Pith. sign in

Paper Citation Record · LEDGER

Attacking Attention of Foundation Models Disrupts Downstream Tasks

As of 23 August 2026, this Paper Citation Record lists 51 of 51 outbound references and 0 inbound Pith citation observations for arXiv:2506.05394.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.05394 v3

Coverage vector

measured 51 of 51 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T11:09:11.016820Z

measured 51 of 51 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-23T06:30:58.430688+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

51 of 51 outbound references displayed

  • verified exact3
  • verified fuzzy24
  • unresolved24
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 7626cca1-6979-4450-a614-393ab109a233 · outbound

This paper cites Reveal of Vision Transformers Robustness against Adversarial Attacks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Reveal of Vision Transformers Robustness against Adversarial Attacks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:05.480828Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:05.480828Z digest=sha256:ae023aaa392220ce76c1a12b6e1424efb3edba45dd3ec363707a2e1d580aa99f

Observation 11a91e3a-2a7f-40d2-bb0f-128da3243493 · outbound

This paper cites Are transformers more robust than cnns?Advances in neural information processing systems, 34:26831–26843, 2021.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Are transformers more robust than cnns?Advances in neural information processing systems, 34:26831–26843, 2021

Reference 2

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.858926Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:05.545638Z digest=sha256:48fdc6cad907f22c05c5d83b6499ab52a98908c1ba8f7cde350bdf205b372ed0

Observation 58f71eef-9dff-49a9-9b9e-bbd5a686e7ca · outbound

This paper cites Under- standing robustness of transformers for image classification.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Under- standing robustness of transformers for image classification

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.711964Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:05.648923Z digest=sha256:e872d17aaff614e6e188c1b944afab6ee71867d92bc73bec162fe1e3efee893e

Observation 9daa0784-c5af-4ad8-a668-77c981a75d64 · outbound

This paper cites Language Models are Few-Shot Learners.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Language Models are Few-Shot Learners

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:05.717334Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:05.717334Z digest=sha256:c9b03feb04bd69632dead5f13e43c6d65f92eedbfbb647ccb16d0adcbe5100e6

Observation da802625-2a0f-48fe-80da-a0791c43fc19 · outbound

This paper cites Towards evaluating the robustness of neural networks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Towards evaluating the robustness of neural networks

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.603788Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:05.788881Z digest=sha256:36a77a298a99fd65e738af052748c6f909b17e64d9ee8ebc68c670091b5e220d

Observation 4fc3cd5e-2f00-4856-a911-12e536c0ae9d · outbound

This paper cites Poisoning Web-Scale Training Datasets is Practical.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Poisoning Web-Scale Training Datasets is Practical

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:05.889610Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:05.889610Z digest=sha256:5ce553cda22b81d9c29cc1496e689dc9850dc907bb8a1e61a30e5d72425b5998

Observation 0e37b607-a716-46fc-91d4-2e2a3c05f109 · outbound

This paper cites Emerg- ing properties in self-supervised vision transformers.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Emerg- ing properties in self-supervised vision transformers

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.015566Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.015566Z digest=sha256:25da4805ee90b43296aa0dc1432df9f184da39f05ef996215e0f1ae902b0703e

Observation dc601c4f-c72f-44ff-91bb-c0d20fb4fc71 · outbound

This paper cites BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding.

Attacking Attention of Foundation Models Disrupts Downstream Tasks BERT: Pre-training of Deep Bidirectional Transformers for Language Understanding

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.133020Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.133020Z digest=sha256:3ab5027de9d71c1f28864e833530779c9fd2c63d91b7f8478c87e67a8e9961e9

Observation 2e9d71c7-e312-4234-a5d2-271fd261be2a · outbound

This paper cites Boosting adversarial at- tacks with momentum.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Boosting adversarial at- tacks with momentum

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.439580Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:06.250022Z digest=sha256:34402672afef80a23e33122de13a43eff5f2fd04c288ab983995d4e35611243a

Observation 793f91ff-fa44-43c0-a7d7-f9499318a575 · outbound

This paper cites An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale.

