{"as_of":"2026-08-09T03:21:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:69123c8513ec54aa812e17dc91f051455534c9f0be5e7813f19ce582545143a4","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:07:59.202250Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16318/citation-record","integrity":"/paper/2505.16318/integrity","json":"/paper/2505.16318/citation-record.json","paper":"/paper/2505.16318"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.586594Z","title":"DorPatch: Distributed and occlusion-robust adversarial patch to evade certifiable defenses,","venue":null,"work_id":"68d6da80-d3f1-4d24-941b-c49ec1b38e14","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.407167Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5b6dee9b62effbfb27cacbd21bf3a3107235af1627c9be05aceddd50f699594e","observation_id":"692bdb65-8ca3-48d6-97bf-07bebdfd0d6a","resolution":{"observed_at":"2026-08-07T15:08:08.644062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.471390Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":"a7e66a9b-432c-4457-822e-8e9f7b26a277","year":2012},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.462723Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:480e89267e1f337feb7150e32950918144fc9e23f95a386ad5e2453810c051e5","observation_id":"813cb60b-668c-453e-8ca8-b716c4693469","resolution":{"observed_at":"2026-08-07T15:08:08.523611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.503248Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.503248Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:0c680ac91673a7e665c6c1e96dffa5f7ec9dacb7a57003809263ecfaa03933bf","observation_id":"f69ea120-f8f3-4915-b019-9deb08cbd33e","resolution":{"observed_at":"2026-08-07T15:07:52.503248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.563189Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.563189Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:c1f7cd91c44feaa61ca6c3a80a897a339b7fa75d762e10ff8b94cdd964724859","observation_id":"1c3bf134-dea9-4802-863a-fcf4bda9f554","resolution":{"observed_at":"2026-08-07T15:07:52.563189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.663865Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.663865Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:12b7210f429e39c2858a08f8ce981b49119ad86c794781f7063152137659080f","observation_id":"17493acb-2746-43b0-b2ef-d8361a00567b","resolution":{"observed_at":"2026-08-07T15:07:52.663865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.745639Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.745639Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:758a16e11297f9d029a57ce84cf88387607ff8c0f6111037ab530f72cc0cfe30","observation_id":"3902649a-2ec8-4601-8a76-afdea50a0044","resolution":{"observed_at":"2026-08-07T15:07:52.745639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-07-06T06:16:16.225385Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-07T15:07:52.799214Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.799214Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:a39b435f761fff734f67c0a5849bcd6f21ee4406c7091d7b1ca834c633b20a5c","observation_id":"81b34f5b-5b6f-4e4b-8428-543663f36d81","resolution":{"observed_at":"2026-08-07T15:07:52.799214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.283006Z","title":"Lavan: Localized and visible adversarial noise,","venue":null,"work_id":"14b7c279-2437-4c62-bcb9-47ad0b5d15c8","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.831462Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5568a33b99407be05c5def8b1b8b1c2b5b56118fa9227434a94d684aecf0a3e5","observation_id":"ef35909a-ed5d-4527-afcf-af9a98c55537","resolution":{"observed_at":"2026-08-07T15:08:08.352186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.183565Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":"a5ed4617-9579-4de4-a803-beead4c014ca","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.904324Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8336fa2dd0a8862e2dbb3592c3c8abed25d146d841f968de2eb5dcbac656cd20","observation_id":"be140ea1-efa7-41f3-9f78-a6e9965fe9fc","resolution":{"observed_at":"2026-08-07T15:08:08.232571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.02299","last_updated":"2019-04-23T16:44:32Z","snapshot_observed_at":"2026-07-06T06:43:22.227602Z","submitted_at":"2018-06-05T17:04:37Z","title":"DPatch: An Adversarial Patch Attack on Object Detectors","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.02299","snapshot_observed_at":"2026-08-07T15:07:53.039673Z","title":"Dpatch: An adversarial patch attack on object detectors,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.039673Z"},"links":{"cited_paper":"/paper/1806.02299","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:f18e073978e375da2a3c55aa7f66b3e358a1d527209355020e4e837991ebb704","observation_id":"01df4e24-4aa6-4c7b-9515-fb628c4abe85","resolution":{"observed_at":"2026-08-07T15:07:53.039673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.096055Z","title":"Pad: