{"as_of":"2026-08-08T09:07:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:c261494b182055bd029c2a4544152df3d756aeea81db300f2c201bb1cbb598de","coverage":[{"denominator":27,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":27,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:05:49.835754Z","state":"measured"},{"denominator":27,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":27,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-08T06:32:00.761636+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.22839/citation-record","integrity":"/paper/2505.22839/integrity","json":"/paper/2505.22839/citation-record.json","paper":"/paper/2505.22839"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:50.689067Z","title":"E Broader impact This paper discusses how and how well do diffusion models actually improve robustness","venue":null,"work_id":"7684ac43-7979-445f-b5e9-c0e773d09773","year":2022},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.835754Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:707eb360c5e81bce463a8ad6ba1c09326e44e02d687c29a990be7050e84f3e52","observation_id":"a65184a9-63b5-4aed-aa85-b411c6ed2c08","resolution":{"observed_at":"2026-08-07T13:05:50.779822Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.134498Z","title":"We used the base seeds s= 0,1,2for all experiments","venue":null,"work_id":"b2c96043-12e3-4d57-82d1-9d5c35edfc8c","year":2020},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.615077Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:9acb8b66c1db20a1f0e42515ede4ef5ced218720f7dc5acb09d8ca073960a0e3","observation_id":"c1e1c128-f1f0-47e0-9576-6be5b4c64118","resolution":{"observed_at":"2026-08-07T13:05:51.209670Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1901.10513","last_updated":"2019-01-29T20:01:39Z","snapshot_observed_at":"2026-07-06T07:29:49.559045Z","submitted_at":"2019-01-29T20:01:39Z","title":"Adversarial Examples Are a Natural Consequence of Test Error in Noise","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1901.10513","snapshot_observed_at":"2026-08-07T13:05:47.917506Z","title":"Adversarial examples are a natural consequence of test error in noise.arXiv preprint arXiv:1901.10513,","venue":null,"work_id":null,"year":1901},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.917506Z"},"links":{"cited_paper":"/paper/1901.10513","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:5032b6e65a2923742028408beba959e69f05a47360c2db03a04533bdb12c879f","observation_id":"662edc6f-6e09-43a0-b23e-eba03b76f400","resolution":{"observed_at":"2026-08-07T13:05:47.917506Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:52.005998Z","title":null,"venue":null,"work_id":"b254ecb6-87ed-409a-b0a0-7d3344b35f1a","year":2009},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.072162Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:0a8da53a8ad459eaf784e09b7855f5732a72ea595518b5449387b22517004496","observation_id":"340b57ae-6be9-4cc3-a6eb-9d8bda223f9d","resolution":{"observed_at":"2026-08-07T13:05:52.090905Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.16067","last_updated":"2025-03-11T08:43:03Z","snapshot_observed_at":"2026-07-06T17:49:40.841846Z","submitted_at":"2024-03-24T08:34:08Z","title":"Adversarial Guided Diffusion Models for Adversarial Purification","version":5},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2403.16067","snapshot_observed_at":"2026-08-07T13:05:48.191182Z","title":"Robust diffusion models for adversarial purification.arXiv preprint arXiv:2403.16067,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.191182Z"},"links":{"cited_paper":"/paper/2403.16067","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:21230b36281745ececf191688dc49caecc082505e185bf52fc4443a22aa9cfd6","observation_id":"76e0d470-a0c8-4cd6-b151-4cc20488f5ec","resolution":{"observed_at":"2026-08-07T13:05:48.191182Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:48.332038Z","title":"Practical black-box attacks against machine learning","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.332038Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:5268f48338a5643380db8efc629bfca7436f738f8c353cb8d13e66be3bb8c79e","observation_id":"6ab935a2-e028-458f-8c0f-91769939379f","resolution":{"observed_at":"2026-08-07T13:05:48.332038Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.21105/joss.02607","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:49.968255Z","title":"URL https://doi.org/10.21105/joss.02607","venue":null,"work_id":"d61734c1-7028-40af-9b76-77916c6b8158","year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.451372Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:424013f832cc76520c9a85407d39c4bfd6da50791a5d71ea2a1fb9b6682931d2","observation_id":"59c554c1-9003-4baa-a7b7-3538b7bdddc5","resolution":{"observed_at":"2026-08-07T13:05:50.065493Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1805.09190","last_updated":"2018-09-20T17:49:14Z","snapshot_observed_at":"2026-07-06T06:40:49.062462Z","submitted_at":"2018-05-23T14:16:22Z","title":"Towards