Pith. sign in

Paper Citation Record · LEDGER

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks

As of 13 August 2026, this Paper Citation Record lists 52 of 52 outbound references and 0 inbound Pith citation observations for arXiv:2411.15210.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2411.15210 v4

Coverage vector

measured 52 of 52 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-12T16:50:39.342783Z

measured 52 of 52 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-12T06:34:41.77262+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

52 of 52 outbound references displayed

  • verified exact3
  • verified fuzzy35
  • unresolved13
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 6f59b5e1-a1bc-4132-973b-d6cfeadaee28 · outbound

This paper cites Intriguing properties of neural networks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Intriguing properties of neural networks

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.048937Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.048937Z digest=sha256:a7114c40dfd9b45623575b5e629e56566ea74eeb3b3b774d5b03fa63e76dc073

Observation 66973b75-0100-44dc-a0b6-b920a3d769a6 · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Explaining and Harnessing Adversarial Examples

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.055705Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.055705Z digest=sha256:3df9bb7b930fba3106b5da9a083f65302acddc7541069eec84b2b67ee3249c88

Observation 20948b61-e006-4fe8-bc50-6593989623fb · outbound

This paper cites Towards evaluating the robustness of neural networks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Towards evaluating the robustness of neural networks,

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.275222Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.061850Z digest=sha256:d3c26465ad8f973f9ae200fbe3ddaf5a7fe096f9f217b1fac7b4fe5fd42309a3

Observation 001a0f63-188c-4843-b65d-289ce23f6e02 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.067614Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.067614Z digest=sha256:02972127b2352752526abc6b8eb691edc6e977a61635560da9c609f568711af1

Observation 1bea075f-416e-42b1-9be4-5d689d5fc334 · outbound

This paper cites Reliable evaluation of adversarial ro- bustness with an ensemble of diverse parameter-free attacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Reliable evaluation of adversarial ro- bustness with an ensemble of diverse parameter-free attacks,

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.259633Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.073631Z digest=sha256:69b443212821333d309d3247744c694fc83a3b3febe2193d0a1e60008868ec5e

Observation 92a9f79d-f2ca-4e0f-be20-fd4ead5becfe · outbound

This paper cites Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.242968Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.079617Z digest=sha256:dfb8659094399d877326715ffd5f16a33fe8f9949e25a496f4484dcdfa7484e3

Observation 03eb0b7c-3035-462e-819a-98f938dcf976 · outbound

This paper cites Imbalanced gradients: a subtle cause of overestimated adversarial robustness,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Imbalanced gradients: a subtle cause of overestimated adversarial robustness,

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.226922Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.087914Z digest=sha256:1807cd52007c42abd6d98857a18e758d7394f8d1ddd0d72fb9d063151860fe48

Observation d3e7226e-743c-44f7-a891-39d1abbeec1c · outbound

This paper cites Practical evaluation of adversarial robustness via adaptive auto attack,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Practical evaluation of adversarial robustness via adaptive auto attack,

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.210022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.094287Z digest=sha256:7dca6b169f459cb846d2e3d69cd4b7711ec0a4692a008e67742c3c48d47c3942

Observation d95ddf3b-5c5e-4bce-b4f8-0589fba60d40 · outbound

This paper cites Diversity can be trans- ferred: Output diversification for white-and black-box at- tacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Diversity can be trans- ferred: Output diversification for white-and black-box at- tacks,

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.193505Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.102842Z digest=sha256:a44bad21f25e1da455ef2d5b4ce2d4379017f4f4c7f1ba844ee1c90cb0f662ba

Observation 5258fbb7-4090-46b9-983f-53d9780156d2 · outbound

This paper cites An Alternative Surrogate Loss for PGD-based Adversarial Testing.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks An Alternative Surrogate Loss for PGD-based Adversarial Testing

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.589035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.110782Z digest=sha256:ed6f4706518c3b0db810314c4c28ba14d3416d6d9900b7bc7d1b8f15e4d97c59

