{"as_of":"2026-08-09T14:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:d68e8ee7a4f9f5d16e7802c89323f47e3e94f45d7fed505b1ca06e2dd6e889ee","coverage":[{"denominator":47,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":47,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-09T00:55:56.378999Z","state":"measured"},{"denominator":47,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":47,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.03758/citation-record","integrity":"/paper/2502.03758/integrity","json":"/paper/2502.03758/citation-record.json","paper":"/paper/2502.03758"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.194139Z","title":"Goodfellow, and Rob Fergus","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.194139Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:57f045a3b175beab6f1d932393d1ab1a8de5904346d0903082d642aea702fc02","observation_id":"5cee90da-1cf1-4ebc-9d4e-8640be608981","resolution":{"observed_at":"2026-08-09T00:55:56.194139Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.970999Z","title":"Spatially transformed adversarial examples","venue":null,"work_id":"8d6c6777-15da-4092-aef3-2723d63dff49","year":2018},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.198753Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:920dc45f99ecc9ce342a09ee711bf0398ef5db47339b8ede558f132969ca152e","observation_id":"ec6249aa-49af-41d9-ae7e-7ea89aa1a8c2","resolution":{"observed_at":"2026-08-09T00:55:56.975654Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.956942Z","title":"Semantic-preserving adversarial text attacks","venue":null,"work_id":"be8a2b6d-7abf-4fdf-80c6-f7ff5b6dadd2","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.203108Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:a95debb5f44d75d973963cc0a413cee809b9aa96f5c59041d0d5c31a1468bf42","observation_id":"a645b60f-7f32-431d-ba1c-b8c37d68681a","resolution":{"observed_at":"2026-08-09T00:55:56.961863Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.943182Z","title":"Two-face: Adversarial audit of commercial face recognition systems","venue":null,"work_id":"00b057a9-ee53-41c2-9aad-218e799e226b","year":2022},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.207651Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:e0bd4ffbd6a5e9a757ebe56a04bbfd4ca09d737d64492766d3d705b2c1d81027","observation_id":"efcd574a-92bf-4128-86d7-c3b1f483d749","resolution":{"observed_at":"2026-08-09T00:55:56.947816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.929177Z","title":"Adversarial examples based on object detection tasks: A survey","venue":null,"work_id":"ec0a7f85-d6fb-48d6-b380-41df1876df8e","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.212089Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:b51b41eeea9985343aef89e0a12dae748c8531dccf02792aa52fa1b6c0121042","observation_id":"3da5fa51-f2d2-40b4-8ab1-af53f9573f0a","resolution":{"observed_at":"2026-08-09T00:55:56.933765Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.914838Z","title":"Exploring the feasibility of adversarial attacks on medical image segmentation","venue":null,"work_id":"95499953-4842-4892-815b-658de3fbe821","year":2024},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.216445Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:79ee55c897fb10c4c3def29cb2e2b87e7423733879789d162ca0ef2b0be498f5","observation_id":"afc46ce7-fd95-4eb0-a345-d4d6d1d453ef","resolution":{"observed_at":"2026-08-09T00:55:56.919658Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.899666Z","title":"Towards deep learning models resistant to adversarial attacks","venue":null,"work_id":"0afad234-9974-4d0d-ac90-8257856490c0","year":2018},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.220977Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ede3a0b137127da26d23f9bcdf29caac649367b56e492d4524069847ea897a3c","observation_id":"7e151241-7262-4b62-af0f-141ffe594c58","resolution":{"observed_at":"2026-08-09T00:55:56.904985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.884478Z","title":"Adversarial training with complementary labels: on the benefit of gradually informative attacks","venue":null,"work_id":"7334b8cd-1eae-40b0-9809-e3ed01685ae2","year":2022},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.225059Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:88b1b6563987825951cadd94ba271b554568ce09aa52dc58ce5d8f6277c7efe3","observation_id":"67f4f9cc-3a32-40cb-9b89-0f3ce0576669","resolution":{"observed_at":"2026-08-09T00:55:56.889335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.870030Z","title":"Adversarial robustness in graph neural networks: A hamiltonian approach","venue":null,"work_id":"326031b4-333c-4592-91c4-649c4237ccc3","year":2024},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.228964Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ec81cf592b27e98429b34047021258703a44eb2d6b26b27f051813f6831c7214","observation_id":"0ae06fbe-f856-41ea-b162-a9d9935aa33b","resolution":{"observed_at":"2026-08-09T00:55:56.874594Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.856043Z","title":"Inspector for face forgery detection: Defending against adversarial attacks from coarse to