Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-06T19:02:05.286844Z
Paper Citation Record · LEDGER
As of 8 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856.
A citation records a reference. It does not transfer a finding from one paper to another.
Typed states for the displayed outbound observations.
Source: paper_references, paper_reference_links, observed 2026-08-06T19:02:05.286844Z
One-hop event checks from named stored sources.
Source: scholarly_work_events, retraction_status_cache, observed 2026-08-08T06:32:00.761636+00:00
Pith citing papers itemized under the disclosed page cap.
Source: paper_references, paper_reference_links
A source-named dated measurement, never combined with another source.
Source: cited_works
56 of 56 outbound references displayed
External citation measurements
No source-named external measurement is stored.
Observation 299ab545-9dd4-4b53-b49e-3bb397853bcf · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices
Reference 1
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 6af8c1df-4221-4e5c-ad27-4926969925e4 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Adversarial Patch
Reference 2
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 85693d5e-b752-471a-b3bd-d679fa0cdd10 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks
Reference 3
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards evaluating the robustness of neural networks
Reference 4
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation ae8aaa8c-7bdf-4202-9fb7-b2911ac64997 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022
Reference 5
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 3f59faa7-3aca-4d59-b7d9-f3d011649801 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Sparse and imperceiv- able adversarial attacks
Reference 6
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 35aad53c-ce37-460b-bac1-c750abf35f3a · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models beat gans on image synthesis
Reference 7
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 770eb60e-4077-4148-91a9-e5def99783c4 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual quality metrics applied to still image compression
Reference 8
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation a13257ea-773b-4d09-adc0-c6bdffd67d6e · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Robust physical-world attacks on deep learning visual classification
Reference 9
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 25de0660-82d6-4d56-8153-9a1a06da10d4 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination
Reference 10
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 967abd3d-f578-4ec7-9a85-0cae36515b7c · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Wichmann, and Wieland Brendel
Reference 11
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation f9ef3337-8950-4b3c-9adc-62993a6b87cd · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Explaining and Harnessing Adversarial Examples
Reference 12
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unravelling robustness of deep learning based face recognition against adversarial attacks,
Reference 13
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation e2338ec8-a17c-484c-b006-4bf8259e17eb · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization On visible adversarial perturbations & digital watermarking
Reference 14
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 66a9de09-e542-4cbe-b864-bf9d86bc4038 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deep residual learning for image recognition
Reference 15
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation b3f5c767-0e04-458a-85ea-1c0dd0710cfb · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization CLIPScore: A Reference-free Evaluation Metric for Image Captioning
Reference 16
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 47bba56d-9829-4106-97ce-f13f8f00a064 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Denoising diffu- sion probabilistic models
Reference 17
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 708f49fc-74e0-41bd-b04f-037451ceade5 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Human imperceptible attacks and applications to improve fairness, 2021
Reference 18
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0bf0fdf1-7b13-4979-a66c-b91cbb24abdd · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Black-box adversarial attacks with limited queries and information, 2018
Reference 19
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 02e2868b-1d8a-42a9-a199-ae7cb21a6b48 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffender: Diffusion-based adversarial defense against patch attacks
Reference 20
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation d449fe56-ebb4-40d4-b508-4eb100ba3bd6 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Lavan: Localized and visible adversarial noise
Reference 21
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0a17c12f-97b0-47a2-82af-7d07f9f5245f · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Advhat: Real- world adversarial attack on arcface face id system
Reference 22
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 718b978a-7a64-4152-89a2-3ca6f209a2de · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network
Reference 23
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 25e07283-ddc1-4be7-9e40-fb24db658449 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generative Dynamic Patch Attack
Reference 24
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 9aa57581-6e9b-4607-a0a9-989727cfb249 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unresolved cited work
Reference 25
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 214276aa-e2fc-454f-8ef6-fd406cf37938 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual-sensitive gan for generating adversarial patches
Reference 26
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 9c91745b-6ea1-4887-bbcf-e13d5230ea43 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection
Reference 27
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0a6c1c1b-9d57-4c96-a075-6c20ba31a3df · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Swin transformer: Hierarchical vision transformer using shifted windows
