Pith. sign in

Paper Citation Record · LEDGER

Position: Certified Robustness Does Not (Yet) Imply Model Security

As of 7 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 0 inbound Pith citation observations for arXiv:2506.13024.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.13024 v2

Coverage vector

measured 99 of 99 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:44:07.593011Z

measured 99 of 99 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-07T06:34:17.273281+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

99 of 99 outbound references displayed

  • verified exact4
  • verified fuzzy61
  • unresolved34
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 32002f84-9ce4-4666-a08f-ed98c5aaee6e · outbound

This paper cites Cullen, and Tansu Alpcan.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Tansu Alpcan

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.341285Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.341285Z digest=sha256:4a574b2e3837a43c68d97caebf88d86d5176d5b4875298324bbc99a3d194d63d

Observation 9e5ba5bc-00f2-4b18-bcb7-249cb781e569 · outbound

This paper cites Politics of Adversarial Machine Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Politics of Adversarial Machine Learning

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.882415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:54.430300Z digest=sha256:60534f412376d36733d65ccc55c1d6cf80c5ab780d21db20bc864295b837517b

Observation 683b8811-063b-44ec-a697-aa479e73079f · outbound

This paper cites Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.555880Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.555880Z digest=sha256:bfe7b6c2842f5683d86752a66a7975fd410d88cbc7840dd60b40ef9a54365f22

Observation c09017f0-d971-4c58-82fc-9a049bd4e5b7 · outbound

This paper cites Differential Privacy on Finite Computers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differential Privacy on Finite Computers

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.678649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.678649Z digest=sha256:6221c94524ce4694b92ec6c34b950646676a572e1db8f8e2df509ab9aebc3126

Observation 657f7e27-c9dd-40eb-ac87-80f2a1dffb8b · outbound

This paper cites Evasion A ttacks A gainst M achine L earning at T est T ime.

Position: Certified Robustness Does Not (Yet) Imply Model Security Evasion A ttacks A gainst M achine L earning at T est T ime

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.782967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.782967Z digest=sha256:eff3f7efbd8a41617bc7227fc43fc5c5e75b464cc564b3844f774eb7803a2f99

Observation b189dd80-5ad6-4fd1-85fb-97f93a9c2fe7 · outbound

This paper cites The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.903149Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.903149Z digest=sha256:739e763fce8cfa8cf1194bd32fbd4fbe5a2947ba5496d8c3ae1ab8a93a790173

Observation 26d07490-a690-4588-b8db-3f03f092c063 · outbound

This paper cites Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.039116Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.039116Z digest=sha256:6afee6d201cc115ea2806a7961130508d3b6911d3f35ea2c6976e3a84f887441

Observation ba2f1c9e-cacc-42cd-8cb2-d085de4b08c9 · outbound

This paper cites MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.155104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.155104Z digest=sha256:3afc4f89da2977b1788b5db3351d43958e9fbe379bf3d7fc2d7fe94f39977d19

Observation 080decf2-33d9-46a7-b167-bb9cfba7fc7f · outbound

This paper cites Towards E valuating the R obustness of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating the R obustness of N eural N etworks

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.253314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.253314Z digest=sha256:f80b9c435128e5043ab1484fa1ad3dc640b70531c39e9cb1ee9e79ccd8dbfe5b

Observation ade5bd82-9233-4e61-85ef-6a967a184596 · outbound

This paper cites Implicit D iversity in I mage S ummarization.

Position: Certified Robustness Does Not (Yet) Imply Model Security Implicit D iversity in I mage S ummarization

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.411174Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.411174Z digest=sha256:dc6d69b9f491ea53f114ca35f70185390526b3bf591fa5d218fa9b5c8c2c5d9d

Observation d873f767-ba36-4d54-b789-aeb823e50085 · outbound

This paper cites Adversarial Attacks and Defences: A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial Attacks and Defences: A Survey

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.527362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.527362Z digest=sha256:283e02a9819a41ed1a3cd05bb57438b2f8f7e8ba9377a01dbd713c609ed42f82

