{"as_of":"2026-08-05T21:42:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b009246bde04e5a0013a9b2dce89565014ba9ec5d1d6c19904702734fcea36e2","coverage":[{"denominator":56,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":56,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-08T04:14:39.637818Z","state":"measured"},{"denominator":56,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":56,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.24332/citation-record","integrity":"/paper/2604.24332/integrity","json":"/paper/2604.24332/citation-record.json","paper":"/paper/2604.24332"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding and im- proving fast adversarial training","venue":null,"work_id":"f702df98-6855-4250-bf22-4e237a5c170d","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:6887aa75a8883a92fdb27255b3df6345f7e2073734e1fe64af4d3bc4277ddb4c","observation_id":"6be060b0-003a-48fb-963a-e27fba4bab5d","resolution":{"observed_at":"2026-05-26T21:13:03.668735Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Advdo: Realistic adversarial attacks for trajectory prediction","venue":null,"work_id":"ad169d08-2448-4437-9640-313037eba50d","year":null},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:618988aa3ed69ddeb36db9e8e0f1b0628ec72477c275bb8a14c79120b914d82a","observation_id":"09420fb3-6bb3-4732-a89d-f2d5e11f073c","resolution":{"observed_at":"2026-05-26T21:13:03.682524Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":"8017e914-8a42-47aa-8e91-06938e9718a2","year":2017},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:e8be5a960ddc8aee78bd285cb4a2135b3773d3f813c3850d9a2edc167b5ba07f","observation_id":"a4e96eac-e6f6-4bcb-8fc5-028a4937dab2","resolution":{"observed_at":"2026-05-26T21:13:03.714329Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2403.05030","last_updated":"2025-07-29T09:44:14Z","snapshot_observed_at":"2026-07-06T17:41:23.460300Z","submitted_at":"2024-03-08T04:22:48Z","title":"Defending Against Unforeseen Failure Modes with Latent Adversarial Training","version":6},"cited_work":{"arxiv_id":"2403.05030","doi":"10.48550/arxiv.2403.05030","metadata_source":"pith","pith_arxiv_id":"2403.05030","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"ArXiv:2403.05030 [cs]","venue":"cs.CR","work_id":"3e4211ab-52f4-4fea-b65a-b27c3c092134","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2403.05030","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:2692cf24f81d47de01fb6b92d764c5e8c63eb8c939aabdb9cc4548a8e081f325","observation_id":"0efe0826-ca62-406d-8b47-f4e6fb8cb1fd","resolution":{"observed_at":"2026-05-11T21:46:49.457079Z","resolver_source":"arxiv_id","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2110.12734","last_updated":"2022-02-04T04:32:52Z","snapshot_observed_at":"2026-08-01T21:52:31.314382Z","submitted_at":"2021-10-25T08:46:00Z","title":"Fast Gradient Non-sign Methods","version":3},"cited_work":{"arxiv_id":"2110.12734","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2110.12734","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast gradient non-sign methods","venue":null,"work_id":"548e6170-d6c3-4c0f-b597-ad42d0c20111","year":2021},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2110.12734","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:11dacabc1751b5c648bfe01e601e10cf495c25f4034ffff3fa5df253cf94dedd","observation_id":"b857790f-4091-4039-8a86-d8d95d4f1d64","resolution":{"observed_at":"2026-05-11T21:46:49.465168Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliable evalua- tion of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":"7319d820-fea0-4378-b26d-31adae160090","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:1a90240c203515a4c0cd0c2fdaca4fa5dd1128befbd7f07b90f53ac06fafe811","observation_id":"f0a59fad-f328-4fa7-9f04-9d0d6c17b2f3","resolution":{"observed_at":"2026-05-26T21:13:03.654810Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Make some noise: Reliable and efficient single-step adver- sarial training.NIPS, 