{"as_of":"2026-08-06T03:27:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:559b870aa63c33740f6b297115f4ea10066f4dab9bfbc8df66c7e5d00df25f7f","coverage":[{"denominator":54,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":54,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T17:57:55.537603Z","state":"measured"},{"denominator":54,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":54,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.18339/citation-record","integrity":"/paper/2607.18339/integrity","json":"/paper/2607.18339/citation-record.json","paper":"/paper/2607.18339"},"outbound":[{"citation":{"cited_paper":{"arxiv_id":"1412.6572","last_updated":"2015-03-20T20:19:16Z","snapshot_observed_at":"2026-07-06T04:04:16.777653Z","submitted_at":"2014-12-20T01:17:12Z","title":"Explaining and Harnessing Adversarial Examples","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1412.6572","snapshot_observed_at":"2026-08-01T17:57:50.258462Z","title":"Explaining and harness- ing adversarial examples,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.258462Z"},"links":{"cited_paper":"/paper/1412.6572","citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:231e15e4ec964606b103096a31c87ef53a4491652d5c704b9ac96f06ac677fb5","observation_id":"21b873a6-ddce-4974-a56e-33c5114fb183","resolution":{"observed_at":"2026-08-01T17:57:50.258462Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.352422Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.352422Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:b86da9010c9b011ae53dc260248fffa44e5f069942e037366b64aac1e7b79eaa","observation_id":"68812362-3965-4137-9902-fbef5b28d50b","resolution":{"observed_at":"2026-08-01T17:57:50.352422Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.488256Z","title":"On detecting adversarial perturbations,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.488256Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:f54e2a75631c646fdb3e294ea0e2aa2ed2958cc4a81cda2e51156082c8114a34","observation_id":"2e9e006e-8157-453c-9051-6dd60c4ea7fd","resolution":{"observed_at":"2026-08-01T17:57:50.488256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.567590Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.567590Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:5aea9b1886c7f9a8df41a31f6d2468f3c36a1718df095b3755d59623c429710b","observation_id":"d066f990-a111-495b-aae6-520343be71ec","resolution":{"observed_at":"2026-08-01T17:57:50.567590Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.705685Z","title":"Adversarial training for free!","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.705685Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:600db38c979fe95703b66f9737b91262a2ba67f0c2f2712976daa044094beac6","observation_id":"8eedfdf7-e3b5-46b8-89e7-485ede60eac4","resolution":{"observed_at":"2026-08-01T17:57:50.705685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.837436Z","title":"Fast is better than free: Revis- iting adversarial training,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.837436Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:0c432b11788e93fba45292998d2061d39d05a98b0d623f43c3a81064eaa1a360","observation_id":"da7c8610-8186-495c-a1c6-1de5a681c84a","resolution":{"observed_at":"2026-08-01T17:57:50.837436Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:50.975362Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:50.975362Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:c912aec6ce7dbb5012b94ca0a4ac1557b0088c0f9f2c8197cddf36585bf1d79a","observation_id":"aed2f0b3-0115-406a-b416-ce4f7b59cfe2","resolution":{"observed_at":"2026-08-01T17:57:50.975362Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.112044Z","title":"Robust evaluation of diffusion-based adver- sarial purification,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.112044Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:625fbc2f3a7f3032da39fa880049dd18f6624e07c651d59cdc4a2b62f4e94d90","observation_id":"33747dc8-7781-471a-b99c-341b60479eca","resolution":{"observed_at":"2026-08-01T17:57:51.112044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.250079Z","title":"A comprehensive study on robustness of image classification models: Benchmarking and rethinking,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.250079Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:95987a2bd39a1697d4d2f9f58024b601de23d7e9ac3757560aff6bdda50e5195","observation_id":"a8e8802f-a19e-4ed7-ba9e-8d96be006360","resolution":{"observed_at":"2026-08-01T17:57:51.250079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.395025Z","title":"Sample-specific noise injection for diffusion-based adversarial purification,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.395025Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:8d25b887c75bb4352bdc7d49a47573b3f8cc20a60648473dfa0158f16b010cbe","observation_id":"189f18b1-b9ce-4b44-9df0-6de5494eb5fb","resolution":{"observed_at":"2026-08-01T17:57:51.395025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.492906Z","title":"On