Attacking Attention of Foundation Models Disrupts Downstream Tasks An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.368933Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.368933Z digest=sha256:40e9660ea2770b07eb676c477a2d473cb6df76e780adef898ef1142f2da1b153

Observation 56bb9b5a-5e2c-4e93-b17b-69f6e8bfe76e · outbound

This paper cites Adversarial examples for the openai clip in its zero-shot classification regime and their semantic gener- alization, 2021.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Adversarial examples for the openai clip in its zero-shot classification regime and their semantic gener- alization, 2021

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.304895Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:06.470107Z digest=sha256:ed3867f0b8cab1b583a5812ea1da9f9b89c6b161f3537e17bdf6d8c198669af4

Observation f081d8eb-f314-4e95-a9ad-4cdba02ff7d0 · outbound

This paper cites Pixels still beat text: Attacking the openai clip model with text patches and adversarial pixel perturbations,.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Pixels still beat text: Attacking the openai clip model with text patches and adversarial pixel perturbations,

Reference 12

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.199529Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:06.574033Z digest=sha256:a99402bf1dc96644f2b74473b2029149f3b83dbe133c2bc3457da88133de92b0

Observation 5f77670b-aeb1-450d-814a-3b8be080d24f · outbound

This paper cites Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Patch-Fool: Are Vision Transformers Always Robust Against Adversarial Perturbations?

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.657206Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.657206Z digest=sha256:3e7fe390a42d1f34ba7f6b5e359c75cb21857893fff007e5bd086c77940ef0ca

Observation 00ef6cb9-51bf-409e-903a-0f7fd95a8826 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Explaining and Harnessing Adversarial Examples

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.757462Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.757462Z digest=sha256:178a62126e79bbf01198d0d752236446ea5243c87625cd9adb4f3d177f8049e0

Observation a933c4c3-6ee2-4534-bf22-366d31a37579 · outbound

This paper cites Are vision trans- formers robust to patch perturbations? InEuropean Con- ference on Computer Vision, pages 404–421.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Are vision trans- formers robust to patch perturbations? InEuropean Con- ference on Computer Vision, pages 404–421

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:17.064309Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:06.800977Z digest=sha256:f7f6c13795ed829be1f64d6845076a1e5aabd96752cc566c25a6d51c294608b6

Observation 23f999c7-dc3c-40cf-a482-00828550a3bc · outbound

This paper cites SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation.

Attacking Attention of Foundation Models Disrupts Downstream Tasks SA-Attack: Improving Adversarial Transferability of Vision-Language Pre-training Models via Self-Augmentation

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:06.917630Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:06.917630Z digest=sha256:634f436c8dd062135d28ee79608283873003083289f93d1fcca3d774214d4371

Observation 1dd8f011-0023-44fa-82e6-9b7d06bbcbfd · outbound

This paper cites Black-box adversarial attacks with limited queries and information.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Black-box adversarial attacks with limited queries and information

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:16.927343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:06.984387Z digest=sha256:fc65b3d499097eedc7fa95f89bc39285747ad138ddd4ded5bb229f6576f6bc79

Observation 6065268d-1d4a-47f2-bc12-2f7a41243596 · outbound

This paper cites Scal- ing up vision-language pretraining.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Scal- ing up vision-language pretraining

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.846145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.099614Z digest=sha256:c6fd320c2745b10edc24111dc68f8dfe6858adf62cf1dec5854f70f84dad46fe

Observation d1ce4c97-b8b6-4eee-b007-69eb45138b1e · outbound

This paper cites Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Exploring Adversarial Robustness of Vision Transformers in the Spectral Perspective

Reference 19

Resolution
verified exact
local_arxiv, observed 2026-08-07T11:09:11.913022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.214381Z digest=sha256:8647ecdc90896d172cb4e0d88c8dc3bfc4f9fce04843aaf68f7bf18def4bbfad

Observation b3972a62-6d42-458f-b5e3-c7f924e66c48 · outbound

This paper cites Curved representation space of vision transformers.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Curved representation space of vision transformers

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.694350Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.370476Z digest=sha256:849b03db09513b77d1591d1db69f582baa3601dbe63b3f65555dd95a3ce23af9

Observation 19adec9a-1c90-4a35-b8e9-1db62793f1f8 · outbound

This paper cites Segment any- thing.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Segment any- thing