35:12881–12893","venue":null,"work_id":"e5c416ef-2080-435c-9127-02a795281c83","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:b40f550a006ccc7889229dcff17bfcc15d8fa23e0067d90b057bd37e111d4add","observation_id":"2d4df3d5-3386-4aa5-92af-de98b8210126","resolution":{"observed_at":"2026-05-26T21:13:03.647580Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Imagenet: A large-scale hierarchical image database","venue":null,"work_id":"f9b8feab-304e-4e60-b985-f3eff51f6e8b","year":2009},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:6dd17d57ec5baaaa3e621b4f32972344383fdde5e17f3cb361f213afe8d861c8","observation_id":"2059c06f-d21f-4ab3-9b32-133a2b10b64f","resolution":{"observed_at":"2026-05-26T21:13:03.711042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Boosting adversarial at- tacks with momentum","venue":null,"work_id":"c110796c-e0e3-4d1d-afb2-acae15bbbeb4","year":2018},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:c4c64b56405f44329473ea0d6db836f3da370dabbddf8021612cadab1d8846a1","observation_id":"62b6c48a-0502-4479-a31c-961640d756b6","resolution":{"observed_at":"2026-05-26T21:13:03.689784Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2405.20978","last_updated":"2024-05-31T16:24:53Z","snapshot_observed_at":"2026-07-06T18:23:23.565502Z","submitted_at":"2024-05-31T16:24:53Z","title":"Enhancing Noise Robustness of Retrieval-Augmented Language Models with Adaptive Adversarial Training","version":1},"cited_work":{"arxiv_id":"2405.20978","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2405.20978","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Enhancing noise robustness of retrieval-augmented language models with adaptive adversarial training","venue":null,"work_id":"d1d1acd8-a456-4cbc-af28-11024041da5e","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2405.20978","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:d47fef61db3d356c0e6f79377925de473294746d3043bb464a0ff6ca95213f2b","observation_id":"5642efbc-e610-4f88-a182-d8d40aa7a406","resolution":{"observed_at":"2026-05-11T21:51:10.640287Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack","venue":null,"work_id":"dcf1e1e0-1a57-4cc1-a17c-f995ab7eefbb","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:ad080b7f88ad84ac624eaff0d0e981b0c4327caa8c06ca24c233b870f5537ab8","observation_id":"94e2fc30-fa4f-4d9d-9050-7d98a0668d57","resolution":{"observed_at":"2026-05-26T21:13:03.614160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.15476","last_updated":"2021-03-29T10:19:35Z","snapshot_observed_at":"2026-08-04T09:24:53.017907Z","submitted_at":"2021-03-29T10:19:35Z","title":"ZeroGrad : Mitigating and Explaining Catastrophic Overfitting in FGSM Adversarial Training","version":1},"cited_work":{"arxiv_id":"2103.15476","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2103.15476","snapshot_observed_at":"2026-06-28T19:12:35.061176Z","title":"Zerograd: Mitigating and explaining catastrophic overfitting in fgsm adversarial training","venue":null,"work_id":"02482c21-a64b-467f-87fb-ad3de2e6615f","year":2021},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2103.15476","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:659e15a5d8735264af662919ece70aeec8036d5c8c916167ea83c49b494187dd","observation_id":"99289607-c73b-4eae-8017-3ab6ada1e7fb","resolution":{"observed_at":"2026-05-11T21:51:10.991333Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Explaining and harnessing adversarial examples","venue":null,"work_id":"1d68202f-2895-4895-8339-92ae08ea204c","year":null},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:2cef50a4d3ad2465b8afcf4d9a44893f9bd8c29f52327cfbf66c1df3403917b0","observation_id":"4db6ada4-75a7-4bd2-b305-75a47b594d2f","resolution":{"observed_at":"2026-05-26T21:13:03.728263Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Segpgd: An effective and efficient adversarial attack for evaluating and boosting segmentation robustness","venue":null,"work_id":"2d9ca5b1-d451-4ce8-b1b4-611f8fde7ed3","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:5ee0e5edf36a64856d54340dc6e84d607f754053bc62fbb2f822d5f787f3984c","observation_id":"34cc9e3c-5057-4262-8674-685a2461678f","resolution":{"observed_at":"2026-05-26T21:13:03.685936Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Deep