":"c9700910-bd5b-49b4-b452-43f93d734ee0","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.113122Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:de9a2bd18eab00712117fb3665fe11ad9d570e63fededdae139c68d1196b6b78","observation_id":"aed03174-a5a1-4201-af63-b87683912745","resolution":{"observed_at":"2026-08-10T20:15:02.829487Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.795539Z","title":"Deep imitation learning for au- tonomous vehicles based on convolutional neural networks","venue":null,"work_id":"91af0a6e-f93b-4f36-a1e4-722b0d6fcfbf","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.118709Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:8306d06a6f3e65a0cb61af167d95091736faf36efe75ebf5ede6e6d5cd69c903","observation_id":"57a4b3a1-2db1-43b3-a9ed-ef718e6ba68d","resolution":{"observed_at":"2026-08-10T20:15:02.802943Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.123562Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.123562Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:82cd4458076cd03609c9d1455467774dc71da712c88d1e48150b29cf082a3208","observation_id":"5f2b727c-1007-457a-8199-c0673822a003","resolution":{"observed_at":"2026-08-10T20:15:02.123562Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.754976Z","title":"Towards deep learn- ing models resistant to adversarial attacks","venue":null,"work_id":"85b96823-d5ff-4bc7-aa42-3fff4d4960cd","year":2018},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.128264Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:5063fe8d1f169db10545f06195a71c0b7cb2184525b88cb5172c559171c0dd08","observation_id":"c0217ec9-1ec2-4ea6-9c13-8d436ed94e9e","resolution":{"observed_at":"2026-08-10T20:15:02.762774Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.734422Z","title":"International evaluation of an ai system for breast cancer screening","venue":null,"work_id":"8391aae2-61a2-4a20-bab1-ffa9f5f00ec2","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.133144Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:2d8517cb4bbc10e63318220ede68241eb340ca83f4c5fa01b51634fb36d08265","observation_id":"2ee0a0f1-a52a-4dcf-b83f-f81c674b6d7e","resolution":{"observed_at":"2026-08-10T20:15:02.741004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.714594Z","title":"Generating adversar- ial samples in mini-batches may be detrimental to adversar- ial robustness","venue":null,"work_id":"b5e9d304-7f37-4f29-b484-e4a95165d473","year":2023},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.137960Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:ec6917946de272d268e0a1ad518ea9913e60026d053c92c43770f22218c37869","observation_id":"d1cbf2ef-cfc3-45c6-8e65-c814f88370e5","resolution":{"observed_at":"2026-08-10T20:15:02.721492Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.689683Z","title":"Overfitting in ad- versarially robust deep learning","venue":null,"work_id":"0544e5b8-a829-48b6-86fb-00e69baf1f52","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.143309Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:6a63c284409f3fae6472e7674de4eca7d0410b34cac5cdf34e8ab0e6faa552df","observation_id":"613ee3e3-bcd6-4a67-b05d-e6fa6715bf07","resolution":{"observed_at":"2026-08-10T20:15:02.700572Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.662742Z","title":"Adversarial training for free! Advances in Neural Information Processing Systems , 32, 2019","venue":null,"work_id":"e2b62edc-f6df-4bf8-9116-844878886e0c","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.148600Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:def072f7ef015000377860920bb891eff70e0f046c12d7440dd83ac23e5810e0","observation_id":"c7ac8bbe-bfd3-4058-9bc2-f02e6aeea719","resolution":{"observed_at":"2026-08-10T20:15:02.670599Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.642051Z","title":"Learning important features through propagating activation differences","venue":null,"work_id":"31f80ca4-40de-41a6-a3e9-b1866ba1ba7d","year":2017},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.153659Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:2daf11dd2f5b2efb304cdfcc1bd165664ac2b17622ae43bd22a71d1aec41966c","observation_id":"e6721532-040a-4c1d-9c08-164aa39e998f","resolution":{"observed_at":"2026-08-10T20:15:02.647584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6034","last_updated":"2014-04-19T11:54:52Z","snapshot_observed_at":"2026-07-06T03:31:30.452356Z","submitted_at":"2013-12-20T16:45:54Z","title":"Deep Inside Convolutional Networks: Visualising Image Classification Models and Saliency Maps","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6034","snapshot_observed_at":"2026-08-10T20:15:02.158713Z","title":"Deep inside convolutional networks: Visualising image classification models and saliency