Observation dc823b87-a689-4606-a278-7db46527cc84 · outbound

This paper cites Certified D efenses for A dversarial P atches.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified D efenses for A dversarial P atches

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.648179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.648179Z digest=sha256:c8ab89082bc8b5e40662acad7807d2ab45affd0db7220cbccaf3bbdfb91b4fd0

Observation 77b19635-da9e-4b39-8dcc-5acaec0ff64e · outbound

This paper cites Certified A dversarial R obustness via R andomized S moothing.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness via R andomized S moothing

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.772984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.772984Z digest=sha256:315f595ac010b93d9eafe9b976b173e9907dd38d9a9bf4121dc765e542be528d

Observation 15005d78-7cbb-4cde-81d9-c14823ae6e27 · outbound

This paper cites Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.915185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.915185Z digest=sha256:38b3390828ee6ac76fdb0a29650951d75e39fb1e7f3e608f6b963d951388e008

Observation 438c87bf-c921-4d19-8d46-ef550e3b8609 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.018826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.018826Z digest=sha256:827024f7b117fe654ca1a5bae31b0f5a051c7b11097f8f660c05b6c79c63faa0

Observation 9aa1f3bc-120c-46f0-9564-65da0102129d · outbound

This paper cites Cullen, Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Benjamin I.P

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.145911Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.145911Z digest=sha256:70d6e4236db0ea592aa38224726427fd51f1dc237dc2174d6fcd4feb83ba55d1

Observation 07f0b557-9537-4a2a-8e4e-52aef8e6937b · outbound

This paper cites Cullen, Tansu Alpcan, and Alexander Kalloniatis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Tansu Alpcan, and Alexander Kalloniatis

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.255287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.255287Z digest=sha256:5c59c38065dabcfb214f856591ab80d5e7d38ee6429e221b0511aea56333f218

Observation f8733539-525f-4eea-abc5-55b8b59449a9 · outbound

This paper cites Cullen, Shijie Liu, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Shijie Liu, Paul Montague, Sarah M

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.378053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.378053Z digest=sha256:9866789f80f8301367e37ae9e2d70124a0ac3555df68b8e5c636de93726993b8

Observation 940c3ac5-9419-4e85-a8aa-6d0676d057e9 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.473475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.473475Z digest=sha256:ca0d7d5a863069436a46a140aed531ba77cb2953a25be7ba28b7a400853c3a89

Observation 03ed78b4-ca6a-4337-81b5-589da24f918e · outbound

This paper cites Imagenet: A L arge-scale H ierarchical I mage D atabase.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet: A L arge-scale H ierarchical I mage D atabase

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.571392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.571392Z digest=sha256:82efa67a13ac8e8efdaa73df02668fe7cb0c17c1ca4795c859a59a8eb80de5d9

Observation a899ed4a-1797-414a-91e6-53a366cccf6c · outbound

This paper cites Privacy A udits for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy A udits for D ifferential P rivacy

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.701497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.701497Z digest=sha256:bda03ae15b876275247fe9025415a2beb015207b6ad3d856ca8144a60c5bd79b

Observation 1d4160d8-59e6-4577-b428-b3410c990b18 · outbound

This paper cites Towards learning with limited labels: Equivariance, Invariance, and Beyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards learning with limited labels: Equivariance, Invariance, and Beyond

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.864630Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.864630Z digest=sha256:53a511ebd060048766bb84fec8151d88bbc0373cccdedd144bd833327db4d397

Observation ada41f51-3bd3-41f9-87e1-f1173e130281 · outbound

This paper cites A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences.

Position: Certified Robustness Does Not (Yet) Imply Model Security A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.015651Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.015651Z digest=sha256:09ffde61de4640d72804e2eb496aaa12bd6d832f4340045cffd517a5f114d336

Observation 5a787b67-478c-476c-994f-f46c434e2680 · outbound

This paper cites Calibrating N oise to S ensitivity in P rivate D ata A nalysis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Calibrating N oise to S ensitivity in P rivate D ata A nalysis

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.178267Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.178267Z digest=sha256:a15d6e0fad976057e810b9464e66a213b1e34a54ef42704cd12870c713f5a6a1

Observation 1ab3122b-fba0-4161-beab-537787a12836 · outbound

This paper cites Adversarial A ttacks on M edical M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial A ttacks on M edical M achine L earning

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.878343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.293178Z digest=sha256:4f2740152d677473d83071b2f49b83ae0ca195f028a7560b2af8d7b93a845069

Observation 905191b3-561c-427c-b17f-1cf1f63aa089 · outbound

This paper cites A P rogramming F ramework for O pen D P.

