Pith. sign in

Paper Citation Record · LEDGER

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization

As of 8 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.06856 v1

Coverage vector

measured 56 of 56 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T19:02:05.286844Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

56 of 56 outbound references displayed

  • verified exact5
  • verified fuzzy40
  • unresolved10
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 299ab545-9dd4-4b53-b49e-3bb397853bcf · outbound

This paper cites Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.918332Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.092400Z digest=sha256:8cd678d704b90431ee41c568654874ab6642d45a6ac3b8557507f19777296faf

Observation 6af8c1df-4221-4e5c-ad27-4926969925e4 · outbound

This paper cites Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Adversarial Patch

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.096629Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.096629Z digest=sha256:ff6f1a62b69b198cfe2223d90f398ca9db9667ecb26b3f5018eca018a21c4e03

Observation 85693d5e-b752-471a-b3bd-d679fa0cdd10 · outbound

This paper cites Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.908197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.100673Z digest=sha256:469c11aa458880f944eeeeed9a1469f53d2e06fb7cfa0880227b85f1b75123ef

Observation b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065 · outbound

This paper cites Towards evaluating the robustness of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards evaluating the robustness of neural networks

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.897193Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.104242Z digest=sha256:6166e3e1d07c791131b3f26c98ebc180fffaeb0b95195ac1331973d42431fbe9

Observation ae8aaa8c-7bdf-4202-9fb7-b2911ac64997 · outbound

This paper cites Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.885334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.108100Z digest=sha256:6b6faafc0f91fbc61c1074012ae4beb8af4e5bde0b7ea605d3781217f6390ce3

Observation 3f59faa7-3aca-4d59-b7d9-f3d011649801 · outbound

This paper cites Sparse and imperceiv- able adversarial attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Sparse and imperceiv- able adversarial attacks

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.875151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.111768Z digest=sha256:f7347ea764bcf3ac489d95556dab06941b5f7f558ed39af6d53c96ba678cd71e

Observation 35aad53c-ce37-460b-bac1-c750abf35f3a · outbound

This paper cites Diffusion models beat gans on image synthesis.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models beat gans on image synthesis

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.865794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.115181Z digest=sha256:c9682013f2c59d34250f76905052092f6ef7e52b3fea8a14d7a4515f985b64b7

Observation 770eb60e-4077-4148-91a9-e5def99783c4 · outbound

This paper cites Perceptual quality metrics applied to still image compression.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual quality metrics applied to still image compression

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.855357Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.118802Z digest=sha256:8af0e271a8576a6e5670d3b1b3518f736042d716d72bf3221ab28ecb31262d5a

Observation a13257ea-773b-4d09-adc0-c6bdffd67d6e · outbound

This paper cites Robust physical-world attacks on deep learning visual classification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Robust physical-world attacks on deep learning visual classification

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.844160Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.122059Z digest=sha256:cfe8e554c8fd4c8a5748f4f3366602f7e6ab35cfc9885682f203047d46b1e01b

Observation 25de0660-82d6-4d56-8153-9a1a06da10d4 · outbound

This paper cites DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.444597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.125550Z digest=sha256:0588d253dc02edb43025fe80741e224ddb23f33b168a1a0dc8f1f8df7560c6ad

Observation 967abd3d-f578-4ec7-9a85-0cae36515b7c · outbound

This paper cites Wichmann, and Wieland Brendel.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Wichmann, and Wieland Brendel

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.129316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.129316Z digest=sha256:cbdb8584e879898770b7ca142a8d888ba8fefe62c0d25cd64d29957f9fe0eaf1

Observation f9ef3337-8950-4b3c-9adc-62993a6b87cd · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Explaining and Harnessing Adversarial Examples

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.132750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.132750Z digest=sha256:ac09783b9d6d343cfb21ddd8960b62f0330de357a6b309c7bda1d4ed235e1412

Observation 4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f · outbound

This paper cites Unravelling robustness of deep learning based face recognition against adversarial attacks,.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unravelling robustness of deep learning based face recognition against adversarial attacks,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.825439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.136260Z digest=sha256:8d13a3d6014ab54e5d323fde79e22ed926e62aec8a72e84e97454ee959d0628c

Observation e2338ec8-a17c-484c-b006-4bf8259e17eb · outbound

This paper cites On visible adversarial perturbations & digital watermarking.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization On visible adversarial perturbations & digital watermarking

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.814904Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.139567Z digest=sha256:b7fc2ea2f3e17b91aa3db9cb237e952511c79a014980a74224eb74fb3fef0b88

Observation 66a9de09-e542-4cbe-b864-bf9d86bc4038 · outbound

This paper cites Deep residual learning for image recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deep residual learning for image recognition