the robustness of randomized ensembles to adversarial perturbations,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.492906Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:321fd8dbc61bc58a731dd6e463ee1be14bc18f44aa0d8f47fcea54113e0babba","observation_id":"9181f76f-5a52-45ee-9fca-b74ee763bc64","resolution":{"observed_at":"2026-08-01T17:57:51.492906Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.611162Z","title":"Do ad- versarially robust imagenet models transfer better?","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.611162Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:89f8a1cea2fe532ec8dcc917bc4ba1a556ceed81cb511330d0a18f6bbf831330","observation_id":"24b58a06-042d-4cd8-9dc9-88ddec458203","resolution":{"observed_at":"2026-08-01T17:57:51.611162Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.689769Z","title":"When adversarial training meets vision transformers: recipes from training to architec- ture,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.689769Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:49071111c4d81e302d57d0a511f32ef559ef33551ed352c1e1d3fbb147885f6c","observation_id":"b8fa07dd-be3d-4825-bfee-813fe081bf1f","resolution":{"observed_at":"2026-08-01T17:57:51.689769Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.820411Z","title":"Robust clip: Unsupervised adversarial fine-tuning of vision embeddings for robust large vision-language models,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.820411Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:da0a76f2637fc4461f835605ff1b420753bcbe8ce73ea2d19c9ae66a4642e8f6","observation_id":"6b497f85-9ed4-49d9-be4c-e6284016509d","resolution":{"observed_at":"2026-08-01T17:57:51.820411Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:51.965259Z","title":"Under- standing zero-shot adversarial robustness for large-scale models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:51.965259Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:bcda9c9d672121e1c08d3ff71390d006859891ed7cbd92c3eb368af1c85be32e","observation_id":"14470e60-0355-4f5e-9b7b-ed2c9d10e8a8","resolution":{"observed_at":"2026-08-01T17:57:51.965259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.057078Z","title":"Sim-clip: Unsupervised siamese ad- versarial fine-tuning for robust and semantically-rich vision-language models,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.057078Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:846c611a43227a1ca75b46e2ac8eea4f0d436ccba270d9a8b6305549c7ca891d","observation_id":"e8425c55-f74c-40b4-a8a8-d99c397f8681","resolution":{"observed_at":"2026-08-01T17:57:52.057078Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.190065Z","title":"Digital image enhancement and noise filtering by use of local statistics,","venue":null,"work_id":null,"year":1980},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.190065Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:cf24104da99d269f854d07568f518f0d99d18c6c2d12a6f7517606e3bd3a64f6","observation_id":"45f05b51-dba5-4840-9c19-b1ec1a5fe9aa","resolution":{"observed_at":"2026-08-01T17:57:52.190065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.310361Z","title":null,"venue":null,"work_id":null,"year":1989},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.310361Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:e5899fde03b19c3af174ff87baa2a80088904c464c68d00762102a643d2f25e8","observation_id":"64dda996-7be9-4d7e-8728-1efbed080cbf","resolution":{"observed_at":"2026-08-01T17:57:52.310361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.400200Z","title":"The jpeg still picture compression standard,","venue":null,"work_id":null,"year":1991},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.400200Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:e1bf161784f9f6d4a937090f1638e8321117800d2a6f1303b8e5a29d3d6ea32b","observation_id":"7a59fc75-eb1a-4810-b26a-85f6e48225c5","resolution":{"observed_at":"2026-08-01T17:57:52.400200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.495039Z","title":"Defense-gan: Protect- ing classifiers against adversarial attacks using generative models,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.495039Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:ddfc60dc348ca215869aa0f2855132b48241f5faac40679c989ef503f45bd7a1","observation_id":"710b7f4e-be65-414b-80d2-e5eec5f23848","resolution":{"observed_at":"2026-08-01T17:57:52.495039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.599608Z","title":"Ape-gan: Adversar- ial perturbation elimination with gan,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.599608Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:7fdd1d61bc7ce8edf205ba3f87f470db4cbf79fb513eff99ce60793615230b0a","observation_id":"d12f3547-f7ed-4656-89b2-d5562caeb82a","resolution":{"observed_at":"2026-08-01T17:57:52.599608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.677334Z","title":"Adversarial