Position: Certified Robustness Does Not (Yet) Imply Model Security A P rogramming F ramework for O pen D P

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.570054Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.463244Z digest=sha256:7b5e287ca1b919964e6976ffd2c434efe8d1d49877452ebcc1cfff8ea89ac61c

Observation 86c9c3eb-3112-4dd5-9df6-85110bbca59c · outbound

This paper cites Motivating the Rules of the Game for Adversarial Example Research.

Position: Certified Robustness Does Not (Yet) Imply Model Security Motivating the Rules of the Game for Adversarial Example Research

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.561699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.561699Z digest=sha256:c7677b6e09544b1d3743f818dc2db29c31ca6b1a54a7997b4b455bc404229c96

Observation c5af38d7-a1fd-4bce-876c-78b0a11e4be3 · outbound

This paper cites Explaining and H arnessing A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Explaining and H arnessing A dversarial E xamples

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.275199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.679535Z digest=sha256:40179dec063d53e8c3c41606384e7f0359e15df9062ffca1bf5f8dc15ceff813

Observation 55b0bee6-a653-4237-9866-c21c3b5e8a6c · outbound

This paper cites On S imultaneous C onfidence I ntervals for M ultinomial P roportions.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S imultaneous C onfidence I ntervals for M ultinomial P roportions

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.086787Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.805514Z digest=sha256:5d115d89fe5365278f770efbb72cd147a2fcaba9640b183e55ac0a8fd55dd7fd

Observation 0a928acd-14e6-4b62-a6c0-92840f709a07 · outbound

This paper cites Scalable C ertified R obustness via I nterval B ound P ropagation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Scalable C ertified R obustness via I nterval B ound P ropagation

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.940883Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.934361Z digest=sha256:d4ca83e7a164019a3545269b2f96f54ab56c404cef3751e7629eab20b7439ac3

Observation 8d9fce40-f1c9-4ab0-9d80-41a4641a6afa · outbound

This paper cites Reducing Certified Regression to Certified Classification for General Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reducing Certified Regression to Certified Classification for General Poisoning Attacks

Reference 31

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.535861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.047094Z digest=sha256:ad05272815d4fec017f994f74111eef43038fee322683245704e37a70cc7316b

Observation 99a9f5f9-1f0e-447a-9519-0ac7c905e325 · outbound

This paper cites Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.757223Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.134365Z digest=sha256:3abe6013f42efa876cf46486cd4021a4ffc637af3ded5cb0c59f29193bb4165f

Observation c4e4e963-cc15-47f8-b338-930f19683b33 · outbound

This paper cites Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.490180Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.234518Z digest=sha256:e4d4b2fe40b7dbabfe0d32ae7e72e4e1ce5991899f8b89ea072d6d624f0baa60

Observation 03c57011-ecc9-427c-aecb-f38a4bd780e7 · outbound

This paper cites Joseph, Blaine Nelson, Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Joseph, Blaine Nelson, Benjamin I

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.265942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.342190Z digest=sha256:353b89ccdeff2015a150428b6a5a0e06f9893fb515417f15995261bf1d156dcf

Observation 08517b48-08d4-417b-be16-caa1536a9744 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:22.994302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.463279Z digest=sha256:2453d6a8d6ae77225b531d7dd35f2bb0d8ee2b5914bd7c24d22b6a7a2cd42aa0

Observation 696c13a3-f03a-42a0-98bf-3cd68921f942 · outbound

This paper cites The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:58.581546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:58.581546Z digest=sha256:ff0a6edec7b8957029825e61e0dae11250b58e6c60ce8c5957a232351ac8b2c3

Observation fd002fbc-b17a-4165-b89f-78856e5faff2 · outbound

This paper cites International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022.