Reference 28
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation e39d81c6-ed70-4879-b6b0-8791fdeba67b · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards imperceptible and robust adversarial example attacks against 9 neural networks
Reference 29
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 2aab3dc0-2051-4dbd-9ae3-f43914e6b323 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards Deep Learning Models Resistant to Adversarial Attacks
Reference 30
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 1e5c525d-739b-4adb-ae29-dfc23fa4a80d · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deepfool: a simple and accurate method to fool deep neural networks
Reference 31
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 93e9ea78-aeb4-4a1d-a198-6113cc7184c0 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Face Recognition as a Method of Authentication in a Web-Based System
Reference 32
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 6f6e5f53-11b8-4f5d-92d2-8c411da88933 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models for adver- sarial purification, 2022
Reference 33
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation be6733dc-537a-4b1c-8f92-3492e02daf89 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Parkhi, Andrea Vedaldi, and Andrew Zisserman
Reference 34
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 8ac3e957-5ef1-41ad-879c-6a94951ce284 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visually Imperceptible Adversarial Patch Attacks on Digital Images
Reference 35
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 92e96646-0315-4f22-babe-dd14a87bb251 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Berg, and Li Fei-Fei
Reference 36
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3fa15ba9-d27a-43b6-ac83-42b0da465843 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018
Reference 37
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0e0e8cb8-7742-4664-8fa0-782e3ca09cf5 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Grad- cam: Visual explanations from deep networks via gradient- based localization
Reference 38
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 334692ea-6ccc-4ef7-8183-a94911cce4e3 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition
Reference 39
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 7f80e671-113d-4a27-83e0-5b16121731b2 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A general framework for adversarial ex- amples with objectives
Reference 40
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 4ad5f2dd-f9a6-4ef8-86f8-91378594a931 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Very Deep Convolutional Networks for Large-Scale Image Recognition
Reference 41
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 7f3193fe-fe52-4f80-a6c2-06657c10d0b8 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Intriguing properties of neural networks
Reference 42
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 042dd1a1-b454-4fd4-b128-4401f8c54d4d · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jedi: entropy-based localization and removal of adversarial patches
Reference 43
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 5971908d-e759-4d83-af38-6c56fe5047dc · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Guided Diffusion Model for Adversarial Purification
Reference 44
Source-reported events for the cited work
Unavailable: canonical work link unavailable.
Observation 3c9d7d99-7724-4a7e-b43c-3670910704ad · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generating Visually Realistic Adversarial Patch
Reference 45
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 33270bd5-cf97-443f-b362-7aff7daf8024 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A universal image quality index
Reference 46
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 78b34c76-dbb8-4b4c-a085-1f1d59b48ca0 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Image quality assessment: from error visibility to structural similarity
Reference 47
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation a7d579ed-de42-4dbd-89c5-284b20c65545 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Privacy-preserving adversarial facial features
Reference 48
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation c4161b82-f911-4591-858c-68264d2d69eb · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchguard++: Efficient provable attack detection against adversarial patches, 2021
Reference 49
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 0d965048-9686-4749-ae0e-093211d71678 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Densepure: Understanding diffusion models for adversarial robustness
Reference 50
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation b73a1066-a902-4348-b8a8-5a6b3a214a5b · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch
Reference 51
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation b8fdc49d-a8f3-4563-bcd8-328ce302da6a · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visualizing and un- derstanding convolutional networks
Reference 52
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 6030ad09-3b94-40b0-9ae4-94ed7e8499b5 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The unreasonable effectiveness of deep features as a perceptual metric
Reference 53
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation 490bde89-7e2c-4dac-8695-16ca84298333 · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The translucent patch: A physical and universal attack on object detectors
Reference 54
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Toaster” class to include “Baseball
Reference 55
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
Observation cab95ced-b4d6-471c-9424-016c09b08aae · outbound
IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A. J. Buckley
Reference 56
Source-reported events for the cited work
No event found in the named queried sources as of 2026-08-08T06:32:00.761636+00:00.
No inbound Pith citation observations are available.