purification with score- based generative models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.677334Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:17279e1e397b29cd2fbfee691b319bfa76420434b29b3fc8484b15a66f577307","observation_id":"717a8431-fc18-4ece-8635-4cc75de10fa8","resolution":{"observed_at":"2026-08-01T17:57:52.677334Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.731653Z","title":"Stochastic security: Adver- sarial defense using long-run dynamics of energy-based models,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.731653Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:0286a99806ba1a5ffc9cb07ac0cfaae8f3baabaf161a6dc5ed8e9202855db519","observation_id":"54a4e964-805b-4fa8-a73d-84bacb169cfd","resolution":{"observed_at":"2026-08-01T17:57:52.731653Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.817434Z","title":"Online adversarial purification based on self-supervised learning,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.817434Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:b8f5e4e8a6a364d2f9e1518f47dd179b92acc137d6d1a46a4ab4c8a0484a940e","observation_id":"a58d4e7f-ac2b-4cc3-a8ac-a0399dc14739","resolution":{"observed_at":"2026-08-01T17:57:52.817434Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.884925Z","title":"Purify unlearnable examples via rate-constrained variational autoencoders,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.884925Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:42b050b3c3d13debaee608f23a311fb6317453711e148d81aac8999ba169baf3","observation_id":"a4f05678-a3c6-4d97-a13b-997f0cb68d1d","resolution":{"observed_at":"2026-08-01T17:57:52.884925Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:52.940509Z","title":"Mimicdiffusion: Purifying adversarial perturbation via mimicking clean diffusion model,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:52.940509Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:ca41dcfdf8efa6fa00815decd5c931ae7dc3327adb51965d5adf224e58a3ec5d","observation_id":"7280701f-49b3-43ca-936b-80ed39fffd62","resolution":{"observed_at":"2026-08-01T17:57:52.940509Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.004463Z","title":"Diffusion models demand contrastive guidance for adversarial purifi- cation to advance,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.004463Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:973df91401ef02138bfc9c7280d7436f418b379e99fa079d11a8c68ed079f14d","observation_id":"71f56001-72ef-4e7a-b0be-c42593c3f5b1","resolution":{"observed_at":"2026-08-01T17:57:53.004463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.096323Z","title":"Diffilter: Defending against adversarial perturbations with diffusion filter,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.096323Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:f3ce504df7db61c71376ef07d6e476a87d7229fdc10bc0c109b82d9176e28129","observation_id":"102c1314-ab41-4aca-8a27-1685b7f9edc2","resolution":{"observed_at":"2026-08-01T17:57:53.096323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.191328Z","title":"Adbm: Adversarial diffusion bridge model for reliable adversarial purifi- cation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.191328Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:4bc53b787bb3d49b90f6fe6ed3db2523f912a45891f5bfaafc49fb3284530603","observation_id":"903a8e8f-10d4-442f-9bf4-ffbf6a0a12ff","resolution":{"observed_at":"2026-08-01T17:57:53.191328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.271400Z","title":"Divide and conquer: Heterogeneous noise integration for diffusion-based adversarial purification,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.271400Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:02941fa9be842d31ae10c676c8d60d427f73eac60277d4269166245693956027","observation_id":"16365296-a5d9-4ed2-83ce-8fde67e7d711","resolution":{"observed_at":"2026-08-01T17:57:53.271400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.354523Z","title":"Iterative window mean filter: Thwarting diffusion-based adversarial purification,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.354523Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:d433bcb770d004bc479999bd94874a47b1019018c202c672da6d5ae84180c5ea","observation_id":"db32f9d9-6919-46b3-9470-85f2965e5a29","resolution":{"observed_at":"2026-08-01T17:57:53.354523Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.445790Z","title":"Lorid: Low-rank iterative diffusion for adversarial purification,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.445790Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:9d623730daf37bdab62673fa58c510b89f16b6b523df711034ac2d36646cf5b8","observation_id":"1ec3a038-7cf1-4344-8b66-6c4d750c1383","resolution":{"observed_at":"2026-08-01T17:57:53.445790Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.513227Z","title":"Adversarial purification via super-resolution and