maps","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.158713Z"},"links":{"cited_paper":"/paper/1312.6034","citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:dc3e669305667b5db40f72a8c9b46b0f1aaa40870517fbc0aa62596f9c8903a8","observation_id":"3f7f772a-59ac-48b6-afb1-acb951e43cc1","resolution":{"observed_at":"2026-08-10T20:15:02.158713Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6806","last_updated":"2015-04-13T07:58:17Z","snapshot_observed_at":"2026-08-08T13:18:11.819437Z","submitted_at":"2014-12-21T16:16:37Z","title":"Striving for Simplicity: The All Convolutional Net","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6806","snapshot_observed_at":"2026-08-10T20:15:02.164434Z","title":"Striving for simplicity: The all convolutional net","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.164434Z"},"links":{"cited_paper":"/paper/1412.6806","citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:e8a4003583ffb664dd2df1688c0c7d0b22d6968885b033512aeed7a25880c00e","observation_id":"e50bef3b-88ef-426b-925d-e2fb9a55219e","resolution":{"observed_at":"2026-08-10T20:15:02.164434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.625142Z","title":"Disentan- gling adversarial robustness and generalization","venue":null,"work_id":"a3b5d0ff-becc-4954-998b-66b32967b0ae","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.169692Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:53b8fd74d7182946651e0e6c77352737ab63d99585665b563553b3a029577bf7","observation_id":"19387ab7-4800-4478-885c-4c3ac10cff37","resolution":{"observed_at":"2026-08-10T20:15:02.630443Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.608004Z","title":"Is robustness the cost of accuracy?– a comprehensive study on the robustness of 18 deep image classification models","venue":null,"work_id":"348d82c6-0142-4ed6-b6b6-49277d22d92c","year":2018},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.174623Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:8cda284822e1cb96c6a3753d6208c1be9adb68d8be807a435e1d43a646719424","observation_id":"eb1c91b7-7273-444b-ae60-e5fc0dd092a4","resolution":{"observed_at":"2026-08-10T20:15:02.613218Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.179476Z","title":"Axiomatic attribution for deep networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.179476Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:ba1f45e659281e8a657023289337e021f0c424e5861a76256ec1f6a9ae9307be","observation_id":"1c657d51-e80e-4e5f-9eb2-c5ad9da6179a","resolution":{"observed_at":"2026-08-10T20:15:02.179476Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.572542Z","title":"In- triguing properties of neural networks","venue":null,"work_id":"aa89af8e-d420-4f2d-bbfb-8b762919c226","year":2014},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.184671Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:ca7b682847b12a20ea84e9a898e712ca72d12c9be5b63f7fa3bc0cb627ec58f2","observation_id":"140033f3-9dd5-4097-b7e1-d6a0345e2a3c","resolution":{"observed_at":"2026-08-10T20:15:02.579220Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.550593Z","title":"Adversarial training and robustness for multiple perturbations","venue":null,"work_id":"deb737a7-f17a-4d3a-b37b-a0c9e1f067f7","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.189734Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:97c8002d80292cd50bddbd80b00bea8b9fb6010e5bb69a0bd2ea4550e560e3fe","observation_id":"57fe6045-36a3-46a4-9403-8f18e7781611","resolution":{"observed_at":"2026-08-10T20:15:02.557737Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.528318Z","title":"Robustness may 9 be at odds with accuracy","venue":null,"work_id":"36856758-6832-4765-858f-ca2b95c2fe32","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.194979Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:4caa45851480a3c4eb54bd2a190923bfc9ff8903d8003f922588fa5c278d3004","observation_id":"a3f0f56c-13f0-4d8a-acde-f08649922647","resolution":{"observed_at":"2026-08-10T20:15:02.534697Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.510504Z","title":"The Caltech-UCSD Birds-200- 2011 dataset, 2011","venue":null,"work_id":"eacc5ab6-62e8-4116-8303-83f3d2a295de","year":2011},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.200095Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:fee370d7da5462e0b69c0485665151bc72d79ace12b0c7af65752fa6e8f92c75","observation_id":"a586d277-123d-47a9-900a-5328fb0f31ec","resolution":{"observed_at":"2026-08-10T20:15:02.515906Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.492502Z","title":"Fast is better than free: Revisiting adversarial