the first adversarially robust neural network model on MNIST","version":3},"cited_work":{"arxiv_id":"1805.09190","doi":null,"metadata_source":"pith","pith_arxiv_id":"1805.09190","snapshot_observed_at":"2026-08-07T13:05:50.240803Z","title":"Towards the first adversarially robust neural network model on MNIST","venue":"cs.CV","work_id":"0df26174-3082-4575-bad3-097730de31c1","year":2018},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.535480Z"},"links":{"cited_paper":"/paper/1805.09190","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:3cb4d9e25a92f9e4f3ff67445665d07edec55b1e8b253e93b0dfb7eb4410c43e","observation_id":"508fa389-d736-4d51-9527-7291982e1dbc","resolution":{"observed_at":"2026-08-07T13:05:50.285016Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2101.09387","last_updated":"2021-01-23T00:19:52Z","snapshot_observed_at":"2026-07-06T10:34:49.974338Z","submitted_at":"2021-01-23T00:19:52Z","title":"Online Adversarial Purification based on Self-Supervision","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2101.09387","snapshot_observed_at":"2026-08-07T13:05:48.637283Z","title":"Online adversarial purification based on self- supervision.arXiv preprint arXiv:2101.09387,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.637283Z"},"links":{"cited_paper":"/paper/2101.09387","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:f583760275c2326722b280957ac3c22e5aee6fc293e12c029d5f99285cf46e9e","observation_id":"6d5393ef-c7b2-42ad-9cec-11b04a68f7df","resolution":{"observed_at":"2026-08-07T13:05:48.637283Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2205.14969","last_updated":"2022-06-29T02:42:05Z","snapshot_observed_at":"2026-07-06T13:15:21.126555Z","submitted_at":"2022-05-30T10:11:15Z","title":"Guided Diffusion Model for Adversarial Purification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.14969","snapshot_observed_at":"2026-08-07T13:05:48.821582Z","title":"Guided diffusion model for adversarial purification.arXiv preprint arXiv:2205.14969,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.821582Z"},"links":{"cited_paper":"/paper/2205.14969","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:1d306783c933c985d9cd43234a6c8331ba91ab94cb354bafe5730979a80e4074","observation_id":"31ba7a28-d5ad-4533-8fbe-fa6a070fb078","resolution":{"observed_at":"2026-08-07T13:05:48.821582Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2112.08304","last_updated":"2022-04-23T06:52:32Z","snapshot_observed_at":"2026-07-06T12:19:11.280873Z","submitted_at":"2021-12-15T17:54:08Z","title":"On the Convergence and Robustness of Adversarial Training","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2112.08304","snapshot_observed_at":"2026-08-07T13:05:48.888250Z","title":"On the convergence and robustness of adversarial training.arXiv preprint arXiv:2112.08304,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.888250Z"},"links":{"cited_paper":"/paper/2112.08304","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:2e13fcc2016232d35652b6f006f80ee857e01709bc439e466dab5db46fd908b1","observation_id":"3433a069-c3c2-42d3-a1fb-9a33bb1b0019","resolution":{"observed_at":"2026-08-07T13:05:48.888250Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:52.159024Z","title":"Densepure: Understanding diffusion models for adversarial robustness","venue":null,"work_id":"eaaa79ee-3741-4663-9416-fdbe80ba2687","year":2023},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.994634Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:4f64194f0ff3bfc69b29dc76732f6ce698494258bdb5e7a311e58339e65458ea","observation_id":"e0f2fbc8-4376-4eb8-b10f-42cdc559f27e","resolution":{"observed_at":"2026-08-07T13:05:52.225096Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.734959Z","title":"The purification time steps were kept the same with Nie et al","venue":null,"work_id":"b9bc49f6-ec4f-40a2-9138-ec43c483bbe9","year":2022},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.286425Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:40cc35ce8cfbf4111bbffceaa0219780e3b1c44ac3ea0cd39294c0e1adf45088","observation_id":"4c2d4804-dd46-41fb-96ab-78b8bf40d508","resolution":{"observed_at":"2026-08-07T13:05:51.807574Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.614578Z","title":null,"venue":null,"work_id":"9a702c2f-28d7-48c2-887c-33331b47a8ef","year":2023},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.351144Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:36b9d31449076a71863a67d1a4cec8df219fdf1a012c5b68bd764c59fa4149cd","observation_id":"4fb99a8c-abf7-4ce5-b59f-ff392cbc67b2","resolution":{"observed_at":"2026-08-07T13:05:51.671818Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.440939Z","title":"Full gradients were calculated for the PGD/PGD-EOT as Lee & Kim (2023) discovered that the approximations methods used in the original DiffPure (Nie et