Paper Citation Record · LEDGER

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability

As of 20 August 2026, this Paper Citation Record lists 41 of 41 outbound references and 0 inbound Pith citation observations for arXiv:2412.20807.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2412.20807 v1

Coverage vector

measured 41 of 41 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-10T23:14:55.137005Z

measured 41 of 41 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-19T06:32:44.657259+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

41 of 41 outbound references displayed

verified exact0
verified fuzzy36
unresolved4
parse uncertain0
malformed identifier1
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation dd989002-f14e-4a20-9e6c-3139de59e17a · outbound

This paper cites Intriguing properties of neural networks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Intriguing properties of neural networks,

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:56.055013Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 6e0b89c2-37f9-44eb-81e1-96e802ee985e · outbound

This paper cites Towards deep learning models resistant to adversarial attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Towards deep learning models resistant to adversarial attacks,

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:56.036587Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 2d552a60-3b8f-4e99-90f3-4fa4f286d588 · outbound

This paper cites Some methods of speeding up the convergence of iteration methods,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Some methods of speeding up the convergence of iteration methods,

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:56.022669Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5be1b0d4-417f-4ca8-afa2-f2553b6141bd · outbound

This paper cites Boosting adversarial attacks with momentum,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Boosting adversarial attacks with momentum,

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:56.008545Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 1cf63b37-379c-4702-879c-321f7969dddb · outbound

This paper cites Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-10T23:14:54.941049Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ccc826b3-babe-4924-9783-34277b8a7320 · outbound

This paper cites Improving transferability of adversarial examples with input diversity,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Improving transferability of adversarial examples with input diversity,

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.992619Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dc677325-04b3-4de5-b366-82630da5cc4a · outbound

This paper cites Evading defenses to transferable adversarial examples by translation -invariant attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Evading defenses to transferable adversarial examples by translation -invariant attacks,

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.974801Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation abb9b394-cda6-463d-8e4d-1b89655f128e · outbound

This paper cites Learning with pseudo- ensembles,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Learning with pseudo- ensembles,

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.959004Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 41de455f-2fda-405c-8d00-95782e4a42b2 · outbound

This paper cites Enhancing adversarial example transferability with an intermediate level attack,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Enhancing adversarial example transferability with an intermediate level attack,

Reference 9

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.944017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ea152028-3db6-4b1c-adf6-adebc17b9181 · outbound

This paper cites Yet another intermediate -level attack,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Yet another intermediate -level attack,

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.928501Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 86a4dbb7-42f5-4d22-b548-0bd660b396b1 · outbound

This paper cites Enhancing targeted transferability via feature spa ce fine -tuning,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Enhancing targeted transferability via feature spa ce fine -tuning,

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.915105Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 939f5856-8acf-4f09-93df-a81ca50372a6 · outbound

This paper cites Averaging Weights Leads to Wider Optima and Better Generalization.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Averaging Weights Leads to Wider Optima and Better Generalization

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-10T23:14:54.982284Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 12e7dcfc-13a2-427a-ba06-bd5f0e340748 · outbound

This paper cites There are many consistent explanations of unlabeled data: why you should average,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability There are many consistent explanations of unlabeled data: why you should average,

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.902108Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 04704021-b56e-4a5e-a5b2-626ff368edf2 · outbound

This paper cites Transferable perturbations of deep feature distributions,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Transferable perturbations of deep feature distributions,

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.889082Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 449c1a3b-03a6-4667-96ae-d80c268a03ca · outbound

This paper cites On generating transferable targeted perturbations,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability On generating transferable targeted perturbations,

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.655430Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation fcc744a2-7a5b-43b6-a006-127519c804cb · outbound

This paper cites Boosting transferability of targeted adversarial examples via hierarchical generative network,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Boosting transferability of targeted adversarial examples via hierarchical generative network,

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.640314Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 809ea35c-399b-4ab8-aac6-455dbde8cfee · outbound

This paper cites LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability LFAA: crafting transferable targeted adversarial examples with low-frequency perturbations,

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.623298Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 557a5223-7ef6-412b-8ac2-79ff8e060bf2 · outbound

This paper cites Towards evaluating the robustness of neural networks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Towards evaluating the robustness of neural networks,

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.607189Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f4e0c76f-549b-4c88-ae96-79a4a924742f · outbound

This paper cites Towards transferable targeted attack,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Towards transferable targeted attack,

Reference 19

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.589912Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 89b5ca35-3b52-4a2f-824c-fe9064075fe8 · outbound

This paper cites On success and simplicity: a second look at transferable targeted attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability On success and simplicity: a second look at transferable targeted attacks,

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.566412Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation dbb2a026-bd13-42b4-ac2b-f83e9e6b9ed3 · outbound

This paper cites Enhancing targeted transferability via suppressing high-confidence labels,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Enhancing targeted transferability via suppressing high-confidence labels,