Patch- agnostic defense against adversarial patch attacks,","venue":null,"work_id":"768c0a28-c0a9-4d52-baf2-a03d6b9e8425","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.187831Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:b3eb284dbaa9757403d76c4a25e62063077c37a108bb2feef30dd9e4fa7e14a9","observation_id":"9a9a3d12-6c5a-4419-9820-c5bc33a1df50","resolution":{"observed_at":"2026-08-07T15:08:08.132529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.010039Z","title":"Certified defenses for adversarial patches,","venue":null,"work_id":"b018a577-33e5-4f37-8d21-dab75abcf3e2","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.315565Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5aea6a79be1a65fa67ece629d28475ebfeebcf37bd9632c1fe0ce4576c835cf9","observation_id":"9b074267-cf51-4e2f-b47c-21d09e377e11","resolution":{"observed_at":"2026-08-07T15:08:08.049251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.905355Z","title":"{PatchGuard}: A provably robust defense against adversarial patches via small receptive fields and masking,","venue":null,"work_id":"fd1d26eb-827d-476b-8f58-93486ce6afb0","year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.459817Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7b90646311a46a90b79131cbbe846327a826b7aa8a9991709a63848d4ddbcfb9","observation_id":"27a21386-2b42-4ac1-bd32-6f65512fc4e9","resolution":{"observed_at":"2026-08-07T15:08:07.951855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.818201Z","title":"{PatchCleanser}: Certifiably robust defense against adversarial patches for any image classifier,","venue":null,"work_id":"d6b4b4d1-dad0-480d-ac9a-b6cbffa53963","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.584964Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4a1482b381b7f50d0c82c72a50378c763d5751a9d33e9713f8a633c58dff4b25","observation_id":"55eaff19-0aef-4ebb-9b17-607f89158e2a","resolution":{"observed_at":"2026-08-07T15:08:07.853498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.679782Z","title":"{PatchCURE}: Improving certifiable robustness, model utility, and computation effi- ciency of adversarial patch defenses,","venue":null,"work_id":"c370f7f0-1bc1-4dcc-905e-f1d94c89381b","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.735800Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fd626fe5351c656295c2a3d715e72104dab5c033ce812b9b57e3f4ed2d437a6a","observation_id":"bf4e3836-9d9c-49e0-a8a7-a90d5c7f6ff7","resolution":{"observed_at":"2026-08-07T15:08:07.728212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.557179Z","title":"Defending against adversarial attacks by randomized diversification,","venue":null,"work_id":"4c738eb8-25cd-4cb1-8c7a-3881ac13e11a","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.853619Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:3d6cd9a0ffe56ad58b9018cf34b65d27c2007374647419bf3f4dc6a55f962850","observation_id":"bdcf039b-1f6d-4a0a-a212-fd43bc5873a7","resolution":{"observed_at":"2026-08-07T15:08:07.613090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.350498Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks,","venue":null,"work_id":"fd101696-4f31-48d3-97ef-2ee6d443cdaf","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.993670Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:16099412b6a1091d170de5f13b30ed73fa16bd3a5561505d289e65076ab5d965","observation_id":"37cbdbd3-180c-4818-b6a8-cda7af65c514","resolution":{"observed_at":"2026-08-07T15:08:07.479931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.186336Z","title":"Communication in the presence of noise,","venue":null,"work_id":"e59dc87f-cd8c-4741-b815-82b6e237396d","year":1949},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.073658Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:b98700c624010084174740dd725fbb0798530ba0f5e2685467f9f69235644e65","observation_id":"e7409901-ac08-4b82-ab8c-b0bc94c1ea6b","resolution":{"observed_at":"2026-08-07T15:08:07.231969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.982714Z","title":"Fourier features let networks learn high-frequency functions in low-dimensional domains,","venue":null,"work_id":"65249590-7f89-41b8-b2f8-148bd84a5c31","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.195583Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:aa43650a14bad63a0fee774b23d65788daf240511664a74e07ee1bd2905b1bbd","observation_id":"f45e5a56-b506-4ab4-a3a6-21422451a105","resolution":{"observed_at":"2026-08-07T15:08:07.084720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.858504Z","title":"Statistics of natural image