Observation 6b8b955b-981e-4dba-9aa6-45094dd5f7a1 · outbound

This paper cites Lafeat: Piercing through adversarial defenses with latent features,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Lafeat: Piercing through adversarial defenses with latent features,

Reference 11

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.177537Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.117230Z digest=sha256:e3f014d0211f0670e8de374c40877eeaa773f405b031bb993ac0158045d527a3

Observation c0ca2ec6-59b3-4379-a4ae-b35935e080a7 · outbound

This paper cites Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Alternating Objectives Generates Stronger PGD-Based Adversarial Attacks

Reference 12

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.565376Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.125954Z digest=sha256:376eb80c04dd70f1f567c2cc2d6687c933a89379c79c75e3375152a5532a26b3

Observation ccd0f513-a141-4ad1-b9c6-d5acf4a06dfd · outbound

This paper cites Efficient loss function by minimizing the detrimental effect of floating-point errors on gradient-based attacks,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Efficient loss function by minimizing the detrimental effect of floating-point errors on gradient-based attacks,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.160205Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.131627Z digest=sha256:e6a311012ea01a188f8f34a8722262d1352bc86462cbab6e73caad1b3ebe0f4f

Observation 6a6768f9-1244-4e67-830a-3f2c7ab6d88f · outbound

This paper cites Conceptual captions: A cleaned, hypernymed, image alt-text dataset for automatic image captioning,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Conceptual captions: A cleaned, hypernymed, image alt-text dataset for automatic image captioning,

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.144209Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.136443Z digest=sha256:fbe155ae89655352b75bd0d31104567028e5a8c49bb4f46de7982f8e933dac70

Observation ce4da521-63d4-4368-aa4d-26669fcc76df · outbound

This paper cites Adversarial examples in the physical world.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Adversarial examples in the physical world

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.141350Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.141350Z digest=sha256:28a66978848b8c7651bce6530fbd455120c16c297c0480eb3acd7a45a79d7708

Observation 72e81e8a-f7e3-42ae-b84f-226a3c2401a0 · outbound

This paper cites Theoretically principled trade-off between robustness and accuracy,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Theoretically principled trade-off between robustness and accuracy,

Reference 16

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.128137Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.146575Z digest=sha256:0c73ccb2bea672d420aa92f7a4a2c22a6e0469b9d8cd6a4904e516bb775b22c9

Observation a5575de3-de62-4c61-8767-ad45ce16317c · outbound

This paper cites Minimally distorted adversarial ex- amples with a fast adaptive boundary attack,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Minimally distorted adversarial ex- amples with a fast adaptive boundary attack,

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.111481Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.151364Z digest=sha256:86039367ea661b1f462974d53ab989247fceb5280e858479474cd072aebeb77b

Observation 00d3a4b5-5359-4194-921f-00d26b8cd1ab · outbound

This paper cites Square attack: a query-efficient black-box adversarial attack via random search,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Square attack: a query-efficient black-box adversarial attack via random search,

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.094279Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.156262Z digest=sha256:0de1852eb1a96d49fad7023cfed4d5c8631460a86c2fde49cb07dd207a0b256d

Observation 093b77bc-24d5-40dd-913f-84c13c29468e · outbound

This paper cites Diversified adversarial attacks based on conjugate gradient method,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Diversified adversarial attacks based on conjugate gradient method,

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.075597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.161188Z digest=sha256:28bbc199c52ba943a6f87367da857d23ad92c01956955bb19d7f308a7bdc031c

Observation e1b7e8b6-1a68-401e-b780-4de9ca1410de · outbound

This paper cites Robust- bench: a standardized adversarial robustness benchmark,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robust- bench: a standardized adversarial robustness benchmark,

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.057767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.166313Z digest=sha256:3ef4a3afad1c451e0dadbc09b665899b614c716156dfec0f7eb2ffdc4b76c0bf

Observation 55867ec0-6cd2-4f28-b522-2c3e588058aa · outbound

This paper cites Deep residual learning for image recognition,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Deep residual learning for image recognition,

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.041029Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.171513Z digest=sha256:2967c58b2c8e857a3bcd78de38c2d76b99eb800858e4bda7c689bbda91bf2b5f