Position: Certified Robustness Does Not (Yet) Imply Model Security International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.738506Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.682798Z digest=sha256:22a9e226adf3157de6a8c981b32734550ea0840cd9b0a82091d9092cf7ca64b6

Observation 3be9c7fa-1e2e-4dd9-b2dd-42d78eb10f6f · outbound

This paper cites Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems.

Position: Certified Robustness Does Not (Yet) Imply Model Security Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.480582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.772998Z digest=sha256:2314c74992947d53db69504dd237c0fc056f5b349f35f7582f97b88cd27280f0

Observation 73ca5b6f-919a-452f-b207-da2d89202dce · outbound

This paper cites Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget.

Position: Certified Robustness Does Not (Yet) Imply Model Security Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.200654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.900522Z digest=sha256:5d9cc1ec1c068ad1f0ceb46e4110a8ac088f2534e181fb7cb5cd1dd55d52e9a0

Observation 8be3eb88-0dff-4916-bb04-9fca7b46e545 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 40

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:21.944206Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.047125Z digest=sha256:9f55eabf68b58838cedce7d6380d41cdbc3559d6ba326197f9082d78bd48fcfc

Observation 8027c612-0eca-4263-aef7-ccdc115bee58 · outbound

This paper cites Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.635192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.232185Z digest=sha256:ca12599730866bc43bfe6b4014501833e551b78f416c98d0dd1401ba1c756713

Observation 42ef0d07-8c90-4967-8528-600551668ec3 · outbound

This paper cites Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.377984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.332867Z digest=sha256:8b673e7b74b46d7db2883c4f64f0c014998377d033a803d1f832015d0adb0f23

Observation 9d63fcb4-7dd6-4961-a602-eac41817378b · outbound

This paper cites Certification of Speaker Recognition Models to Additive Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certification of Speaker Recognition Models to Additive Perturbations

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.413830Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.413830Z digest=sha256:25950ef3378b8b37f002615ef8e08fe0a08ba3c6c1b008aaf21485c95b0c94c7

Observation ba0f7a72-8ca9-4ab3-b9d7-722ba9581d67 · outbound

This paper cites Learning M ultiple L ayers of F eatures from T iny I mages.

Position: Certified Robustness Does Not (Yet) Imply Model Security Learning M ultiple L ayers of F eatures from T iny I mages

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.068196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.538332Z digest=sha256:9469c6281eab6256d79e6d341b510cf7685c93cecf6faf9d16c8ad503362315d

Observation 9928a483-7b77-454b-85ff-9a4754464ac4 · outbound

This paper cites Regularization for Deep Learning: A Taxonomy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Regularization for Deep Learning: A Taxonomy

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.642817Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.642817Z digest=sha256:b4bc861fbe4a8d6122fc1644c14a05bfa02e05c8bb479fac1e7e0c14346962e3

Observation 9c70a4ec-6903-4cf1-aa33-692992aa8038 · outbound

This paper cites Policy Smoothing for Provably Robust Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Policy Smoothing for Provably Robust Reinforcement Learning

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.795601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.795601Z digest=sha256:4e52059214bcaedb6f32cb19f6b5c2740936581e15dc863213c4ff303964bd80

Observation 6d06ed91-d523-4165-a057-ea816cafe2c4 · outbound

This paper cites Adversarial M achine L earning- I ndustry P erspectives.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial M achine L earning- I ndustry P erspectives

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.873872Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.926782Z digest=sha256:a9b934fd08ec28a4ac2e3a7530eae49878b8c6a2121cd1f1724d70d06912241a

Observation f201aa00-22bb-4e4d-820d-303d9ce71602 · outbound

This paper cites Adversarial machine learning at scale.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial machine learning at scale

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.565732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.083113Z digest=sha256:e0bb9d2380eff048b36c479e6fcf14313e9a1d97078acb50322215e9893dfa49