al.,","venue":null,"work_id":"aea1081b-20bc-4b4f-a49c-0db6ab6328f6","year":2023},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.417813Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:f197a6ae9f127cefca7933a02bd6d2fd9d697686a1768d9f1ac017ec1f7d6344","observation_id":"0223aeba-e2b6-4928-9d00-3289ac05eafa","resolution":{"observed_at":"2026-08-07T13:05:51.506209Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.307751Z","title":"The full gradient of PGD/PGD-EOT is the strongest attack for DiffPure methods according to Lee & Kim (2023) experiments, and is very computationally expensive","venue":null,"work_id":"c2466ab9-fb4d-4299-b4c6-171a563d34e8","year":2023},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.513361Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:6125e34f2124c88113cbdd9b01d6109fff6975ec4644dd412036d32124569f72","observation_id":"39ab9538-458c-46a8-b497-3531d1c49014","resolution":{"observed_at":"2026-08-07T13:05:51.370049Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:50.841123Z","title":null,"venue":null,"work_id":"54b4358e-6530-4af3-a505-ee5b266739cc","year":2017},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.739700Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:b14924368ba17a35dc8c07405163d6ad48b66231872e8e0fc1fc49a41af8d97a","observation_id":"6e8ad9e6-4276-4c8d-ab94-f7e921967de0","resolution":{"observed_at":"2026-08-07T13:05:50.890289Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.015258Z","title":"pushing-away","venue":null,"work_id":"d80ca098-ea45-4a3a-b6ea-9dba5f254a65","year":2024},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":300,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.691225Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:595e70b6165e6b4e9b398a003bb7c8c57687160e5134c0aaeb28565364d45b98","observation_id":"12251674-1921-415f-9590-6a0c070b1129","resolution":{"observed_at":"2026-08-07T13:05:51.061526Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:05:51.875346Z","title":"For CIFAR-10, we subsampled the first 1000 images from the test set","venue":null,"work_id":"34c963c6-76d9-4dda-9c89-f001c9361d60","year":2020},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2009,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:49.179143Z"},"links":{"citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:e26c8b7d07c59261a73cd95a054cd5bbd088ae68ac01e9b0356cd6b14fca8f44","observation_id":"055c613a-588c-48f3-ba06-c104483562e0","resolution":{"observed_at":"2026-08-07T13:05:51.946105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.5068","last_updated":"2015-04-09T21:43:29Z","snapshot_observed_at":"2026-07-06T04:03:46.997460Z","submitted_at":"2014-12-11T23:03:49Z","title":"Towards Deep Neural Network Architectures Robust to Adversarial Examples","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.5068","snapshot_observed_at":"2026-08-07T13:05:48.074464Z","title":"Towards deep neural network architectures robust to adversarial examples.arXiv preprint arXiv:1412.5068,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2014,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.074464Z"},"links":{"cited_paper":"/paper/1412.5068","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:c87c7db8f8582a7837fb562a8dcdd7eb053d73db0cc19d22a9d0df7a1633e5b3","observation_id":"cbc81c76-1f92-41da-815a-04778cd9b6e4","resolution":{"observed_at":"2026-08-07T13:05:48.074464Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.06705","last_updated":"2019-02-20T17:38:32Z","snapshot_observed_at":"2026-08-02T02:05:14.321072Z","submitted_at":"2019-02-18T18:18:27Z","title":"On Evaluating Adversarial Robustness","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1902.06705","snapshot_observed_at":"2026-08-07T13:05:47.647321Z","title":"On evaluating adversarial robustness","venue":null,"work_id":null,"year":1902},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2018,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.647321Z"},"links":{"cited_paper":"/paper/1902.06705","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:43ef9448881af25654a129a2217d559813a814d27559f60554c5b183fd8c058e","observation_id":"781d85f6-e870-48ba-ad68-031a0b892e95","resolution":{"observed_at":"2026-08-07T13:05:47.647321Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2206.10550","last_updated":"2023-03-06T06:28:05Z","snapshot_observed_at":"2026-07-06T13:23:11.566484Z","submitted_at":"2022-06-21T17:27:27Z","title":"(Certified!!) Adversarial Robustness for Free!","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2206.10550","snapshot_observed_at":"2026-08-07T13:05:47.704319Z","title":"(certified!!) adversarial robustness for free!arXiv preprint