categories,","venue":null,"work_id":"c72770ea-d445-45f4-a46d-521a3821e718","year":2003},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.247049Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:199c4df2e8d7541f675d35482741076919f8ee4e26c738dee6ba0820473bec9d","observation_id":"e25b59a7-ad85-40ad-86b4-01ad13a4e1e3","resolution":{"observed_at":"2026-08-07T15:08:06.904180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.361727Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.361727Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8af0b24c966ac72817486408c369485147bdc3adae5a286a3dce3a18a6740785","observation_id":"df0e5cb4-10b7-46cc-a823-daad42703e66","resolution":{"observed_at":"2026-08-07T15:07:54.361727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.592898Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"d8371811-643a-4de9-86b2-b051ca7bce33","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.464697Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5fd648feba438857ebb4652a342944d14913b0ecab3750b89dffd706588ea457","observation_id":"a71156b5-1440-48c9-adf3-08753003d33c","resolution":{"observed_at":"2026-08-07T15:08:06.738292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.373567Z","title":"The security of machine learning,","venue":null,"work_id":"106bd33e-772f-49a9-9e2e-bb008bfc89cd","year":2010},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.554399Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:916f7d32c6dc5e46aec8c1fe89d339756e8acc6c88c166532f1d632d143d425a","observation_id":"9942dc31-a438-4124-a945-7dd8b532c422","resolution":{"observed_at":"2026-08-07T15:08:06.463919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.190008Z","title":"Evasion attacks against machine learning at test time,","venue":null,"work_id":"c85edadc-58b4-451c-8b26-5963feb1557d","year":2013},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.623565Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9bd4fcfe7e10921a8ab4e7c96b52b47a415f98b2619ab93e924c50908d34d5d4","observation_id":"a0f4c822-adc5-48ea-a8d7-785d0051ecdc","resolution":{"observed_at":"2026-08-07T15:08:06.267470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.995697Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":"2a994ced-95fd-45fa-a34e-c8eaefd7c87e","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.685306Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:86dfd4eadb3e14ccf69deff41de45dd541f01961686d7206fd62b1098090b219","observation_id":"588024b9-00c7-44db-9daa-d252a2850d90","resolution":{"observed_at":"2026-08-07T15:08:06.101369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.883791Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack,","venue":null,"work_id":"f04b2157-8d71-4bd4-ba1e-bedd57975b26","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.739472Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:518c2d05a676f7c535e6dacd4e9a2526aca29e8d95b6bac0d22dc4d3e70565f0","observation_id":"f2b9efe8-e4da-45f1-affc-df823d881b50","resolution":{"observed_at":"2026-08-07T15:08:05.957663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.791087Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.791087Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:50ba0bd74f6cee4887b71cd2d7e68f9e0acb7a9124e929526a9d7c17dc0eb0d5","observation_id":"f7472de9-fc9c-410f-a223-8761dac9d17b","resolution":{"observed_at":"2026-08-07T15:07:54.791087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.690458Z","title":"On visible adversarial perturbations & digital watermarking,","venue":null,"work_id":"3b442c3e-5959-4c45-a65c-855e11b7c622","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.859082Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:b87e402ccef10c8fbd98aafc3701267f32e7d5642c055e51e4d3b6906cd5ddea","observation_id":"cba142cc-135c-4051-9af1-19bbf41b64a2","resolution":{"observed_at":"2026-08-07T15:08:05.764095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.908093Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.908093Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4dd9ecf26f7b993d03f19316ba09e79b4908cc7001dfc313d820e23c2b5630aa","observation_id":"b36742a7-cb6f-4dc7-a239-e9cc3e510486","resolution":{"observed_at":"2026-08-07T15:07:54.908093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.511275Z","title":"Patchattack: A black-box texture-based attack with reinforcement learning,","venue":null,"work_id":"82ecfa7e-bf64-479e-9427-ea1031d6d960","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.966597Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:f397b4c3ea4981a8ff45987a429391749485f2825d9ede259da63c1bde4aa1dc","observation_id":"56754783-0af7-40f2-930c-71c11b1645b4","resolution":{"observed_at":"2026-08-07T15:08:05.575161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-02T06:39:31.308346Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T15:07:54.998845Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.998845Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fbf9cb28a934327089605985e92822e0cbc9cb808b5ecba1a5efcc2d1d14e09f","observation_id":"fd2d35d2-676e-4e53-9097-6cbf2ad34c53","resolution":{"observed_at":"2026-08-07T15:07:54.998845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.310907Z","title":"Local