Observation 8e443a2a-273c-4d40-862c-27d9651a5fb8 · outbound

This paper cites Gradient- B ased L earning A pplied to D ocument R ecognition.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gradient- B ased L earning A pplied to D ocument R ecognition

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.345931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.197396Z digest=sha256:229abab867e6e2616ba27bd6bdb8129777c47c3eec7fcd45d4a9f559a73c2565

Observation c761a1da-9e89-44b9-a2a9-e504fc759036 · outbound

This paper cites Certified R obustness to A dversarial E xamples with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified R obustness to A dversarial E xamples with D ifferential P rivacy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.094262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.373136Z digest=sha256:f346ceb878c3444c48812b7469c992efbebd3c6e475e8dfbe4bc08b255c089c1

Observation 510637ab-24ef-4116-8e64-5bd7998858d6 · outbound

This paper cites Globally- R obust N neural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Globally- R obust N neural N etworks

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.919675Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.526509Z digest=sha256:217fe540c6ca81d0355f9d8a4c3d57c173580feed77bb98b17fbeadca3bb8cb8

Observation 7b10c08e-77f2-4bb3-82f0-22ff558006a9 · outbound

This paper cites (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.711905Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.675313Z digest=sha256:5deea4d65f0d471a9f1dc213e47b7e4d0d94af28a09e9fdc29771223e34a7b1b

Observation 730d2889-cca3-45d1-bdd4-dec4c0bdb84e · outbound

This paper cites Certified A dversarial R obustness with A dditive N oise.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness with A dditive N oise

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.512976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.844919Z digest=sha256:8ea814a3180f2f618279eb70d4248b10633e59fadde9dff2ba70e00844f32aab

Observation 6c35dbbd-4843-400c-9a15-9dbf23bd0872 · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.300429Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.023396Z digest=sha256:56a963bcacba8e914d5088a9f53dbce6e4e3c630f2cdab7469a8db02bc38162a

Observation 63d79340-45c4-4f74-987a-88d9692a772b · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.017095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.175405Z digest=sha256:6eed423acef5daa3a21fa3dcd49735d5b762c1be7c6558bcef8f809b246e53b9

Observation 26814004-f1fd-40ac-8dfe-eaa6b2887a79 · outbound

This paper cites Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:01.319756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:01.319756Z digest=sha256:51add822c4966cf46cce5f12c2c9d82a4b45c86e2825a3d31b39fbc4167aaa5f

Observation 1acaaa28-d8f9-41d1-a82a-73f3191d151e · outbound

This paper cites Group and A ttack: A uditing D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Group and A ttack: A uditing D ifferential P rivacy

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.847445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.443595Z digest=sha256:097e8538703fefbda65f40834c86c4614125abe688d7372fae9f28d4a45a4171

Observation 5dca401e-02d2-41f7-a1d1-f38f6567eb2a · outbound

This paper cites o rn L \.

Position: Certified Robustness Does Not (Yet) Imply Model Security o rn L \

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.671015Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.591586Z digest=sha256:696a7cff93d796e97eff5af3b9648df60871c83aef53c8edd7da392d2a718969

Observation c71de213-5962-4ade-9f81-d59fbdaa5b8f · outbound

This paper cites Towards E valuating and T raining R erifiably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating and T raining R erifiably R obust N eural N etworks

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.351514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.712521Z digest=sha256:a2f0df7ed8514ae87eba88bda54df3da0196728f94fbbf70c0de92e9cb4f0940

Observation b0eefaad-058f-4155-8b3a-2c1eed43ec3d · outbound

This paper cites Towards D eep L earning M odels R esistant to A dversarial A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards D eep L earning M odels R esistant to A dversarial A ttacks

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.067073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.823383Z digest=sha256:ab0fdd17a694f2ad27b500faf44cfcc1435d0a2ddcd3c2c90d6cce1b7ef4af6f

Observation bf4f938a-abe9-428e-9e4b-2503520597bc · outbound

This paper cites Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval.

Position: Certified Robustness Does Not (Yet) Imply Model Security Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.847721Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.936545Z digest=sha256:c76be181e0017a2c2360c86b73b113f8f8f130eef3b61a4cc2d33137e9383a46

Observation fdfb4625-c741-459c-bd61-fce61f29652d · outbound

This paper cites Is Certifying $\ell_p$ Robustness Still Worthwhile?.