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.804253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.143551Z digest=sha256:1aa9235bece6b1cb09df86dc87bdb73fb0719a612db5a771d683164bbd7dcabe

Observation b3f5c767-0e04-458a-85ea-1c0dd0710cfb · outbound

This paper cites CLIPScore: A Reference-free Evaluation Metric for Image Captioning.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization CLIPScore: A Reference-free Evaluation Metric for Image Captioning

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.146699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.146699Z digest=sha256:45371e23a9f46ea7942abab0fdb36c4bbc6915ac7f7245d98a2ef2643dca819a

Observation 47bba56d-9829-4106-97ce-f13f8f00a064 · outbound

This paper cites Denoising diffu- sion probabilistic models.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Denoising diffu- sion probabilistic models

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.793798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.150190Z digest=sha256:43717c07847bad95dc930fca31d2d8896f1dc300511588ae59e04f7db9bb6664

Observation 708f49fc-74e0-41bd-b04f-037451ceade5 · outbound

This paper cites Human imperceptible attacks and applications to improve fairness, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Human imperceptible attacks and applications to improve fairness, 2021

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.783508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.153870Z digest=sha256:9091b4806b50f1003759f2ad8bbe2cc7bc9c41822deab4ec87291dce81a0594c

Observation 0bf0fdf1-7b13-4979-a66c-b91cbb24abdd · outbound

This paper cites Black-box adversarial attacks with limited queries and information, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Black-box adversarial attacks with limited queries and information, 2018

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.773345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.157229Z digest=sha256:a3ef9fdad4ef1e6ae18ff9d5ba86b9a2523a9f170ee8ca46cfdd2eb09b8af252

Observation 02e2868b-1d8a-42a9-a199-ae7cb21a6b48 · outbound

This paper cites Diffender: Diffusion-based adversarial defense against patch attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffender: Diffusion-based adversarial defense against patch attacks

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.762770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.160742Z digest=sha256:867366e6510bc39486d61b1ad357ea9c64082a8dbc9fb6b2872fa015fedbc04b

Observation d449fe56-ebb4-40d4-b508-4eb100ba3bd6 · outbound

This paper cites Lavan: Localized and visible adversarial noise.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Lavan: Localized and visible adversarial noise

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.751908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.164084Z digest=sha256:21cf4b449a92de5381c9e55293a90ca0194a761fa3df312404d6775902b0f337

Observation 0a17c12f-97b0-47a2-82af-7d07f9f5245f · outbound

This paper cites Advhat: Real- world adversarial attack on arcface face id system.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Advhat: Real- world adversarial attack on arcface face id system

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.740415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.167688Z digest=sha256:9eeee067b687f7316413ee35b1779ea8ca597c3b3bbda818de81473dcb3e5c0d

Observation 718b978a-7a64-4152-89a2-3ca6f209a2de · outbound

This paper cites Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.730070Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.170975Z digest=sha256:8ae1a218af6c55a8f17f5740f32fbe6a2da5eec891cca00f3935f6d9f660cfdc

Observation 25e07283-ddc1-4be7-9e40-fb24db658449 · outbound

This paper cites Generative Dynamic Patch Attack.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generative Dynamic Patch Attack

Reference 24

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.410546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.174128Z digest=sha256:522cd32c17a5c8fc92e6c8ac70e9aaf26dabca52b3287e5e7cf2243578c17e67

Observation 9aa57581-6e9b-4607-a0a9-989727cfb249 · outbound

This paper cites an unresolved cited work.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-06T19:02:05.718918Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.177905Z digest=sha256:3e6f4315dedb5a8c24008e351d4391f714d498078341df04cdeb6778a0ef602f

Observation 214276aa-e2fc-454f-8ef6-fd406cf37938 · outbound

This paper cites Perceptual-sensitive gan for generating adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual-sensitive gan for generating adversarial patches

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.707736Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.181478Z digest=sha256:311bfe2457cf4ca02b1dfe6fd9a56a5acfabcaf75e3d1c39d20548ad32f8dca1

Observation 9c91745b-6ea1-4887-bbcf-e13d5230ea43 · outbound

This paper cites Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.695591Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.185239Z digest=sha256:68a41dd6b26233275d2bc07f34deeb611400dd72c29d14470858bd2edc19bb03

Observation 0a6c1c1b-9d57-4c96-a075-6c20ba31a3df · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Swin transformer: Hierarchical vision transformer using shifted windows

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.683587Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.189085Z digest=sha256:3a1a2fa3e47383bda520693b79c45fe0a368b3d3e31fe655632082a1ec0b538d

Observation e39d81c6-ed70-4879-b6b0-8791fdeba67b · outbound

This paper cites Towards imperceptible and robust adversarial example attacks against 9 neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards imperceptible and robust adversarial example attacks against 9 neural networks