arXiv:2206.10550,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2019,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.704319Z"},"links":{"cited_paper":"/paper/2206.10550","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:904637ffc639963b1579467bd07997c21575026046619f401e1e68d5f3711a50","observation_id":"ef67f529-d726-42b8-b369-9095209760a9","resolution":{"observed_at":"2026-08-07T13:05:47.704319Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.09670","last_updated":"2021-10-31T20:03:39Z","snapshot_observed_at":"2026-07-06T10:05:50.314212Z","submitted_at":"2020-10-19T17:06:18Z","title":"RobustBench: a standardized adversarial robustness benchmark","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2010.09670","snapshot_observed_at":"2026-08-07T13:05:47.796644Z","title":"Robustbench: a standardized adversarial robustness benchmark.arXiv preprint arXiv:2010.09670,","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2020,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.796644Z"},"links":{"cited_paper":"/paper/2010.09670","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:e669c65bd0c3acd595a458af560604a9ede476748518b3d1ed470a11e38bf978","observation_id":"696eda56-d550-4301-8ca4-50cfc21805d7","resolution":{"observed_at":"2026-08-07T13:05:47.796644Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1902.07623","last_updated":"2019-02-20T16:18:37Z","snapshot_observed_at":"2026-07-06T07:34:21.459028Z","submitted_at":"2019-02-20T16:18:37Z","title":"advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch","version":1},"cited_work":{"arxiv_id":"1902.07623","doi":null,"metadata_source":"pith","pith_arxiv_id":"1902.07623","snapshot_observed_at":"2026-08-07T13:05:50.450879Z","title":"advertorch v0.1: An Adversarial Robustness Toolbox based on PyTorch","venue":"cs.LG","work_id":"beba2f60-3ebd-4176-a0ef-5248ec734dd0","year":2019},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2021,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.841976Z"},"links":{"cited_paper":"/paper/1902.07623","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:390b2a294b0ff047ff8866f3552e858e848a94274c8d4933174943fe0ab3e99d","observation_id":"88b6d9d5-b578-48d4-b0e8-54d28cc639d7","resolution":{"observed_at":"2026-08-07T13:05:50.544098Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-07T13:05:47.994463Z","title":"Explaining and harnessing adversarial examples.arXiv preprint arXiv:1412.6572,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2022,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:47.994463Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:df49006a24106572c7c662d3704abf60f285bbea70b6d405492cbdb51193e3e6","observation_id":"092a2c8a-a5df-415a-bdf4-a30fb6979187","resolution":{"observed_at":"2026-08-07T13:05:47.994463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1312.6199","last_updated":"2014-02-19T16:33:14Z","snapshot_observed_at":"2026-07-06T03:31:33.797310Z","submitted_at":"2013-12-21T03:36:08Z","title":"Intriguing properties of neural networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1312.6199","snapshot_observed_at":"2026-08-07T13:05:48.716460Z","title":"Intriguing properties of neural networks.arXiv preprint arXiv:1312.6199,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.716460Z"},"links":{"cited_paper":"/paper/1312.6199","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:a7aca3b9686df7f50f5e4188a8f268b7db06bfc9891c3e340ee2dbeebed98d36","observation_id":"b1325ff7-761d-4dbf-897f-743c67ecc851","resolution":{"observed_at":"2026-08-07T13:05:48.716460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1706.06083","last_updated":"2019-09-04T18:53:10Z","snapshot_observed_at":"2026-08-07T14:27:46.872660Z","submitted_at":"2017-06-19T17:53:11Z","title":"Towards Deep Learning Models Resistant to Adversarial Attacks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1706.06083","snapshot_observed_at":"2026-08-07T13:05:48.253219Z","title":"Towards deep learning models resistant to adversarial attacks.arXiv preprint arXiv:1706.06083,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?","version":1},"reference_index":2024,"source":"pdf_text","source_observed_at":"2026-08-07T13:05:48.253219Z"},"links":{"cited_paper":"/paper/1706.06083","citing_paper":"/paper/2505.22839"},"observation_digest":"sha256:0133c2298f3db3f8bc8052535823faf92d96ac40502c1fa2a96a52cd8e026438","observation_id":"c8bd2abb-4702-40f8-b536-821bab1adafb","resolution":{"observed_at":"2026-08-07T13:05:48.253219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2505.22839","last_updated":"2025-05-28T20:19:21Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-07T12:56:53.243363Z","submitted_at":"2025-05-28T20:19:21Z","title":"How Do Diffusion Models Improve Adversarial Robustness?"},"reference_resolution":{"displayed":27,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":16,"verified_exact":3,"verified_fuzzy":7},"total_outbound_references":27},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-08T06:32:00.761636+00:00","source":"crossref"},{"observed_at":"2026-08-08T06:31:55.24221+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 27 of 27 outbound references and 0 inbound Pith citation observations for arXiv:2505.22839."}