Position: Certified Robustness Does Not (Yet) Imply Model Security Is Certifying $\ell_p$ Robustness Still Worthwhile?

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:02.111831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:02.111831Z digest=sha256:a934d302b54e70db45c6583b4f0a7747bd559d15a41388daa9cb0fe57d856394

Observation 73cad2c9-ce66-4949-977b-53ef46ad8e14 · outbound

This paper cites Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.563823Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.257917Z digest=sha256:234b043d2d6f99de05127d66dd4771ea9e940de450733e970c8b2886c1817acf

Observation 03ca042d-8d23-4190-b248-9fd21b6cec56 · outbound

This paper cites Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.297145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.406963Z digest=sha256:1b1ea899ad8e529c67e5ab34ddf433f3166a11f478947706eb7c1a16bea1cdcc

Observation 64978c58-95a1-40cd-81a2-2eb6135f65a9 · outbound

This paper cites On S ignificance of the L east S ignificant B its for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S ignificance of the L east S ignificant B its for D ifferential P rivacy

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.065784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.522187Z digest=sha256:31d121e4dde5801b803e35943d1058d8d2c4da56136c6945838c01946af93c7a

Observation 679e7f34-f412-4500-a566-ec23afdd99e4 · outbound

This paper cites Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.850573Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.712085Z digest=sha256:de21d707f451a1312b5f0a98773c347387ce3d00d32c34f83cc6e72ce5b4b1bd

Observation 4b9ac994-fccc-49b9-bbbc-881991269c9e · outbound

This paper cites Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.568053Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.859767Z digest=sha256:bcb5aa7b1f65c26a9efec0b3fc69e6d56c3ed814b684133ade602185aa8d82e3

Observation 26018a02-542a-4e90-b82e-29d6081946a3 · outbound

This paper cites Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.264174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.991995Z digest=sha256:b82e93e794698f6a60f37d9c4bf6ee6ac8a1669554ca4c0ef6c5a3484d874f74

Observation 3f0b95e3-04db-43e9-9b1d-6870c49e6c2c · outbound

This paper cites The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:03.129488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:03.129488Z digest=sha256:7ee14114a6608bd4474922e54d27656d7db3a4a2a3db69a29ff57c81ea548968

Observation a45f60d7-bb75-447e-a967-7f7307d1f77d · outbound

This paper cites Instance S paces for M achine L earning C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Instance S paces for M achine L earning C lassification

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.019605Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.322040Z digest=sha256:9d21157076f376214d416c68212fbbb8a7e73ea3e9231d927d1646dd13b38e90

Observation 5e244b76-f6af-41bd-9d9e-80be11731611 · outbound

This paper cites AI Risk Management Framework (AI RMF) 1.0.

Position: Certified Robustness Does Not (Yet) Imply Model Security AI Risk Management Framework (AI RMF) 1.0

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.739778Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.444094Z digest=sha256:1c119aba7b4aee41c12baeca157aa0e858d80d2a3c75e44f13b491fff77d3ff7

Observation 3d55f40c-17af-4c4d-9275-752ad8326661 · outbound

This paper cites The O pen D P W hite P aper.

Position: Certified Robustness Does Not (Yet) Imply Model Security The O pen D P W hite P aper

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.479301Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.574216Z digest=sha256:36470f37d67ef0042f6131d7084824080b70e39db0e61bbb8cbd352fcd9882e0

Observation 3b7b0378-6553-4ef6-ab52-e1edec9c9cd6 · outbound

This paper cites The limitations of deep learning in adversarial settings.