Observation 1f01e393-66f4-425b-aa8b-cec6fe78598f · outbound

This paper cites Wide Residual Networks.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Wide Residual Networks

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.176560Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.176560Z digest=sha256:03ab0a6371322545ba4482a148b064a22910ccaf1eb3c600da63c9d18eebdb96

Observation 48363661-9077-4791-ad13-9829f0137679 · outbound

This paper cites An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks An Image is Worth 16x16 Words: Transformers for Image Recognition at Scale

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.182085Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.182085Z digest=sha256:ec7e07dcb537a522ff74b379310f6a6b8fe1be4d8c01111eb40725e3b9d76398

Observation f8f7634d-1036-4d8e-b40d-5e0b15a2e659 · outbound

This paper cites Xcit: Cross-covariance image transformers,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Xcit: Cross-covariance image transformers,

Reference 24

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.024423Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.187041Z digest=sha256:b82972cf7e6addd28f7bc98c0d587754d72bad150e965865b0e29c1e8adbb7c4

Observation 4706e1b8-e5d4-422f-bab7-ef7cc18c2101 · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Swin transformer: Hierarchical vision transformer using shifted windows,

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:40.006124Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.192580Z digest=sha256:ebb6a7430595e0f40991c70e7134913a1ddb12c5ecda80f7cd079dad55ff7407

Observation c3280815-eead-4902-8efa-5ed8fbfb297e · outbound

This paper cites A convnet for the 2020s,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A convnet for the 2020s,

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.986038Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.197701Z digest=sha256:478acdb69e3efb2e9d15c65c587a6060444356c28d5b9e14eafa5b060f369360

Observation 05a1413a-e6be-463d-b988-0814abb915bc · outbound

This paper cites Robust Principles: Architectural Design Principles for Adversarially Robust CNNs.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robust Principles: Architectural Design Principles for Adversarially Robust CNNs

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.202552Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.202552Z digest=sha256:09b08165d60f0b548e4ec8df389006f43bd757abef99c83a4786ab308dff6ae4

Observation d3d1bbc1-4ec8-428c-ad79-f86df6f10161 · outbound

This paper cites Better diffusion models further improve adversarial training,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Better diffusion models further improve adversarial training,

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.967684Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.207841Z digest=sha256:302ab79704ea48a7a0959932d3565803fbd835669f10b3ed10c546bcba111152

Observation a58e0303-2c86-4edd-b023-56c2a6e7f120 · outbound

This paper cites Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Improving the Accuracy-Robustness Trade-Off of Classifiers via Adaptive Smoothing

Reference 29

Resolution
verified exact
local_arxiv, observed 2026-08-12T16:50:39.473682Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.212916Z digest=sha256:5ed2beb9fa0315c3ed262bf159439a24c90ce41df64f3b8191e526643500197a

Observation 6f2e0ccd-ba98-4c44-a04f-f7bf381d5b29 · outbound

This paper cites Decoupled Kullback-Leibler Divergence Loss.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Decoupled Kullback-Leibler Divergence Loss

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.218130Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.218130Z digest=sha256:fcff633c02b51f296ec89bd3f6b0263a3191806dfc940d0a91e703ad55e65152

Observation 0cd4bb0f-ec2d-45c9-ba09-8448d12ed434 · outbound

This paper cites Fixing Data Augmentation to Improve Adversarial Robustness.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Fixing Data Augmentation to Improve Adversarial Robustness

Reference 31

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.223345Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.223345Z digest=sha256:aea3fe131d0cfc9f561a625766593b3a779bf74db36ad53e6509cc256da7c1da

Observation 3b63f931-945c-4271-aaa2-532af2a3c20c · outbound

This paper cites Improving robustness using generated data,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Improving robustness using generated data,

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.950760Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.228699Z digest=sha256:343a1f8ad80e38a569e1689f453cd7c1e76dd4eb823476bff81f6417050d0cba

Observation 061d4fbb-7772-45a5-8088-03185beb5e40 · outbound

This paper cites Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Uncovering the Limits of Adversarial Training against Norm-Bounded Adversarial Examples