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:07.484958Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:07.484958Z digest=sha256:87e96b7a855dce09bc37a09a69c32581c58572d9f225917609871f1665478ced

Observation 65b4dde8-9768-407c-bf85-28772a52246f · outbound

This paper cites Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Tasks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Benchmarking Robust Self-Supervised Learning Across Diverse Downstream Tasks

Reference 22

Resolution
verified exact
local_arxiv, observed 2026-08-07T11:09:11.626309Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.644839Z digest=sha256:f6fd63a0de012638f11626950c9818fddd78e21ae6e3d3ef3f02acae896fbdad

Observation 3b7f22b2-8c01-4754-a1e4-c2c1e0d49ad8 · outbound

This paper cites Ad- versarial examples in the physical world.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Ad- versarial examples in the physical world

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.579557Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.756757Z digest=sha256:f6fd8561011193cee2e288dd047ba43be5ac9cbd55c778f47988e6f3070353e5

Observation 0cd27d75-3b19-4e1d-aeb8-efd5757a6cba · outbound

This paper cites Align before fuse: Vision and language representation learn- ing with momentum distillation.Advances in neural infor- mation processing systems, 34:9694–9705, 2021.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Align before fuse: Vision and language representation learn- ing with momentum distillation.Advances in neural infor- mation processing systems, 34:9694–9705, 2021

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:07.862211Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:07.862211Z digest=sha256:9eec289dc8db204e31e011ab944e3975f8d3b583551b4f7f64a96a661048c18a

Observation 9def767f-cd28-4f41-859c-5c79e7bb5712 · outbound

This paper cites Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Blip-2: Bootstrapping language-image pre-training with frozen image encoders and large language models

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.369842Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:07.989291Z digest=sha256:3667fc551277b8f98ca5c5fb1ae800cca2969d936dfaa7225af1ccb6db8fcf58

Observation eb46ec7c-4558-43b0-8573-cd926db7b156 · outbound

This paper cites Lawrence Zitnick, and Piotr Doll ´ar.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Lawrence Zitnick, and Piotr Doll ´ar

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.253854Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:08.135547Z digest=sha256:f88ba57bb0f406f09b0cb0b44803fec0e27acd2720d4a421595514b11f8f4089

Observation 3eec59fc-367e-440a-9f6d-fc1d0caa59c7 · outbound

This paper cites Exploring the Relationship between Architecture and Adversarially Robust Generalization.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Exploring the Relationship between Architecture and Adversarially Robust Generalization

Reference 27

Resolution
verified exact
local_arxiv, observed 2026-08-07T11:09:11.366802Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:08.269622Z digest=sha256:c154c96cab24055d4263c2f1090039b85569123190e517efd6dfb9b4c32f5afa

Observation a5b6df67-9b01-44d6-99dc-aa2bf7619cd8 · outbound

This paper cites Decoupled Weight Decay Regularization.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Decoupled Weight Decay Regularization

Reference 28

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:08.339731Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:08.339731Z digest=sha256:9a2f6f83bb63c8d95284d847b4aaa9eac9d90575fec1d96527735deea151df39

Observation 570045b7-57d0-4948-8de4-394c01ea87f5 · outbound

This paper cites Set-level guidance at- tack: Boosting adversarial transferability of vision-language pre-training models.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Set-level guidance at- tack: Boosting adversarial transferability of vision-language pre-training models

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:14.084024Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:08.441542Z digest=sha256:2f5e668f2a0cbf29701bbded795706e2075e1dbcf3dd83433308324f7cbf89dc

Observation 8a34c410-6879-4e31-be9f-e0f7221af839 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:08.504906Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:08.504906Z digest=sha256:fb93ab69e82444e262ebf1feb1e36fb6a15fe2d16d162f1227fbe4dacb4afdca

Observation 15af41e3-c67d-4f51-bbc2-dec40723f232 · outbound

This paper cites On the robustness of vision transformers to adversarial ex- amples.