Position: Certified Robustness Does Not (Yet) Imply Model Security The limitations of deep learning in adversarial settings

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.048822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.764544Z digest=sha256:eb1ebcc0830b8e9dfc3b0db1ad0e6d806fa0a253e6826ac003eb1aa7ccf85de5

Observation af3e2c7a-e67c-4c24-b415-98270657625f · outbound

This paper cites Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.788538Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.893390Z digest=sha256:26a8656856891e8895887a14438c8e330f34d4c3d8bdc08a7b27348f63156c2c

Observation edca459c-0af5-49e3-a142-aafd7b4f9c77 · outbound

This paper cites Practical B lack- B ox A ttacks against M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Practical B lack- B ox A ttacks against M achine L earning

Reference 75

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.505729Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.044941Z digest=sha256:797d86b3a9537abdfdb21459c06ebf07f520737ffaa8ca8f9cedb85898df8536

Observation 85a5bd81-bc05-4beb-bec9-1bb224d1a11f · outbound

This paper cites Playing the Game of Universal Adversarial Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Playing the Game of Universal Adversarial Perturbations

Reference 76

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.227652Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.186104Z digest=sha256:98ed969d72d8e3c3b78ebc95db1504c12088f8c111ca75775a386a9db3fdc08e

Observation 2d19e063-3b34-47b1-ad64-5a4429fb7fa7 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 77

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:14.283134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.372797Z digest=sha256:28800c69bc825ab50f910e95366b7c8bca8aaf2658ab65f68b41c0424bf5fa20

Observation 65ad6063-27c1-46ff-9dea-6cded413d3b6 · outbound

This paper cites Imagenet L arge S cale V isual R ecognition C hallenge.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet L arge S cale V isual R ecognition C hallenge

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.012463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.491871Z digest=sha256:f36ae1d92e1158accf067fbb3ec8639dc6844e24a67ecc37a036322c2a0c2de3

Observation 40a881eb-397d-418e-9bff-b4ab41b8dc82 · outbound

This paper cites Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers

Reference 79

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.802312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.610720Z digest=sha256:ec9fe23c9eca2f813d90e6e3a3a2e54a2f81988a3adb6c0d3432b5269715a63e

Observation 2f3a950c-58e5-4465-8abf-9566a85dc5ae · outbound

This paper cites A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.544017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.758198Z digest=sha256:d50e86293655a4a1c32f779442db6d8bad1fbcf329de2df8ac091cc036cb6b8d

Observation 1ad92bf6-9483-494d-9651-5980b3d5e302 · outbound

This paper cites Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound

Reference 81

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.222826Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.911695Z digest=sha256:37014ebf3eac0f318106ce497b4eb7914f7db7ff9107073501999425e0e51c32

Observation bd212a7b-91c1-40ed-9714-abc5449bc591 · outbound

This paper cites Fast and E ffective R obustness C ertification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fast and E ffective R obustness C ertification

Reference 82

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.984188Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.037794Z digest=sha256:e47da429a5e6763032c752450c352005161dddbfe40ac88859d32434364d75c6

Observation 1e121935-a6b0-4e2d-a056-d3b40456ed11 · outbound

This paper cites An A bstract D omain for C ertifying N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security An A bstract D omain for C ertifying N eural N etworks

Reference 83

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.824716Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.202288Z digest=sha256:37ceff79ef8715204b6264851736fc3c764ac8cf51325d9bd356305a6ee63ef8

Observation ef75589d-9b18-454f-9614-5d22364aeaff · outbound

This paper cites Understanding R isks of P rivacy T heater with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding R isks of P rivacy T heater with D ifferential P rivacy

Reference 84

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.674576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.353619Z digest=sha256:108627f33f2bff1bee723c03206bbb85184cc4f3ea2e17aad640af76febf9772

Observation cdc09798-42f1-4546-aaac-e1588ce6b779 · outbound

This paper cites Understanding TSP D ifficulty by L earning from E volved I nstances.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding TSP D ifficulty by L earning from E volved I nstances

Reference 85

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.490448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.502054Z digest=sha256:709b42d14059a095431eb5fca11a9187f4cf885239f364fedb2434d3eeb0bb34

Observation a9935a73-37ce-4a4e-ac31-7ffa6dfec873 · outbound

This paper cites Cullen, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Benjamin I.P

Reference 86

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.291349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.608620Z digest=sha256:76faabc175e6a01355eefc3359cee35d88ab74c73cabc39acc0770d344ea1057