residual learning for image recognition","venue":null,"work_id":"79f6bf7e-d5c6-4b22-81e8-36181c28204d","year":2016},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:e510c60b064bd5ce5ece1386097dfad9440f2dabb93652b0c5e8ea34e01bb2bd","observation_id":"cc96bebe-6c89-4fec-a4ad-c4f47c42ebd3","resolution":{"observed_at":"2026-05-26T21:13:03.703728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast adversarial training with adaptive step size.TIP, 32:6102–6114","venue":null,"work_id":"829d6a85-e9d2-458a-b509-5a1b7a156306","year":2023},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:ac41779c82dbbeaeb0c7e2b516c35c390e2d1b1eda216cd2fe297bda757e65b1","observation_id":"e09fb949-428d-40c5-83af-1dbc29f5a88f","resolution":{"observed_at":"2026-05-26T21:13:03.707294Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Las-at: adversarial training with learn- able attack strategy","venue":null,"work_id":"4f39081f-4ccf-4402-81e9-eafece9d2b2d","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:a1a6d6ef6bf13e87afe173f5b406f2bbb83a5a8115404140ab9d7bae8f555437","observation_id":"f28da80b-1f9a-4d3f-a7b9-fafa39c0d4c4","resolution":{"observed_at":"2026-05-26T21:13:03.757144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Boosting fast adversarial training with learnable adversarial initialization.TIP, 31:4417–4430","venue":null,"work_id":"94fcae08-3810-41b6-831b-16ca28c22a34","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:7ef320e4b8407324c00afe6d8478111ceb81f457c228e56e4dc9427666c52b19","observation_id":"72dbb32a-64b6-413b-908e-a6c8f6143fa1","resolution":{"observed_at":"2026-05-26T21:13:03.621927Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting and exploring efficient fast adversarial train- ing via law: Lipschitz regularization and auto weight aver- aging.TIFS","venue":null,"work_id":"e3aa1d03-bc18-4109-8c43-fd93c0713605","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:30ede914ba5344cafd435f75ef6b645bb771acf9c01c7ac9b2c51795b5016b39","observation_id":"d7890c86-896d-47a1-ab21-85ca39ae87f6","resolution":{"observed_at":"2026-05-26T21:13:03.739479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Improving fast adversar- ial training with prior-guided knowledge.PAMI","venue":null,"work_id":"24c6a994-a5a7-436a-856a-721e706abd7b","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:086b6d8aa2d12170d035572f48ecca5e66d9e5e634f9eb516a5500e6b29878f4","observation_id":"6109d3f4-09e7-4807-9a90-73e793c99b85","resolution":{"observed_at":"2026-05-26T21:13:03.749931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Understanding catastrophic overfitting in single-step adversarial training","venue":null,"work_id":"1bbe00f0-05dc-484f-9e12-08b5767e51af","year":2021},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:18b75e1616179b354f78739152eae68883d574bcbeffb9ab7a8d04fe88ef9f74","observation_id":"8e2a3e07-a875-4a21-abfc-9f56b2ea3a28","resolution":{"observed_at":"2026-05-26T21:13:03.693027Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-09T05:05:59.666110Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":"964b315d-4031-40b7-91cd-b4e5674b39b9","year":2009},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:cb1437b4b571f3ca67ff51d9f3168edf29cf1f2cca8a2a4fa60e9859ec4d13c2","observation_id":"4ec236eb-a988-4bcc-9811-dd479debbb1d","resolution":{"observed_at":"2026-05-26T21:13:03.618213Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Kurakin, I.J","venue":null,"work_id":"ed157371-5cbd-4a9a-87c5-d7eaaef05f2f","year":2017},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:bb6d2414ad1853c4b31848bbfbe6f0ab32b0766340a50d0cebcc3dd0184e72c6","observation_id":"9f88c487-d058-49c6-9f3f-de3f80d47b2c","resolution":{"observed_at":"2026-05-26T21:13:03.746511Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Ad- versarial examples in the physical world","venue":null,"work_id":"d6be603b-5a57-4af7-a327-50d9dd1410e8","year":2018},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:35d4612d7db6cfcc2ce52af6857185b07386024306dc4c96360b1bd7b2a53968","observation_id":"2e58d535-2e1b-45b6-afc9-b640c00048c8","resolution":{"observed_at":"2026-05-26T21:13:03.665264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Subspace