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.672104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.192313Z digest=sha256:082ecaf18b98076902f8ed5b464fe8a9376384a5331c5a876e84041418b47dd7

Observation 2aab3dc0-2051-4dbd-9ae3-f43914e6b323 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.195978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.195978Z digest=sha256:655ef241d4477af835b7c98eb69968d574aced135d6ceadbdfd3ba823291e2ff

Observation 1e5c525d-739b-4adb-ae29-dfc23fa4a80d · outbound

This paper cites Deepfool: a simple and accurate method to fool deep neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deepfool: a simple and accurate method to fool deep neural networks

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.660317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.199893Z digest=sha256:5ecef4fd1ac580c862a5f812afcdb6c241ae09343923a341e83511c5f62f6880

Observation 93e9ea78-aeb4-4a1d-a198-6113cc7184c0 · outbound

This paper cites Face Recognition as a Method of Authentication in a Web-Based System.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Face Recognition as a Method of Authentication in a Web-Based System

Reference 32

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.385165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.203908Z digest=sha256:80e7e9a1b3a082d808c46a2c2b2e16504167f51d9eecfda682127b6b4fbe6d81

Observation 6f6e5f53-11b8-4f5d-92d2-8c411da88933 · outbound

This paper cites Diffusion models for adver- sarial purification, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models for adver- sarial purification, 2022

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.649317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.207586Z digest=sha256:68f32d629e2d84015132ce4ce66c86e8b8c9d356437fe51e9698b8a470be45fe

Observation be6733dc-537a-4b1c-8f92-3492e02daf89 · outbound

This paper cites Parkhi, Andrea Vedaldi, and Andrew Zisserman.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Parkhi, Andrea Vedaldi, and Andrew Zisserman

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.638192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.210908Z digest=sha256:aeab35e73d63ba8063e0f9ccf4e1b63962da0e6e84c63a4ee2d847309f5a1b5d

Observation 8ac3e957-5ef1-41ad-879c-6a94951ce284 · outbound

This paper cites Visually Imperceptible Adversarial Patch Attacks on Digital Images.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visually Imperceptible Adversarial Patch Attacks on Digital Images

Reference 35

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.369809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.214447Z digest=sha256:65cd5c8527026238617e0dc1b280972bd54f65e9eaf681e7ff77ffc2b3d267d8

Observation 92e96646-0315-4f22-babe-dd14a87bb251 · outbound

This paper cites Berg, and Li Fei-Fei.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Berg, and Li Fei-Fei

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.218232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.218232Z digest=sha256:7dc46a976f7837dc73fe591bb6e1da2eecfae3c5473d13394ad93fa010987b49

Observation 3fa15ba9-d27a-43b6-ac83-42b0da465843 · outbound

This paper cites Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.621102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.221815Z digest=sha256:5f2f10a6fa8138c4b2b1084885ca64943ff467abd5dbd9cbf34697aca37fc043

Observation 0e0e8cb8-7742-4664-8fa0-782e3ca09cf5 · outbound

This paper cites Grad- cam: Visual explanations from deep networks via gradient- based localization.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Grad- cam: Visual explanations from deep networks via gradient- based localization

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.609035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.225548Z digest=sha256:67fe6ff793892d651fa3ae9efb51311b95e09da361d150d085e5aafb57f72c40

Observation 334692ea-6ccc-4ef7-8183-a94911cce4e3 · outbound

This paper cites Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.598567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.228749Z digest=sha256:f7ef0f8abd2b3438d9018698eb6559a3eb177e95bde6e1c2d8acee8bb741ecb8

Observation 7f80e671-113d-4a27-83e0-5b16121731b2 · outbound

This paper cites A general framework for adversarial ex- amples with objectives.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A general framework for adversarial ex- amples with objectives

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.588781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.232541Z digest=sha256:b0b341df0ff4b309b061bb6261959b060a8954ff717968602903fc4c358ade5e

Observation 4ad5f2dd-f9a6-4ef8-86f8-91378594a931 · outbound

This paper cites Very Deep Convolutional Networks for Large-Scale Image Recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Very Deep Convolutional Networks for Large-Scale Image Recognition

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.236010Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.236010Z digest=sha256:61119f3773f9d50b6cdf033cbdf688c2abab7769d8052dde17e34da052d91faa

Observation 7f3193fe-fe52-4f80-a6c2-06657c10d0b8 · outbound

This paper cites Intriguing properties of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Intriguing properties of neural networks

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.239599Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.239599Z digest=sha256:6675547f85da6a230bf4b5d8608d21d27b4ced8e370717533ea8296cd0dd6222

Observation 042dd1a1-b454-4fd4-b128-4401f8c54d4d · outbound

This paper cites Jedi: entropy-based localization and removal of adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jedi: entropy-based localization and removal of adversarial patches