Attacking Attention of Foundation Models Disrupts Downstream Tasks On the robustness of vision transformers to adversarial ex- amples

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.940599Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:08.569013Z digest=sha256:fa9170f33900b2d7b9df131b8bbedb9323173c4246af7c602426a89826c542a5

Observation 99ebc7d0-63ff-4303-8ca3-64ce3971cc23 · outbound

This paper cites Deepfool: a simple and accurate method to fool deep neural networks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Deepfool: a simple and accurate method to fool deep neural networks

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.814685Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:08.629534Z digest=sha256:7690caa0c413c7509c32f04de31a1324e5efd561428d23ef2b688d528273f33a

Observation 219af90e-baa5-4099-8c92-86ddd3e2877b · outbound

This paper cites On Improving Adversarial Transferability of Vision Transformers.

Attacking Attention of Foundation Models Disrupts Downstream Tasks On Improving Adversarial Transferability of Vision Transformers

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:08.714579Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:08.714579Z digest=sha256:11804bd3b1826df45554034a3ba0dac9455b355d15e1e75038d13aa12495ccde

Observation cca0f566-c49a-43eb-9a85-eafc77709927 · outbound

This paper cites Reading Isn't Believing: Adversarial Attacks On Multi-Modal Neurons.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Reading Isn't Believing: Adversarial Attacks On Multi-Modal Neurons

Reference 34

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:08.838443Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:08.838443Z digest=sha256:59fd663e67c74c9b352f855b32b5412caebba970c30a4800e75fe612785b30a2

Observation 2b21263d-29d1-49a5-989e-b8ef3b6a3c7e · outbound

This paper cites DINOv2: Learning Robust Visual Features without Supervision.

Attacking Attention of Foundation Models Disrupts Downstream Tasks DINOv2: Learning Robust Visual Features without Supervision

Reference 35

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:08.953482Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:08.953482Z digest=sha256:2e351792913bb170c796e86cfa114dbda450ac5f55af2dcb7b56a3a04bb7e4a8

Observation 1dc4e3fc-2f26-4774-bf11-7723d3ed1b10 · outbound

This paper cites Learning transferable visual models from natural language supervi- sion.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Learning transferable visual models from natural language supervi- sion

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:09.044655Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:09.044655Z digest=sha256:891a81a96fa7c5dcd6465e287eef766d4498cb9cc8e09a09cf35a367d09a6ee2

Observation 7836ddf6-d117-48ed-8c01-03583104991e · outbound

This paper cites Berg, and Li Fei-Fei.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Berg, and Li Fei-Fei

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.652122Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:09.142432Z digest=sha256:7c2fc3e7d647c837f5bf1d4e9b210f2b3abf79f85a52fbb3717f31767d72c918

Observation a32c214e-383b-4d0b-966d-24e3e07131ed · outbound

This paper cites On the Adversarial Robustness of Vision Transformers.

Attacking Attention of Foundation Models Disrupts Downstream Tasks On the Adversarial Robustness of Vision Transformers

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:09.256860Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:09.256860Z digest=sha256:c4746e9c1a70bac70768e77944e2ff2e1220b0666f16a23aae2ebee9e25c4f80

Observation a41a1064-c7b9-4c32-8ae1-1d44d16c9951 · outbound

This paper cites Cnn features off-the-shelf: an astound- ing baseline for recognition.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Cnn features off-the-shelf: an astound- ing baseline for recognition

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.506985Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:09.322501Z digest=sha256:f1870769ab9777d88e7c52c983f2d3e43db213602315d925b31f80c421537887

Observation 1334a06e-528a-4dad-a39e-23c81955865b · outbound

This paper cites Indoor segmentation and support inference from rgbd images.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Indoor segmentation and support inference from rgbd images

Reference 40

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:09.434559Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:09.434559Z digest=sha256:232abf16d3535e558a82cd944c63fec49afe13298201ebcc7a7e1b4abc9ca4d6

Observation 1c1b17c9-ed47-4260-a236-d6b38c21b7b5 · outbound

This paper cites Adversarial risk and the dangers of eval- uating against weak attacks.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Adversarial risk and the dangers of eval- uating against weak attacks

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.358632Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:09.768074Z digest=sha256:d63fb3228ab2ca0fab5c576a4201ab92cb3cbc99f0ffb8bfe0e3013005f90448

Observation 2d089d22-30f3-447c-8fee-1fb4346a9d3e · outbound

This paper cites Benchmarking Zero-Shot Robustness of Multimodal Foundation Models: A Pilot Study.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Benchmarking Zero-Shot Robustness of Multimodal Foundation Models: A Pilot Study