Observation 93edb3aa-0986-4ed0-a7a9-d69485ed668d · outbound

This paper cites Intriguing P roperties of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Intriguing P roperties of N eural N etworks

Reference 87

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.051888Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.777669Z digest=sha256:79d9d95b4f27707b756a0c1c99c491d4a60ac41487f29bdf5ba8d94b65f089e6

Observation c4bcb770-24fd-46fd-b603-bcf7c2b6a375 · outbound

This paper cites Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks

Reference 88

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.883970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.894033Z digest=sha256:9ddc1af67f34eee447bc773c40073941522c8a6c850b075e0fbd9efb39560585

Observation e982f0e8-0ce5-49b8-acf1-362596d663e4 · outbound

This paper cites Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification

Reference 89

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.747975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.028432Z digest=sha256:da67b7bf458b11cb67b970576921bd5417d94db013ef52f7b773b2b333ca7068

Observation db70ca01-8cda-4f0b-9e4b-004324f00d71 · outbound

This paper cites Towards F ast C omputation of C ertified R obustness for R e LU N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards F ast C omputation of C ertified R obustness for R e LU N etworks

Reference 90

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.517799Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.171655Z digest=sha256:274f20d7cea21de3da73968097ddbe90e7da73f4307d6a77fd78b35ca42c707e

Observation 251618a8-f297-4142-86f9-716ca981dce1 · outbound

This paper cites COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks

Reference 91

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:07.892575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.336873Z digest=sha256:b564c6f9aa1d1883f60caae04f6f782fbe281bae3e36b7680a8a097826cbb87c

Observation 946cff58-4c37-4cc2-9953-a7907a9587c5 · outbound

This paper cites Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors.

Position: Certified Robustness Does Not (Yet) Imply Model Security Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors

Reference 92

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.254767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.500370Z digest=sha256:8fc3f14f2613c8d7113d488beb00123d78d0745b4222ee115ca611b92b1ee99a

Observation 1eafc73d-65a5-4e82-901c-6a5bba6dde30 · outbound

This paper cites Spatially T ransformed A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Spatially T ransformed A dversarial E xamples

Reference 93

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.964546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.655922Z digest=sha256:812e190c8ff6481390e9cd34aa5b1fb8c1be628ab338d226cafac034d08cf9de

Observation 48f3fd9d-29e9-43a0-a05c-15e80d670406 · outbound

This paper cites Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension

Reference 94

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.680317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.815848Z digest=sha256:ba50b6371e41aa8df46811710ad48db3a7de75cb9247edc600672b7096003052

Observation a49a79dc-b5d6-41a7-8833-941f8a821c22 · outbound

This paper cites Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond

Reference 95

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.360779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.974416Z digest=sha256:7c55142c2502e01e6856baf5ab52d57c46558c1b1b150c92968959f1775ee123

Observation 18928d75-3cc4-4c69-86cf-1046c0947976 · outbound

This paper cites Randomized S moothing of A ll S hapes and S izes.

Position: Certified Robustness Does Not (Yet) Imply Model Security Randomized S moothing of A ll S hapes and S izes

Reference 96

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.112431Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.132781Z digest=sha256:787c6b21652de90e51ea76bc1816c58240094bc6263c606022f75829f321dbb0

Observation 6abfca14-d837-432a-bc52-91161014df03 · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 97

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.845695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.281854Z digest=sha256:52b8f60d4570537eeab39822aca8f877683103d9a5120e62e234bbc50fce530f

Observation 6889ea0c-5f15-477b-bc4a-f20141c92dbf · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 98

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.530014Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.475253Z digest=sha256:4a6122fda80b27b49ae8cef80a7d114e07b542af108d643eafe83192874b5d56

Observation d2f459ea-33aa-47bf-96ea-fd5897a0a5f2 · outbound

This paper cites A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning

Reference 99

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.188483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.593011Z digest=sha256:1bde6dab8b9c2bf547e1119244a83663eaa2cf2da7cdc8232f331c9f91606baa

Pith citing papers

No inbound Pith citation observations are available.