Reference 33

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.233846Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.233846Z digest=sha256:1e77bdb3044dfe762bfd0977ca969a5353a94faf0b63e94296c17914cf6ab81d

Observation cecf9fe4-d556-46c3-8f74-b2c7e5583326 · outbound

This paper cites Revisiting residual networks for adversarial robustness,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Revisiting residual networks for adversarial robustness,

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.932352Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.240176Z digest=sha256:2a40c8ef93778055b9724cbb9711bc26e0277eddc94c2f4fa15f101eb33e2885

Observation 4fc4d796-b473-4c26-83f0-aa9354e95035 · outbound

This paper cites A light recipe to train robust vision transformers,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A light recipe to train robust vision transformers,

Reference 35

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.913640Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.246191Z digest=sha256:0f744aa443e2510c0a6df6ddd2ad8063c6e85285b9d5c22f2bf88f18c9aa538b

Observation 636a85df-0fbb-47c9-9d5c-9d19c3f2cb96 · outbound

This paper cites Robustness and accuracy could be reconcilable by (proper) definition,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Robustness and accuracy could be reconcilable by (proper) definition,

Reference 36

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.896837Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.253927Z digest=sha256:d5cfdef797392644c7161511d8228e2e30ede97362aeead1335799fb392244ce

Observation adb0ea16-2fd4-420c-a660-971d233620fb · outbound

This paper cites A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks A Comprehensive Study on Robustness of Image Classification Models: Benchmarking and Rethinking

Reference 37

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.259074Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.259074Z digest=sha256:bbfb5f5845d885376c9fb4873cd0e6a6bc3fd458e0e990eb37ad70a6ab55a555

Observation 4ac9dd59-6524-40e3-ba64-c354d573bda1 · outbound

This paper cites MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks MixedNUTS: Training-Free Accuracy-Robustness Balance via Nonlinearly Mixed Classifiers

Reference 38

Resolution
unresolved
no resolver link, observed 2026-08-12T16:50:39.264508Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-12T16:50:39.264508Z digest=sha256:202c6ca844bf120863841ea6327a312ca6e712a58bc3919489881aface3f1656

Observation 4ed3dd59-1d7e-4eac-90a3-5ef95f535980 · outbound

This paper cites Revisiting adversarial training for imagenet: Architectures, training and general- ization across threat models,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Revisiting adversarial training for imagenet: Architectures, training and general- ization across threat models,

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.880021Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.269625Z digest=sha256:b4cc1b98a71f9d1c6e274225b372a159a2e93e1c0e4e1a2fa107ee474fa31a1e

Observation cc00f5e4-2df8-42d5-900e-cce4e152dba3 · outbound

This paper cites Local intrinsic dimensionality I: an extreme- value-theoretic foundation for similarity applications,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Local intrinsic dimensionality I: an extreme- value-theoretic foundation for similarity applications,

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.863245Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.274360Z digest=sha256:1b4d66fcf46179447aae3c894d15f2c530f735e9b4395f8585e3192481f488da

Observation 69776b6f-3fc4-4725-b87e-b10940994ebd · outbound

This paper cites Char- acterizing adversarial subspaces using local intrinsic dimen- sionality,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Char- acterizing adversarial subspaces using local intrinsic dimen- sionality,

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.847589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.279349Z digest=sha256:8e17b588911830f067fb60285316ad1b92f04563d85587113be25cf9b94273ee

Observation 97231832-92c9-4e54-8791-688fe90b455d · outbound

This paper cites Collider: A robust training framework for backdoor data,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Collider: A robust training framework for backdoor data,

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.830794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.284282Z digest=sha256:ea27d60ef44662b0b70b158ff63efa6807da09d7fdcca7d74f4c658671072761

Observation 0528c785-c639-4a56-8d36-77f39fe78e3d · outbound

This paper cites Detecting backdoor samples in contrastive language image pretraining,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Detecting backdoor samples in contrastive language image pretraining,

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.807334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.290241Z digest=sha256:83ee4e0ef331ec2f6740fce6744fc81419339cc2dd02e1a5b2f478d57e200512