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:09.880055Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:09.880055Z digest=sha256:48d87e18b2ea5618368a2fa782bac18eec71461923fade2b4154da4aa4cb61b9

Observation ef17e8f2-5678-412c-bee2-392281cda67e · outbound

This paper cites Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Exploring Transferability of Multimodal Adversarial Samples for Vision-Language Pre-training Models with Contrastive Learning

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:10.053287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:10.053287Z digest=sha256:d05aee6cb1bf26f323d5eb26b5b1b881b9f6efe1c50dc358e42d04d8d15a771c

Observation 898cbbed-85a9-4753-a446-6d3e1550fe1e · outbound

This paper cites Towards transferable adversarial attacks on vision transformers.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Towards transferable adversarial attacks on vision transformers

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:13.118082Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:10.169412Z digest=sha256:4321c7d8622286532a20aecc15925e6ec3d077d130a91ed5b58e49038507b358

Observation e32fa98f-c5cb-40ef-accf-bc3e9b043359 · outbound

This paper cites Vision-language pre-training with triple contrastive learning.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Vision-language pre-training with triple contrastive learning

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:10.272598Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:10.272598Z digest=sha256:f0e1766854ddbb8f6ef695764740788f18e18e21f465a64cb381bdbfbbfa8043

Observation 477ba9fa-9e72-480d-b95d-fef085abb6a7 · outbound

This paper cites an unresolved cited work.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Unresolved cited work

Reference 46

Resolution
unresolved
raw_fallback, observed 2026-08-07T11:09:12.936539Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:10.384701Z digest=sha256:20e9617ccd0043b6704ac8239672ed593ac2c08c24aff1807c63946f2a29a25b

Observation 5d6e5fc0-836a-4f7c-a1c4-e3a3eb9f92e0 · outbound

This paper cites Florence: A New Foundation Model for Computer Vision.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Florence: A New Foundation Model for Computer Vision

Reference 47

Resolution
unresolved
no resolver link, observed 2026-08-07T11:09:10.491227Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-07T11:09:10.491227Z digest=sha256:c243ae0a05c0c10e5da3587283c4d5a9f7af213b9f21f29ffa5bdf8e473275bd

Observation a43ef118-b3ca-41f4-bca2-47451371908a · outbound

This paper cites Towards adversarial attack on vision-language pre-training models.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Towards adversarial attack on vision-language pre-training models

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:12.772569Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:10.669164Z digest=sha256:3f5f411c9a45eed9655e253e03ac49497c11729637c433fda2712a4a21e3a6e1

Observation 849749a2-0af8-4f96-897b-6277acf5c793 · outbound

This paper cites Transferable adversarial attacks on vision transform- ers with token gradient regularization.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Transferable adversarial attacks on vision transform- ers with token gradient regularization

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:12.638607Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:10.768596Z digest=sha256:f2b4dd29ead1c49b9814344e5848ec70852c483d49316d1cfd1dc7f7a4eb2e64

Observation 52842260-ca10-41b0-b35b-da2dc2307af3 · outbound

This paper cites Univer- sal adversarial perturbations for vision-language pre-trained models.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Univer- sal adversarial perturbations for vision-language pre-trained models

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:12.387400Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:10.895374Z digest=sha256:4958b97cebfaf42b97b471ce5f1877e414d7ba290a14f0458c36ae7f363df4af

Observation 2a16dad9-7676-4d23-94b8-a4dffcf7dbec · outbound

This paper cites Semantic under- standing of scenes through the ade20k dataset.International Journal of Computer Vision, 127(3):302–321, 2019.

Attacking Attention of Foundation Models Disrupts Downstream Tasks Semantic under- standing of scenes through the ade20k dataset.International Journal of Computer Vision, 127(3):302–321, 2019

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T11:09:12.194890Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-23T06:30:58.430688+00:00.

source=pdf_text observed=2026-08-07T11:09:11.016820Z digest=sha256:49a46e7e9bd08ff4f3f0b2a820b6a62625cb8b1dcea173003fbaf6f4607a45ae

Pith citing papers

No inbound Pith citation observations are available.