adversarial training","venue":null,"work_id":"d6e5a411-7141-4d1c-9cc6-eeba46027aca","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:95ff86f21e8f22b08332b7bf0046d2779106569518986cc5784b2718ca0cd09f","observation_id":"bcbbbd2b-2c1e-4ded-835d-88917042103a","resolution":{"observed_at":"2026-05-26T21:13:03.643983Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"cdc13c5d-b1b0-4de9-b80c-2592e4eddec1","year":2018},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:7a7b8826fd6895b7ea9b36b04b04737d697c904f576456491dd7c47452f44507","observation_id":"e2f33461-005d-49ab-a0a3-3f9b0ac4372f","resolution":{"observed_at":"2026-05-26T21:13:03.607637Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Square attack: a query-efficient black-box adversarial attack via random search","venue":null,"work_id":"df6e273d-0c75-46f8-9742-9c5f54fd1815","year":null},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:8fb0e838081318ff95a1b82dd11f08d947422b7b1a5eeb2b476a14e9aca1b639","observation_id":"56af4556-e03e-4af1-91f9-d4e334a6cd27","resolution":{"observed_at":"2026-05-26T21:13:03.743161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"When adversarial training meets vision trans- formers: Recipes from training to architecture.NIPS, 35: 18599–18611","venue":null,"work_id":"bd26c55f-7cf4-4601-8e7f-cbcf9c43b9b4","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:0fd2c885eadc1cef06a480614fcf13c62e54627f88c08afbfbd32414af3ea234","observation_id":"87a06f12-1dc7-496d-9d59-e8342874cd89","resolution":{"observed_at":"2026-05-26T21:13:03.600462Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.05488","last_updated":"2022-10-05T16:42:59Z","snapshot_observed_at":"2026-08-05T19:54:30.532781Z","submitted_at":"2022-02-11T07:37:55Z","title":"Fast Adversarial Training with Noise Augmentation: A Unified Perspective on RandStart and GradAlign","version":2},"cited_work":{"arxiv_id":"2202.05488","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2202.05488","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast adversarial training with noise augmentation: A unified perspective on randstart and gradalign","venue":null,"work_id":"50a00f49-8b4e-42a5-958e-5dd4014f355f","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2202.05488","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:c9fbab142ecbcb747383c303f7bf7f82846263be8d6a86833b70395b80067b1e","observation_id":"1af673d9-aa87-4131-83e5-a12f474d8b48","resolution":{"observed_at":"2026-05-11T21:51:11.048000Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial initialization with universal adversarial perturbation: A new approach to fast adversarial training","venue":null,"work_id":"6618373e-66d3-4058-a5aa-a3a55e9d587b","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:fdba76c7931f56f7f85f26cb7b5ec45131c42f527cda32019b48493756dfa7f6","observation_id":"6f5d4be2-c6fa-454f-82be-71a72dcd315a","resolution":{"observed_at":"2026-05-26T21:13:03.625528Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Reliably fast adver- sarial training via latent adversarial perturbation","venue":null,"work_id":"e153bf21-0f88-4c07-877e-a547e728e8d5","year":2021},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:a5ef3e4222a06b575310740042f05282cb88eaf65645a82723da8942e68640a6","observation_id":"8231350d-97c0-4ce4-8061-bee7c614bacf","resolution":{"observed_at":"2026-05-26T21:13:03.675496Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Overfitting in ad- versarially robust deep learning","venue":null,"work_id":"5403b6c3-a305-4906-a39d-7d8cc31750d4","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:f92940c6cc6bd1959b71efda7e6978552e0c46fa54c4bc7d022077a28de342cf","observation_id":"83df1d74-368e-44ba-95f5-79228e51949a","resolution":{"observed_at":"2026-05-26T21:13:03.696360Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Adversarial training for free!NIPS, 