training","venue":null,"work_id":"3b1b8238-0e01-4f8b-aebd-1a1aa7c921f1","year":null},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.204997Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:e6dfd78ec0e53129651c5c7b8c8dc5aa6a1f4d7f1abee3d1bdb63a1f2c46aff9","observation_id":"ca539f72-fffd-4413-ac9b-d0f3b180f0e3","resolution":{"observed_at":"2026-08-10T20:15:02.498269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.474999Z","title":"On the algorith- mic stability of adversarial training","venue":null,"work_id":"ec1a6fae-3df3-4ead-8fdc-6445643bbcd5","year":2021},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.210147Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:8764a42441b0be38b62e06a83a541c8774a92be38432eb94b73920449ef8ae3e","observation_id":"10d1f39c-7224-4010-82f3-1ec785378860","resolution":{"observed_at":"2026-08-10T20:15:02.480534Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07146","last_updated":"2017-06-14T06:06:48Z","snapshot_observed_at":"2026-08-08T14:57:17.868613Z","submitted_at":"2016-05-23T19:27:13Z","title":"Wide Residual Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07146","snapshot_observed_at":"2026-08-10T20:15:02.215494Z","title":"Wide residual networks","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.215494Z"},"links":{"cited_paper":"/paper/1605.07146","citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:88d1c52b35986c9f377ea690914c927ce119ed4f1c5164588536f242fd748e91","observation_id":"abd159e2-dd40-4494-b43f-22ace83198b9","resolution":{"observed_at":"2026-08-10T20:15:02.215494Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.455652Z","title":"You only propagate once: Accelerat- ing adversarial training via maximal principle","venue":null,"work_id":"23f773d1-06fc-4920-902d-e14d255280e5","year":2019},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.220996Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:8ff1fda709987a410ba8248a605d799477e9075990adbcb78cf024a5529b5cb8","observation_id":"b9b1adff-e258-4de4-a1d9-a0dc5acb7b98","resolution":{"observed_at":"2026-08-10T20:15:02.461196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.227679Z","title":"Theoretically principled trade-off between robustness and accuracy","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.227679Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:b7bf45386548afad31f93a5fc200858b07be73473cd75b9a42c806f8adc588c3","observation_id":"a74d9975-47e3-4c66-bb1d-24280b5ee943","resolution":{"observed_at":"2026-08-10T20:15:02.227679Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.428199Z","title":"Attacks which do not kill training make adversarial learning stronger","venue":null,"work_id":"659e504e-2885-48bd-8cf7-5fb17231ab3e","year":2020},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.233688Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:6e82433132583969e56c73af9de6100c710499e51e86b21ae89d3e08ce170a31","observation_id":"69f6f67d-a4b1-4956-978b-e209f4553697","resolution":{"observed_at":"2026-08-10T20:15:02.433630Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.410133Z","title":"Improving accuracy-robustness trade- off via pixel reweighted adversarial training","venue":null,"work_id":"1c5c385b-2040-4034-b2b8-d9fb52fd7729","year":2024},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.238808Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:cf1e46834cec015a48c7c0da7e9254ff73d6ad710623c471b5076650b848c277","observation_id":"aa34063e-4735-4720-b31a-cb57dfbfdc69","resolution":{"observed_at":"2026-08-10T20:15:02.416117Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-10T20:15:02.387772Z","title":"Understanding the robustness in vision transformers","venue":null,"work_id":"d6590584-ba3f-4719-a2e3-b3fe71cf3bb1","year":2022},"citing_paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-10T20:15:02.244110Z"},"links":{"citing_paper":"/paper/2501.09086"},"observation_digest":"sha256:24576ad72dbaaebeeb527cd7c068183961c843e828baefe5774e32ab6b508a20","observation_id":"dd7f3ee3-0496-43d5-8aca-8898ef5e1995","resolution":{"observed_at":"2026-08-10T20:15:02.396317Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2501.09086","last_updated":"2025-01-15T19:12:59Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-12T03:47:38.566284Z","submitted_at":"2025-01-15T19:12:59Z","title":"Salient Information Preserving Adversarial Training Improves Clean and Robust Accuracy"},"reference_resolution":{"displayed":40,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":8,"verified_exact":0,"verified_fuzzy":32},"total_outbound_references":40},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-12T06:34:41.77262+00:00","source":"crossref"},{"observed_at":"2026-08-12T06:34:36.333875+00:00","source":"retraction_watch"}],"thesis":"As of 12 August 2026, this Paper Citation Record lists 40 of 40 outbound references and 2 inbound Pith citation observations for arXiv:2501.09086."}