Observation 03152866-be24-41ac-9960-f4326b003d01 · outbound

This paper cites Ldreg: Local dimensionality regular- ized self-supervised learning,.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Ldreg: Local dimensionality regular- ized self-supervised learning,

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.790171Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.296148Z digest=sha256:56c3caacdc5cefff319ced48ce60362f90406077e2cc77f6b1c9e0311bfe76c9

Observation 4f216019-d157-48ee-9165-5e4d103491f9 · outbound

This paper cites an unresolved cited work.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Unresolved cited work

Reference 45

Resolution
unresolved
raw_fallback, observed 2026-08-12T16:50:39.773848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.301860Z digest=sha256:8e83126a5ecc291536a2e85decb798cf02f05eebfca367d7cc45292a782ef7a7

Observation 544386ef-d984-4876-b27c-23a50f3a9c43 · outbound

This paper cites Figure 2.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Figure 2

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.757626Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.307807Z digest=sha256:ce58603078f7c396a8562287ffc46ed00ac62e2fdfea82449bdf1b3a0755f5ad

Observation b8560c3d-d955-4c9d-8db9-738269a80a79 · outbound

This paper cites The models’ robustness (%) evaluated on different K ′ values.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks The models’ robustness (%) evaluated on different K ′ values

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.740766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.313168Z digest=sha256:90812fda6c3049cc03ff169b99b613a4014c05dbdacaee5683a5fa7a9f4dee3e

Observation ccfc8d40-5e3c-4ab1-b4a6-8a3b4b73a849 · outbound

This paper cites Seven defense models from the CIFAR10 dataset were subjected to a con- straint of 100 attack steps.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks Seven defense models from the CIFAR10 dataset were subjected to a con- straint of 100 attack steps

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.722766Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.318959Z digest=sha256:f64c3443ce8eaa0ff8c45b8559f01edd1046302a51f5a3e8317a907c6bdf5d0f

Observation dc84a6ad-d7f2-40bc-b130-58743a07591e · outbound

This paper cites To extend our analysis, this section introduces comparative experiments with optimizer-based approaches, focusing on the widely recognized Adam optimizer.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks To extend our analysis, this section introduces comparative experiments with optimizer-based approaches, focusing on the widely recognized Adam optimizer

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.706401Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.325248Z digest=sha256:c10a990609e81f11674ec89793c9a39c5e2fce182d169ccc83861e9e2a35cb34

Observation 41b4df7c-b369-4913-9ba2-ebc8dea89eb2 · outbound

This paper cites The robustness (%) of the models, evaluated using the PGDpm attack with varying β values, on the CIFAR10 and Ima- geNet datasets.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks The robustness (%) of the models, evaluated using the PGDpm attack with varying β values, on the CIFAR10 and Ima- geNet datasets

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.689671Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.332508Z digest=sha256:6577f7973c328c7cdeda93ca9ce172486d40766d15967d5b8dbe98f4997aa87b

Observation b34c366c-5182-4bcc-8699-3afcec9acc30 · outbound

This paper cites We assessed the same set of five ImageNet defense models discussed in the main body of the paper.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks We assessed the same set of five ImageNet defense models discussed in the main body of the paper

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-12T16:50:39.673117Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.337942Z digest=sha256:9396d79b45c9c69fde18370dfd570e2f42d3012b533858424d6aed26dfdc973a

Observation e70793d8-d271-4927-989d-b198850d6690 · outbound

This paper cites We tested perturbation ranges of 1, 2, and 3, with a batch size of 32.

Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks We tested perturbation ranges of 1, 2, and 3, with a batch size of 32

Reference 52

Resolution
malformed identifier
raw_fallback, observed 2026-08-12T16:50:39.656094Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-12T06:34:41.77262+00:00.

source=pdf_text observed=2026-08-12T16:50:39.342783Z digest=sha256:6643694cf706838b710170e2208fb890657c92453f84355e73c4d95aa03908a3

Pith citing papers

No inbound Pith citation observations are available.