32","venue":null,"work_id":"fac4bd7c-dd51-452d-a489-e44b00acd70d","year":2019},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:6a76c0f51e256d6bea24d29977ed79baea02900767d7130940d767279aa4b627","observation_id":"8db3f604-f595-431d-a697-71215069b10c","resolution":{"observed_at":"2026-05-26T21:13:03.753613Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.09172","last_updated":"2026-07-12T18:25:55Z","snapshot_observed_at":"2026-08-03T10:45:39.812200Z","submitted_at":"2026-01-14T05:15:10Z","title":"BalDRO: A Distributionally Robust Optimization based Framework for Large Language Model Unlearning","version":3},"cited_work":{"arxiv_id":"2601.09172","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2601.09172","snapshot_observed_at":"2026-07-14T02:20:22.046951Z","title":"Baldro: A distributionally robust optimization based framework for large language model unlearning","venue":null,"work_id":"24e6e82e-d9b8-4932-b0be-480cf8102212","year":2026},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2601.09172","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:69eee4bc6c524355ab45b7c421eb1c9ca94ea68470e7b3055461f5c29392a7a6","observation_id":"58fe7cf8-3e29-418b-9090-3a61655557a1","resolution":{"observed_at":"2026-07-14T02:20:22.046951Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Guided adversarial attack for evaluating and enhancing adversarial defenses.NIPS, 33:20297–20308","venue":null,"work_id":"badf5b9e-d360-4522-8e2c-07f175039fd5","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:1b62b5c3a20268f985bbc9f413d01d063599b7d5ae5f0732b03d63e9cb1f2d77","observation_id":"2c067013-11e7-43c8-871a-b3657545cd83","resolution":{"observed_at":"2026-05-26T21:13:03.764536Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards efficient and effective adversarial training","venue":null,"work_id":"62c8d3ad-4001-4ad8-8344-2b32878bea73","year":2021},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:865c8aeae874de7fa21f63711b9f72a48348f68836523d2228c5d412159665bc","observation_id":"562c32cc-abdc-48c7-bd56-92ee6afeb25b","resolution":{"observed_at":"2026-05-26T21:13:03.735482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Effective single-step adver- sarial training with energy-based models.IEEE Transactions on Emerging Topics in Computational Intelligence","venue":null,"work_id":"b4e8ca75-58b4-4019-9a3e-48bf79cb3d9e","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:26d69965535c262c981c9e569ba1cb99942c62df37af7a0fb59a2abdc6138bee","observation_id":"5c2a4669-ddfb-41f3-b037-1adbcf7269e8","resolution":{"observed_at":"2026-05-26T21:13:03.637431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Taxonomy driven fast adversarial training","venue":null,"work_id":"f476683e-9eae-4c3b-bded-b6cc781929a5","year":null},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:334665b7a991a27e892713bd863d150af1f968a3bc2f740c1a3d965b4196a281","observation_id":"94fcdb80-61a4-4598-a5a5-95d38f78585c","resolution":{"observed_at":"2026-05-26T21:13:03.633780Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Improving adversarial robustness requires revisiting misclassified examples","venue":null,"work_id":"8da629e6-226c-44c0-9723-bd84d4ff4329","year":2019},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:f084f60cd7dcf3fdbcb740fcef3c21ce9bbd76e63d703fde65545b86bea2124f","observation_id":"15201957-9837-4002-8060-51a626ee6fdb","resolution":{"observed_at":"2026-05-26T21:13:03.640695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Re- visiting adversarial training at scale","venue":null,"work_id":"7cf343ff-c9ab-45c5-93a1-67ef52b9667c","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:0f31bc11a522651c57bded55b138b69149ec0dcf3af1ad403d42ea5636ee48bc","observation_id":"1e464289-c2e3-4d9b-94c4-8ac8952a2229","resolution":{"observed_at":"2026-05-26T21:13:03.651525Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Wong E, Rice L","venue":null,"work_id":"6e9fe2a0-99ff-4600-8a6d-5a832b55e05a","year":2020},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:49a8c1db0cb9f3fe0cec0f3149b28de40059135c5a251eca9bba7e33ccaf699e","observation_id":"002db7e6-b69e-4648-b7bb-2a4c76f05659","resolution":{"observed_at":"2026-05-26T21:13:03.610799Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Prior-guided