gradients smoothing: Defense against localized adversarial attacks,","venue":null,"work_id":"4f1eae5f-60d7-4047-a640-457921faa1bf","year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.086869Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:da96f1a13ef7d63094388c61aaef0b1ac4f4b7c3c4251d0cb653c98fd4709f1f","observation_id":"2b1cb77b-7f03-4308-b3a1-3b61b4bc491f","resolution":{"observed_at":"2026-08-07T15:08:05.393452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.181265Z","title":"Clipped bagnet: Defending against sticker attacks with clipped bag-of-features,","venue":null,"work_id":"d426c790-8534-4405-8161-eeec61c7588a","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.163006Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:0d84cc5a8a7f91833b5f0141e9e79754447d355440ba92182107c1f4c361adbe","observation_id":"f960c475-1cdd-4c7a-ba49-55faa9b80586","resolution":{"observed_at":"2026-08-07T15:08:05.240018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.074797Z","title":"Sentinet: Detecting localized universal attacks against deep learning systems,","venue":null,"work_id":"2756416a-eb9f-4755-9998-13cf72aacdaa","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.219982Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5ea3fd7361eabc0bf153a8591e4ae7a01ab7682157df4d9f785e7e591759d582","observation_id":"cd5fee64-39b4-4686-bca8-98d032050a1b","resolution":{"observed_at":"2026-08-07T15:08:05.114793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.923960Z","title":"Jedi: Entropy-based localization and removal of adversarial patches,","venue":null,"work_id":"42840a62-ec73-4969-a5a6-250074cfa0cf","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.283905Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:ab715288b00bfc6354786aed817bdf6ef20ddbf9dc62bd4ea2886a08df718dd7","observation_id":"ecc94b7a-5219-4b74-a5b5-27bd04a1c21f","resolution":{"observed_at":"2026-08-07T15:08:04.993985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.814456Z","title":"Patchzero: Defending against adversarial patch attacks by detecting and zeroing the patch,","venue":null,"work_id":"1ed92a51-1fa9-47cf-a17b-651d9aa00ef7","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.357001Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:21098c086cbb0f50a7c9673969f09f9dfd6192a495b1a0aa1b0a869a6691834c","observation_id":"3c4234fc-86df-4bb1-a5fd-9446a1af7fbb","resolution":{"observed_at":"2026-08-07T15:08:04.850701Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.664612Z","title":"Adversarial training against location- optimized adversarial patches,","venue":null,"work_id":"4b06a808-32ca-49e5-82f7-c455e9ca16b8","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.439930Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:2772023ac866e4a1cc7a90060948e269d2699a28ba5d2bd7f7abef4a21803662","observation_id":"7e4aa260-9e54-4060-9373-71497deb4e2d","resolution":{"observed_at":"2026-08-07T15:08:04.747048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.564843Z","title":"Defending against physically realizable attacks on image classification,","venue":null,"work_id":"e34a25f0-6271-4050-9d63-5628b042e565","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.564574Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:559c40eae06edb087888377fb9776eafa7896595fe8272bd86914b665a80194e","observation_id":"964503ef-0b4e-4fc2-9347-80a1fc16f525","resolution":{"observed_at":"2026-08-07T15:08:04.605042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.445216Z","title":"Efficient training methods for achieving adversarial robustness against sparse attacks,","venue":null,"work_id":"9b437c21-5617-413a-a979-60b34a9d801d","year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.752613Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4d1dbb841ce0c105e3870bd94572d282fa0c2755d75cfbe2421ee7be4fc58a26","observation_id":"257a3cd5-34e5-4d43-98a0-6ae509db6aea","resolution":{"observed_at":"2026-08-07T15:08:04.496537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.321034Z","title":"Learning a deep convolu- tional network for image super-resolution,","venue":null,"work_id":"1529469c-9289-445e-891f-96446212228a","year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.821678Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:509e97d81422b088c1dcbd9eede1c3b2c6f7db987151117b75694ca9ca127b4b","observation_id":"b5e7fc04-8d98-4eb1-bf07-68e3e6fd0d03","resolution":{"observed_at":"2026-08-07T15:08:04.378939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.213455Z","title":"Accurate image super-resolution using very deep convolutional