diffusion,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.513227Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:cba4d9f00639ffda3cfcd5e5702bbf82f9cd0fb8c4cab85804d8bd5716779107","observation_id":"8dd59799-1a87-4574-9898-1fbe443cb95d","resolution":{"observed_at":"2026-08-01T17:57:53.513227Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.593342Z","title":"Making substitute models more bayesian can enhance transferability of adversarial examples,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.593342Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:086bcdda7c846e5e130d482a9214b28fb481f3ce7c750d11cc64ed83fa49e0f1","observation_id":"3c7cae7c-d548-46a4-aa37-e24b666f79c7","resolution":{"observed_at":"2026-08-01T17:57:53.593342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.661664Z","title":"Boosting the transferability of adversarial attacks with frequency- aware perturbation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.661664Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:6485899509bf752fb20c2982ff1f8af7faec960702a266b569945ac5daf791f6","observation_id":"ca196d6d-7984-44fb-ba77-dd1cd8096a70","resolution":{"observed_at":"2026-08-01T17:57:53.661664Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.785084Z","title":"Improving the transfer- ability of adversarial examples through black-box feature attacks,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.785084Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:6837a1e86b5292294e2edb3dff247e92a77c9c4207ba10e9c254165e597f2a1c","observation_id":"17e36b58-0949-4711-b572-0c6b239232f9","resolution":{"observed_at":"2026-08-01T17:57:53.785084Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.863345Z","title":"Pixel2feature attack (p2fa): Rethinking the perturbed space to en- hance adversarial transferability,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.863345Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:6ca6f08e4fb47e98492e3cc9e5855754e61bfe47bad301aa7b62fc02b4413514","observation_id":"890d1d28-fd85-41d4-a959-59ee0d723115","resolution":{"observed_at":"2026-08-01T17:57:53.863345Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.921546Z","title":"Enhancing adversarial transferability with adversarial weight tuning,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.921546Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:061e0524b512bfa1d337c366f96e78611bcbf4064f31501b4b2045178cad8ca9","observation_id":"e7d89192-c448-495a-891a-b3b6df7dbcf4","resolution":{"observed_at":"2026-08-01T17:57:53.921546Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:53.999617Z","title":"Boosting adversarial transferability through augmentation in hypothesis space,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:53.999617Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:ad80e8f4152175da93a863f4c64148a3caad040f0006f6de6e6e102c317a4f0b","observation_id":"87d2e421-5ab1-4f86-9c39-f9b3561004f9","resolution":{"observed_at":"2026-08-01T17:57:53.999617Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.057842Z","title":"Boosting adversarial transferability with low-cost optimization via maximin expected flatness,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.057842Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:8411cdf8537373e395db8f9e571efcbec03d864833a47bea45178adf60ca9b5a","observation_id":"a47ef16a-cdfa-49b9-9a65-7b823a51bbed","resolution":{"observed_at":"2026-08-01T17:57:54.057842Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.122277Z","title":"Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.122277Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:c365b25e68114b02009307ee032981b9e0340b5f5d4296c65c25d202d9d88bd3","observation_id":"7f830190-f5e8-45d0-a350-ee64e12448eb","resolution":{"observed_at":"2026-08-01T17:57:54.122277Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.195461Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.195461Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:eb07669bb20d0e83fc207d18be21607edab7d51c01865a928ea8eb303f12c623","observation_id":"5ad076b7-e5b7-4b49-b41d-f000086faea5","resolution":{"observed_at":"2026-08-01T17:57:54.195461Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.248627Z","title":"Diffattack: evasion attacks against diffusion-based adversarial purification,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.248627Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:67da24b33ecc6b9ad6d417aa81429afc8844a5951c04a5048bd85f3d670d8840","observation_id":"fbede962-9017-478e-8a09-10d94969b84a","resolution":{"observed_at":"2026-08-01T17:57:54.248627Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.325206Z","title":"Diffhammer: rethinking the robustness of diffusion-based adversarial purification,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.325206Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:385d86725912895b711df5efe22d4ca35118dfb6221338bae4aec30e9b6c51f5","observation_id":"75e342f2-220c-47e5-9a6f-d0f4d9443a0a","resolution":{"observed_at":"2026-08-01T17:57:54.325206Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.376102Z","title":"Diffbreak: Is diffusion-based purification robust?","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.376102Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:3083eeef75185cc37f32a5e6ef252109230553ea71d2e6e9af4ca50d2587d912","observation_id":"47856059-bf07-48dd-a4c5-5b12ad4310d7","resolution":{"observed_at":"2026-08-01T17:57:54.376102Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.504070Z","title":"Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.504070Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:05089c420dc58a7f45f94fff0d662eb810a50c9a9c05347bf4a9954a8fcfd827","observation_id":"30a095e0-dc3c-4753-b712-9a01a8a1206f","resolution":{"observed_at":"2026-08-01T17:57:54.504070Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.615971Z","title":"Minimal cascade gradient smoothing for fast transferable preemptive adversarial defense,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.615971Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:6936c4b11e02a09d0dc8869037af046540707c3460d41bfcd465d835fce8000e","observation_id":"0436a7b6-f2df-41bf-88c7-9d00caa2eee6","resolution":{"observed_at":"2026-08-01T17:57:54.615971Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.765158Z","title":"Synthesizing robust adversarial examples,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.765158Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:abec04371dcb7a53314a22fc1bf35c93810b40701d29fdef17fb590e332353c4","observation_id":"e759ea21-7952-4c00-903d-646a7ef9750f","resolution":{"observed_at":"2026-08-01T17:57:54.765158Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:54.898921Z","title":"Devling into adversarial transferability on image classification: Review, benchmark, and evaluation,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:54.898921Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:37421894c8bf7376bc9f986e03cc3d6a30a99b26b17ac11eb68a4b4c638a659b","observation_id":"067a17ab-70ad-4588-a2da-7edb6ca44b2d","resolution":{"observed_at":"2026-08-01T17:57:54.898921Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:55.023669Z","title":"Nips 2017: De- fense against adversarial attack,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:55.023669Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:5910751b82982b5ca09b22a920032ffec6eea0441acbe546b4ca539d03a27f8f","observation_id":"6701774f-7ac4-49e2-9a2e-8caba128622b","resolution":{"observed_at":"2026-08-01T17:57:55.023669Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:55.168423Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:55.168423Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:21682d00b1abf4396ff592666999a5c5d37f78a0a3aa9c972a7de13ec9974c2d","observation_id":"cd0bbcc6-162a-47ab-9f7a-40a639f5d134","resolution":{"observed_at":"2026-08-01T17:57:55.168423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:55.296919Z","title":"Vqa: Visual question answering,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:55.296919Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:de9d279202c32374e32b1f2a7465aeccd9ebcf13ee7635d4fe70d0045d42faad","observation_id":"17bf0545-9cd0-48f6-aa4c-e9ab23cdc6c3","resolution":{"observed_at":"2026-08-01T17:57:55.296919Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:55.422936Z","title":"Robustbench: a standard- ized adversarial robustness benchmark,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:55.422936Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:7e28e552e4cd8a86bfbb17d55ce89bc20e1ca395c62329583f5d82b278f7c2d0","observation_id":"5083adcb-e607-4041-91ee-6730c5de60b3","resolution":{"observed_at":"2026-08-01T17:57:55.422936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T17:57:55.537603Z","title":"Visual instruction tuning,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-01T17:57:55.537603Z"},"links":{"citing_paper":"/paper/2607.18339"},"observation_digest":"sha256:16ac05152fcc54707f99881738e17b3b708a88310fcef8f7b80a6a79d74b770f","observation_id":"956aa9e9-6627-4536-8a34-aac98d93c731","resolution":{"observed_at":"2026-08-01T17:57:55.537603Z","resolver_source":null,"status":"malformed_identifier"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.18339","last_updated":"2026-07-20T01:17:28Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T04:27:30.913088Z","submitted_at":"2026-07-20T01:17:28Z","title":"Shared Vulnerabilities in Robustness-Optimized Defenses: One Breach Exposes the Family"},"reference_resolution":{"displayed":54,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":53,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":54},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 6 August 2026, this Paper Citation Record lists 54 of 54 outbound references and 0 inbound Pith citation observations for arXiv:2607.18339."}