adversarial initialization for fast adversarial training","venue":null,"work_id":"d757f89d-15d0-4707-a78e-7e738825c825","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:57bed00edb5e84dddfddbc11dc93f2b1eaf78e64a87df777b8838dc8a28c430a","observation_id":"45e9a97c-502d-4fb1-b67b-3dedf952c7de","resolution":{"observed_at":"2026-05-26T21:13:03.629967Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Structure-guided adversarial training of diffusion models","venue":null,"work_id":"b603ad93-2e22-440f-b250-859ef0ef6465","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:ce87565219513f6acff16f334fcd0204fb181c8d289014b3123a6f14aba588e3","observation_id":"a8176e9f-974d-42a8-a719-3af4b85cc1e2","resolution":{"observed_at":"2026-05-26T21:13:03.658287Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2401.12461","last_updated":"2024-01-23T03:03:57Z","snapshot_observed_at":"2026-07-06T17:19:08.136109Z","submitted_at":"2024-01-23T03:03:57Z","title":"Fast Adversarial Training against Textual Adversarial Attacks","version":1},"cited_work":{"arxiv_id":"2401.12461","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2401.12461","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast adversarial training against textual adversarial attacks","venue":null,"work_id":"828213f7-335a-4194-9cd8-9d7ca6a06346","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2401.12461","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:7ca7914f080b6eb0a7891ee9f1e3911b58ee23f4786b72790c16da4264c5bdd9","observation_id":"5744edad-3317-4136-b36f-f800cf35d793","resolution":{"observed_at":"2026-05-11T21:51:11.061580Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Robust and transferable backdoor attacks against deep image compres- sion with selective frequency prior.IEEE Transactions on Pattern Analysis and Machine Intelligence","venue":null,"work_id":"22668752-2a25-4510-ab1e-08df39909dd7","year":2025},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:3996f4e9b2226ffc1cc8e59fc49aa450e5a1c327a8310b1a903636426363fa1e","observation_id":"ca21845c-9143-4839-a939-5fec012e4335","resolution":{"observed_at":"2026-05-26T21:13:03.661969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Towards model resistant to transferable adversarial examples via trigger ac- tivation.IEEE Transactions on Information Forensics and Security","venue":null,"work_id":"900e5f3b-5fae-4466-ab1c-55a043a04fdb","year":2025},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:11ceaa4aeb3d6538f5d52358333bb9ad3fc7c714be9a86d750253d3fc1f87274","observation_id":"646da963-0812-4542-900e-77989b3df96d","resolution":{"observed_at":"2026-05-26T21:13:03.596526Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Backdoor attacks against no- reference image quality assessment models via a scalable trigger","venue":null,"work_id":"17af008f-3d2a-462d-bac3-c5687dd36ece","year":2025},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:a9673f64160f7ec9a136b87056cf30812a649652f0af75ef745234473b40bbc9","observation_id":"064a9f43-287d-4d02-b914-6e091d3f5047","resolution":{"observed_at":"2026-05-26T21:13:03.760931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Mtl-ue: Learning to learn nothing for multi-task learning","venue":null,"work_id":"4a1136a6-6b05-4a5d-a840-f4640cbdc2cc","year":2025},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:0ec739db04f21ef6db7ee69c3bcddd14b1f817a0b38bd9d890fe909c4514ecb3","observation_id":"1ff1d1f4-ee66-4b6d-acea-4c9358a7c7ea","resolution":{"observed_at":"2026-05-26T21:13:03.721156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting adversarial training under long-tailed distribu- tions","venue":null,"work_id":"e0a85399-49ad-40a4-b2bd-112b20024ec4","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:458f43b259352cdaed23d4d478000f5681413d46bce4b5050c2e90a7283c7d2e","observation_id":"7c0d8b22-b83c-46b7-95cb-16d0847cba1b","resolution":{"observed_at":"2026-05-26T21:13:03.731878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2601.03190","last_updated":"2026-07-23T19:26:16Z","snapshot_observed_at":"2026-08-03T12:24:58.228438Z","submitted_at":"2026-01-06T17:10:48Z","title":"Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearning","version":4},"cited_work":{"arxiv_id":"2601.03190","doi":null,"metadata_source":"pith","pith_arxiv_id":"2601.03190","snapshot_observed_at":"2026-07-01T13:25:44.896687Z","title":"Maximizing