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.548492Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b3a8c632-7db7-462f-97bb-34aa459d1d4e · outbound

This paper cites Logit margin matters: Improving transferable targeted adversarial attack by logit calibration,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Logit margin matters: Improving transferable targeted adversarial attack by logit calibration,

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.532969Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation af398228-7588-47a0-8237-ad977bb89b3a · outbound

This paper cites Enhancing the self -universality for transferable t argeted attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Enhancing the self -universality for transferable t argeted attacks,

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.514830Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 80e8a0c9-b77e-4a16-8e47-8d78b63453a1 · outbound

This paper cites Feature space perturbations yield more transferable adversarial examples.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Feature space perturbations yield more transferable adversarial examples

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.498371Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation bbe4c35b-a2d6-40e0-809c-36c136d229a8 · outbound

This paper cites Introducing competition to boost the transferability of targeted adversarial examples through clean feature mixup,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Introducing competition to boost the transferability of targeted adversarial examples through clean feature mixup,

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.482875Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0f80b63b-7d31-42ad-b672-16c11b97e194 · outbound

This paper cites Conditional Generative Adversarial Nets.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Conditional Generative Adversarial Nets

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-10T23:14:55.058407Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e55f9a48-c063-4545-8fff-c4096887eab8 · outbound

This paper cites Delving into transferable adversarial examples and black -box attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Delving into transferable adversarial examples and black -box attacks,

Reference 27

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.465848Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation e971d3a6-fd65-4ec2-b917-f22240ae0f6b · outbound

This paper cites Enhancing the transferability of adversarial examples with random patch,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Enhancing the transferability of adversarial examples with random patch,

Reference 28

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.450338Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation ffd75bfc-bb84-4f86-af74-59a6bf27ae47 · outbound

This paper cites Patch -wise attack for fooling deep neural network,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Patch -wise attack for fooling deep neural network,

Reference 29

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.433665Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation b7e38eca-fd79-43cb-8dd1-bd7310de34eb · outbound

This paper cites Deep residual learning for image recognition,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Deep residual learning for image recognition,

Reference 30

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.416750Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation c056fcd4-46ab-4d31-869e-7a4e4855d0a4 · outbound

This paper cites Rethinking the inception architecture for computer vision,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Rethinking the inception architecture for computer vision,

Reference 31

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.400120Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 8f374d09-8be5-4408-9e35-083480899cc8 · outbound

This paper cites Densely connected convolutional networks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Densely connected convolutional networks,

Reference 32

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.385004Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 0f60ff8c-0764-4cc5-a56c-46280839a866 · outbound

This paper cites Very deep convolutional networks for large -scale image recognition,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Very deep convolutional networks for large -scale image recognition,

Reference 33

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.366770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 358cf2b2-6495-42ef-a5ea-6ddab08f6a54 · outbound

This paper cites Adversarial exam ples in the physical world,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Adversarial exam ples in the physical world,

Reference 34

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.351719Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation f8651010-9d06-484a-8688-17af8ecfb59f · outbound

This paper cites an unresolved cited work.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Unresolved cited work

Reference 35

Resolution: unresolved; raw_fallback, observed 2026-08-10T23:14:55.337372Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 7b5ec764-84cd-4c66-bbf2-8b987cd7a3c7 · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Swin transformer: Hierarchical vision transformer using shifted windows,

Reference 36

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.319490Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation af285541-b85f-455e-8fb8-0008eb7b11d7 · outbound

This paper cites An image is worth 16x16 words: Transformers for image recognition at scale,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability An image is worth 16x16 words: Transformers for image recognition at scale,

Reference 37

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.298266Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 33b37b01-47a7-42c2-82a6-3ecebe7b6758 · outbound

This paper cites Rethinking spatial dimensions of vision transformers,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Rethinking spatial dimensions of vision transformers,

Reference 38

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.277554Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3d726273-a962-4b15-8f2f-68679441bda8 · outbound

This paper cites Visformer: The vision-friendly transformer,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Visformer: The vision-friendly transformer,

Reference 39

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.260121Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 5cedae7b-31a8-4fdc-88d6-a94263a4abf8 · outbound

This paper cites A little robustness goes a long way: Leveraging robust features for targeted transfer attacks,.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability A little robustness goes a long way: Leveraging robust features for targeted transfer attacks,

Reference 40

Resolution: verified fuzzy; raw_fallback, observed 2026-08-10T23:14:55.244318Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Observation 3fe7c040-3dde-44ba-8f0b-198adadc544b · outbound

This paper cites an unresolved cited work.

Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability Unresolved cited work

Reference 41

Resolution: malformed identifier; raw_fallback, observed 2026-08-10T23:14:55.228754Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-19T06:32:44.657259+00:00.

Pith citing papers

No inbound Pith citation observations are available.