networks,","venue":null,"work_id":"080f0392-01d0-4bbb-9a8e-4b8eaa837bb1","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.901713Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7661e36d28a5eb467402d89f2d1b9c3a773d2723f475307fa3f5b2b75e4fb0b2","observation_id":"c65b8bb6-d715-401e-a645-8859e20aa6ce","resolution":{"observed_at":"2026-08-07T15:08:04.243566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.117374Z","title":"Photo-realistic single image super-resolution using a generative adversarial network,","venue":null,"work_id":"ffcc773e-1324-4ab7-8e7b-4416c7d80f33","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.038657Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:59de1d86b49570c6bf92750cf420521280c1081b6a8b80150f089daf27482c93","observation_id":"dc784e51-adb6-42a5-a2b0-7db628cff473","resolution":{"observed_at":"2026-08-07T15:08:04.158436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.004678Z","title":"Esrgan: Enhanced super-resolution generative adversar- ial networks,","venue":null,"work_id":"536e0948-2d36-4c8d-bcc3-06050d285964","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.240194Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:277353ce19b665bc510bbdf198ad46eb755b65b519dcaa5ef5098cb45b4dc592","observation_id":"0b5e29e9-fb3c-48a8-a536-b3423ea67bec","resolution":{"observed_at":"2026-08-07T15:08:04.045357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.885077Z","title":"Image super- resolution as a defense against adversarial attacks,","venue":null,"work_id":"a3650833-219f-4063-a483-4d13ac2ebabb","year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.388225Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d9b8db799500b040a98ac20cf113c3bc73b3ddef298240ed801011cfc9d8665b","observation_id":"646e0551-02fc-4af1-89e6-e64277251a26","resolution":{"observed_at":"2026-08-07T15:08:03.923479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-04T18:06:26.992880Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-07T15:07:56.509341Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.509341Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:b36d74138d534efe377bf65ce1f6fcf0cd8111f1365ee3eca60a9a6df8a4fd4d","observation_id":"dbc64a64-c0f2-493f-be44-3ad245c44d6f","resolution":{"observed_at":"2026-08-07T15:07:56.509341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.784335Z","title":"Analysis and comparison of various image downsampling and upsampling methods,","venue":null,"work_id":"3d552603-3f6e-4b1b-b352-ada064a0baa6","year":1998},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.633272Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:af8c72cc5d299ee5b1dd98615e31d84d32562cf16733ae591be169ca0ddd6445","observation_id":"915f979e-feae-4295-b81e-dc537e266104","resolution":{"observed_at":"2026-08-07T15:08:03.822377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:56.761909Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.761909Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:caec7670f5a026fb435ffacf102e5cccbbf936498e731a44f3837a4d47197e88","observation_id":"6b0551bb-a36f-4af8-b09d-b12c623a8995","resolution":{"observed_at":"2026-08-07T15:07:56.761909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.515086Z","title":"Countering adver- sarial images using input transformations,","venue":null,"work_id":"ba8fdd5d-bafa-4492-9369-524b460f497e","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.838735Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:df873c66755c3649d4d8ac9659fa48b1bac09e1053587b72d1796fd75988bda7","observation_id":"af14b3a5-91f8-4b78-b8d5-ddea8b0138fe","resolution":{"observed_at":"2026-08-07T15:08:03.619586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.254780Z","title":"Real-esrgan: Training real- world blind super-resolution with pure synthetic data,","venue":null,"work_id":"ea14f033-cfcc-4285-a6a0-db4960f6e9e6","year":1905},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.960455Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:e4e2ce884574a04fc19ecc0bc710756f1de7903aadd057b1237c3f66bdcbd6e3","observation_id":"3eb665bc-bbbb-46f4-afdd-f30a2aa3483d","resolution":{"observed_at":"2026-08-07T15:08:03.360722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.976559Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":"f881344f-37bf-43e5-8bc1-ca51e1be852f","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.063661Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:c23cb69bc0f11521b3db28c17535988009e92975c678b27a0d3fbb2ef13493fc","observation_id":"51bcd8e5-db21-4b19-8fbe-5820b125d8f3","resolution":{"observed_at":"2026-08-07T15:08:03.107266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.191479Z","title":"Efficientnet: Rethinking model scaling for con- volutional neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.191479Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:28572e79fcab4a78ae12162f0de956d024396285532cb9582c8911e61c315921","observation_id":"f156f7c3-10d0-4333-afcd-623ac429a573","resolution":{"observed_at":"2026-08-07T15:07:57.191479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.714481Z","title":"Identity mappings in deep residual networks,","venue":null,"work_id":"47a2ad0c-281d-4537-b418-5b900210b946","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.329154Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:3df324b5b3796dbaff5c9b1f8209095516a40fb9e4d60ee5f4f80fec67464631","observation_id":"fe4ac0a6-e560-498e-a72b-37f7231192d3","resolution":{"observed_at":"2026-08-07T15:08:02.801017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.413156Z","title":"Pytorch: An imperative style, high-performance deep learning library,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.413156Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:826ecdd386603ee03e4cdd9237f3379bfdcea23005905478720e909a2458d8d8","observation_id":"0cb81e37-3f41-47d0-ad4f-0bd0b0583868","resolution":{"observed_at":"2026-08-07T15:07:57.413156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.343001Z","title":"Ntire 2017 challenge on single image super-resolution: Dataset and study,","venue":null,"work_id":"fda8c053-ca58-406e-b13d-cc02f0a2453d","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.500326Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5df6144161d2d909afec8a497d1d16936854d0c7b9d6f15b5234087a86846abb","observation_id":"409a27b7-bb46-4272-b568-d62f0280716b","resolution":{"observed_at":"2026-08-07T15:08:02.496703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.098756Z","title":"Ntire 2017 challenge on single image super-resolution: Methods and results,","venue":null,"work_id":"e75df9af-3e69-4611-b321-61ab45803363","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.576176Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:b9635a60d75616db595d9ac3287a332c8e4ba98f9297746f0265957d28d6a8be","observation_id":"a5c8e13c-bb6d-4e43-9d2a-02ab1cb03e22","resolution":{"observed_at":"2026-08-07T15:08:02.248997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.840860Z","title":"Recovering realistic texture in image super-resolution by deep spatial feature transform,","venue":null,"work_id":"fb1db055-417d-4568-96a5-24d687f33bbd","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.688042Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4c46dd982d4a52272921b1ba0cd4946a531989a9a6ee04035eed717d84e5f116","observation_id":"6f0cc8c1-57ee-4d20-84ab-8da6be63bed0","resolution":{"observed_at":"2026-08-07T15:08:01.906592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.802575Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.802575Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d62408c2c85bb96f0ebcc19a859ff64c2a3d61b97240d05f190ef9570c9fbaa8","observation_id":"13c10796-14ee-4f4d-99b3-957bd35aa9fa","resolution":{"observed_at":"2026-08-07T15:07:57.802575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.650433Z","title":"Wide residual networks,","venue":null,"work_id":"d5b5b73e-2784-4aaf-9013-a2b73908eddb","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.893928Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:584eb91ec64b7cf5afbe818299af03c3bff6bcef19ca9bfaca6dca1e62b50461","observation_id":"e18c6ac1-bbbb-42d2-9b2c-b2aacaf6bd7f","resolution":{"observed_at":"2026-08-07T15:08:01.723795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.483069Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":"5958a8b5-1c6d-4d94-86ec-6b19915bba9d","year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.987401Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7aab1d03a0d6df560a444ac47b054099ca88c5780312a2b1835c7c32f7de3752","observation_id":"7dcda8d5-b514-4e1e-9443-2ed432d9bd16","resolution":{"observed_at":"2026-08-07T15:08:01.575835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.319411Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":"117040c8-bb09-4116-9a8b-31cd2f9bfb12","year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.085625Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:242d266f9f4b858725aece69d71a78dd82c03b0ecbbb6ccff1256c0166d91370","observation_id":"7517dea0-5971-4b38-81a6-1d25bece28df","resolution":{"observed_at":"2026-08-07T15:08:01.389342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.151277Z","title":"Dpatch: An adversarial patch attack on object detectors,","venue":null,"work_id":"874fadb4-c4ec-4f55-b2db-ad2b53ee28d1","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.200727Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7c29f6d0aa72183a1c82a09549d6889408948452fac1b6dd5143a2156a402336","observation_id":"6e20000d-4187-43ff-9d68-83808800c71c","resolution":{"observed_at":"2026-08-07T15:08:01.233041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.941946Z","title":"Adversarial robustness toolbox (art),","venue":null,"work_id":"13a3d01a-9ca5-44f3-95be-74007cb18ff9","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.312900Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d7c4953ff7fc5197ce27815ad8032f7b782e47465f19888f21b2238b8bd71fcc","observation_id":"62cd6e0f-b937-4aca-a698-ae42d1d9b9b7","resolution":{"observed_at":"2026-08-07T15:08:01.021577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:58.443383Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.443383Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:ae975378ed9a1f323ad9219875b6f08434e2048647538246bd51bded41364592","observation_id":"89d28a0d-f985-41fc-a30e-556b930d3861","resolution":{"observed_at":"2026-08-07T15:07:58.443383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.07636","last_updated":"2021-06-30T07:34:57Z","snapshot_observed_at":"2026-08-06T10:36:32.792565Z","submitted_at":"2021-04-15T17:50:42Z","title":"Image Super-Resolution via Iterative Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.07636","snapshot_observed_at":"2026-08-07T15:07:58.541705Z","title":"Image super-resolution via iterative refinement (sr3),","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.541705Z"},"links":{"cited_paper":"/paper/2104.07636","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fcb1bef7f34b256e29addaa9b61a1af633ff63b004d613dbdc8e1fefe7290414","observation_id":"1bb68669-1bce-4c40-a86f-b61dd609a7e8","resolution":{"observed_at":"2026-08-07T15:07:58.541705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.626954Z","title":"This underscoresSuperPure’splug-and-playcapability, as no task-specific retraining is required","venue":null,"work_id":"b0138521-e6ac-4e7d-b9b0-0361df9640f2","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.665084Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6a764d3373d545646c299afd420cc3a354ed560d5e502cd509a04e81e6ffd87b","observation_id":"4f4fbda5-eaba-4982-8491-e9f6b5ff20c9","resolution":{"observed_at":"2026-08-07T15:08:00.759168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.378971Z","title":"Clean detection accuracy of60%plunges to35%under DPatch, but SuperPurerestores it to58%, indicating robust generalization beyond classification tasks","venue":null,"work_id":"a86e1c3f-3abf-4ef4-953a-463dd9d205bd","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.785948Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9c285be4044244dcf8c6985ba87d8be86a43006c7178e33257e66752ecea9197","observation_id":"a3264d57-5500-4da7-a044-d5c4af7a82d9","resolution":{"observed_at":"2026-08-07T15:08:00.482733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.108996Z","title":"The total adversarial area thus becomes increasingly fragmented, posing a stronger challenge","venue":null,"work_id":"2946eed7-5262-47c9-b7e0-8e44f11fec57","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.876327Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:0f6d455c88fdada31b2b1da8817a1b12d9978e9990c496b8f11c28f2322fa282","observation_id":"80c73725-01f0-4452-9364-77fd4676ca31","resolution":{"observed_at":"2026-08-07T15:08:00.242830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.833733Z","title":"De- spite the attacker’s full knowledge ofSuperPure, our method 0 1 2 4 80 0.2 0.4 0.6 0.8 1 Number of Patches Robustness SuperPure+ PatchCleanser [14] Fig","venue":null,"work_id":"70b9c257-6092-4806-9dd7-2bcbeaea966a","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.979958Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fa4216382c0b6a3bb7e7970261ee8db1c049606b2bc27aaeaa3157019cbeb15c","observation_id":"e0c1ad01-c312-4368-9f70-1a9be420fac3","resolution":{"observed_at":"2026-08-07T15:07:59.980412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.608058Z","title":null,"venue":null,"work_id":"77b4c439-7284-4587-98f1-02aa4f2891b1","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:59.101436Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8db8349a7a3da46d697a0b4bc2c8fd9bdd05e642c8455a139ac4938e20df4be1","observation_id":"21b69f2e-813c-43d8-b68d-978c311ef8b5","resolution":{"observed_at":"2026-08-07T15:07:59.736835Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.425082Z","title":"Robustness Trade-off:Our tests show that while SR3 can improve image fidelity slightly, it issignifi- cantly slower","venue":null,"work_id":"9e94f882-6e3e-4957-82b9-6ff355b8cb1c","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:59.202250Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9aa84fc46e51a355075cab0d0f5f5a1c78f58bf48c62309c71579b1c06b100f9","observation_id":"cfbf5add-dfc7-4519-9e1e-dfb74a5a5b3f","resolution":{"observed_at":"2026-08-07T15:07:59.510409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-08T01:43:43.647888Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":18,"verified_exact":0,"verified_fuzzy":52},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2505.16318."}