Local Entropy Where It Matters: Prefix-Aware Localized LLM Unlearning","venue":"cs.CL","work_id":"cfc97505-b23b-4c51-a71f-0693fc85beb5","year":2026},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"cited_paper":"/paper/2601.03190","citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:0e0a5ff446e349937fbab1232b7398b2508e951f56b1c1780059f059eab836b6","observation_id":"850c75dc-9701-407a-9b4a-aab185ed2b85","resolution":{"observed_at":"2026-05-11T21:46:49.442529Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Theoretically principled trade-off between robustness and accuracy","venue":null,"work_id":"ef6c0389-9f09-4774-a1c8-ec5ec5bf1350","year":2019},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:65121a70a2424e1638cff6a3ffdabe19f15ed0d344fdd9d137c4f92258a70ab8","observation_id":"457884b2-ee9e-47ed-90ae-fbfe8a86bd05","resolution":{"observed_at":"2026-05-26T21:13:03.678841Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Revisiting and advancing fast adversarial training through the lens of bi-level optimiza- tion","venue":null,"work_id":"731f5eef-d033-436f-a94c-d920bdd970d1","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:be6deb9d7660bf1ec608f3ad152697d51c42afef3c6718493582123d0de42369","observation_id":"e03b4a89-7097-456a-80ac-fb5bda25afc7","resolution":{"observed_at":"2026-05-26T21:13:03.699564Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Defensive unlearning with adversarial training for robust concept erasure in diffusion models.NIPS, 37:36748– 36776","venue":null,"work_id":"e0a94704-1569-4daf-a2dc-1485e793262c","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:a471cb45174841b2b87eccf4b19bf1242eb32be01d0603c507841fdab78e5151","observation_id":"085f4b69-f571-4c69-82e0-656e06fa56fb","resolution":{"observed_at":"2026-05-26T21:13:03.718022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Fast adversarial training with smooth convergence","venue":null,"work_id":"2fd478a5-b8e7-43c5-b92a-66912158bd3d","year":2023},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:9bd9b51549ed73efb424982bd92f4c0d53c2be03ca60bfba07b7c8b1e24a5e0a","observation_id":"f639657c-9a5c-40e8-86fa-6594ea4ad5b6","resolution":{"observed_at":"2026-05-26T21:13:03.724501Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Catastrophic overfitting: A potential blessing in disguise","venue":null,"work_id":"4c6df2a6-d55d-4267-8fd4-0a27f4396bc0","year":2024},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:b12c421af384cf9d16bd2f29a1033506c03cef81afc4896dc01b9ac47cde5540","observation_id":"2392d515-79e6-44dd-8c7b-e037febca0d6","resolution":{"observed_at":"2026-05-26T21:13:03.604148Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Shadows can be dangerous: Stealthy and effective physical-world adversarial attack by natural phe- nomenon","venue":null,"work_id":"ab2ee2d0-ac9c-4794-9e25-bc7c0b31ada6","year":2022},"citing_paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-05-08T04:14:39.637818Z"},"links":{"citing_paper":"/paper/2604.24332"},"observation_digest":"sha256:28511a3eb687cc0e36e34612ae3ec020e84e35116f5eff0764831f99272cf981","observation_id":"d2eb0952-27b8-4765-b8dd-c9a2e956253d","resolution":{"observed_at":"2026-05-26T21:13:03.672108Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.24332","last_updated":"2026-04-27T11:23:18Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-04T00:02:13.347303Z","submitted_at":"2026-04-27T11:23:18Z","title":"Mitigating Error Amplification in Fast Adversarial Training"},"reference_resolution":{"displayed":56,"state_counts":{"malformed_identifier":0,"metadata_mismatch":1,"parse_uncertain":0,"unresolved":0,"verified_exact":7,"verified_fuzzy":48},"total_outbound_references":56},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2604.24332."}