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.577870Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.242958Z digest=sha256:ed22be97e98d5341e870625cdc2870a9308795d2732dfefd039a035441e05c9d

Observation 5971908d-e759-4d83-af38-6c56fe5047dc · outbound

This paper cites Guided Diffusion Model for Adversarial Purification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Guided Diffusion Model for Adversarial Purification

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.246199Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.246199Z digest=sha256:7a2acb6cf13bcb988dfbb0d20d1816fb77d45639b71135f44507ea916955a14b

Observation 3c9d7d99-7724-4a7e-b43c-3670910704ad · outbound

This paper cites Generating Visually Realistic Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generating Visually Realistic Adversarial Patch

Reference 45

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.323915Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.249694Z digest=sha256:796c2a202e6800aeea22abef1a43538ff1b733dff83867373f5f3c657771633d

Observation 33270bd5-cf97-443f-b362-7aff7daf8024 · outbound

This paper cites A universal image quality index.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A universal image quality index

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.568001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.253404Z digest=sha256:0b1a202d5fda1ee67e9b26a199a405a1c6a92bf4676cb9bbe8be4821ef81a3db

Observation 78b34c76-dbb8-4b4c-a085-1f1d59b48ca0 · outbound

This paper cites Image quality assessment: from error visibility to structural similarity.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Image quality assessment: from error visibility to structural similarity

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.558099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.256345Z digest=sha256:8058d672a87ebf4a65bf3cd0e24716cc3d951c4ed9af43b9f22d1655ef45a5e9

Observation a7d579ed-de42-4dbd-89c5-284b20c65545 · outbound

This paper cites Privacy-preserving adversarial facial features.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Privacy-preserving adversarial facial features

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.547636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.259670Z digest=sha256:dbfed497dcb88faf6cb571c0448eb0e716d5e056edfa6df5b0b608c4d0ae86c0

Observation c4161b82-f911-4591-858c-68264d2d69eb · outbound

This paper cites Patchguard++: Efficient provable attack detection against adversarial patches, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchguard++: Efficient provable attack detection against adversarial patches, 2021

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.537589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.263014Z digest=sha256:eb5146137d8c5cde1bc2b98176afb11b8fd98986614caeee7c1689274e14cc84

Observation 0d965048-9686-4749-ae0e-093211d71678 · outbound

This paper cites Densepure: Understanding diffusion models for adversarial robustness.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Densepure: Understanding diffusion models for adversarial robustness

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.527593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.266074Z digest=sha256:3c53e116ec84c0100d4a78fae901e700f39cf663b16d4c1dd0147251aa4acf5a

Observation b73a1066-a902-4348-b8a8-5a6b3a214a5b · outbound

This paper cites Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.517128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.269082Z digest=sha256:5284fd5c67275abbbdb6016fb6ea134c088b7de98d4c36852500a0c089d6a4fc

Observation b8fdc49d-a8f3-4563-bcd8-328ce302da6a · outbound

This paper cites Visualizing and un- derstanding convolutional networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visualizing and un- derstanding convolutional networks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.506635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.272766Z digest=sha256:0209833cc24d8ff323a2e9935c355ed0552e0e9426a7cce644e901bcf61cfe2d

Observation 6030ad09-3b94-40b0-9ae4-94ed7e8499b5 · outbound

This paper cites The unreasonable effectiveness of deep features as a perceptual metric.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The unreasonable effectiveness of deep features as a perceptual metric

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.496718Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.276338Z digest=sha256:34693be18960817dc0098d3e233505adc64175ea0a94b78b5e5f3f8a9eb71360

Observation 490bde89-7e2c-4dac-8695-16ca84298333 · outbound

This paper cites The translucent patch: A physical and universal attack on object detectors.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The translucent patch: A physical and universal attack on object detectors

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.486339Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.279629Z digest=sha256:1dc296214fa81fbadd5e0780e29d57ef5f0820dae60c5f457640c403df374d34

Observation a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c · outbound

This paper cites Toaster” class to include “Baseball.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Toaster” class to include “Baseball

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.476133Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.282996Z digest=sha256:c3211dcb44422a2d24adefc59c42a08495a75fda5094312e93ce664e0cf8dbb5

Observation cab95ced-b4d6-471c-9424-016c09b08aae · outbound

This paper cites A. J. Buckley.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A. J. Buckley

Reference 56

Resolution
malformed identifier
raw_fallback, observed 2026-08-06T19:02:05.466187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.

source=pdf_text observed=2026-08-06T19:02:05.286844Z digest=sha256:d5489b2df919d0f435f7c078315f87d3974dbf2fc98c5237a03338905a77f499

Pith citing papers

No inbound Pith citation observations are available.