fine","venue":null,"work_id":"dc60dcdd-83a0-426a-b1fb-47409d76d3b1","year":2024},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.232963Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ead75e678487223d5e22a1f1da262e525da3b13017572e13512198ba22a5aab5","observation_id":"aa360ac3-af19-4237-84b5-eaa6c3b8db25","resolution":{"observed_at":"2026-08-09T00:55:56.860763Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.841333Z","title":"Improving adversarial robustness of masked autoencoders via test-time frequency-domain prompting","venue":null,"work_id":"756f7cbe-9aee-4e88-b29f-9eab62a01d0d","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.236898Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:6191f1816de8b6b4f51b8039f115f592e2f8a111cd8764ea9718ad99604ff848","observation_id":"b3f0b346-e9e9-486b-926b-772517d4bc90","resolution":{"observed_at":"2026-08-09T00:55:56.846403Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.827219Z","title":"Visual prompting for adversarial robustness","venue":null,"work_id":"e47e1936-eb14-4cf3-93e1-6a58e270a863","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.241060Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:a6f9de17e5e8a8d8e69ec84a36b992c421ef4161ac52aff5f6bd53fe32d19c3e","observation_id":"ecad9518-9602-4b41-bd4a-d75f7d8bed15","resolution":{"observed_at":"2026-08-09T00:55:56.831989Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.244931Z","title":"Adversarial weight perturbation helps robust generalization","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.244931Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:3cfb1c2d1a37f55a7539971a949255deac7b364cdd39eacc8eebb779eadc4388","observation_id":"592db693-6868-49b7-a683-1df66cf9eee1","resolution":{"observed_at":"2026-08-09T00:55:56.244931Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.248795Z","title":"Cfa: Class-wise calibrated fair adversarial training","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.248795Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:88bfcb5ab8d3a1799a27d0f16cfce4d82400ba4494d0dfa8888dfad907065b74","observation_id":"c8c1ff38-4ae3-4e0d-a886-4ba466dd9876","resolution":{"observed_at":"2026-08-09T00:55:56.248795Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.795064Z","title":"Revisiting adversarial training for imagenet: Architec- tures, training and generalization across threat models","venue":null,"work_id":"f883c60e-c69e-4f3d-a343-c72faafb09eb","year":2024},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.252776Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:2d6d516487643742cb67aa58e25ffcc425e2a95e5a4b14977e3285ca10b0d43d","observation_id":"60c3a401-8d20-49fd-9e34-93a3c424a053","resolution":{"observed_at":"2026-08-09T00:55:56.799710Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-04T18:06:26.992880Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-09T00:55:56.256910Z","title":"Diffusion models for adversarial purification","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.256910Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:8568ddf1afe19d22a00c2e1621e85ea2720bd167fbeefd56dd8dbb8775e3a0aa","observation_id":"c4d3c428-8df6-4787-a645-f2c5f417750e","resolution":{"observed_at":"2026-08-09T00:55:56.256910Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.781156Z","title":"Eliminating adversarial noise via information discard and robust representation restoration","venue":null,"work_id":"f52a62a5-5946-4f6e-9296-6919db1af0f7","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.261382Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:9538dd656321513b781841e5e8470c527c29f2285c66457c2fb11ce413953583","observation_id":"f35bdc5b-9227-43df-b62d-ec4855b7e1e7","resolution":{"observed_at":"2026-08-09T00:55:56.785955Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.767064Z","title":"Filtering for texture classification: A comparative study","venue":null,"work_id":"96bc758a-05fb-4687-844f-9bac4bdb9ba4","year":1999},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.265463Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:da001cb63dc9a51891e4e6861bd4510c4794f5935c64c09f1f8141208ed5ffeb","observation_id":"2955db6a-bd28-45f6-bb0e-00d8ce952cc1","resolution":{"observed_at":"2026-08-09T00:55:56.771742Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.753200Z","title":"Texture classification using wavelet transform and support vector machines","venue":null,"work_id":"49fa3ad2-eea8-4ca7-86c2-e0a830f0bc27","year":2005},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.269532Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:319206189df995eccf90afee5eac4d2a16468242d54a3eda0a4cae2bacf0764d","observation_id":"7e8da693-cc29-4665-be18-328074a777fb","resolution":{"observed_at":"2026-08-09T00:55:56.757849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.738654Z","title":"Phase congruency: A low-level image invariant","venue":null,"work_id":"b30fe6a6-0a8d-4ce3-8138-94c1fb697115","year":2000},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.273520Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:fa6db2c4ef42d87eed040165231979bb72083124bf1bdea123d469d0a20d8b5c","observation_id":"0178e9ca-2ef6-4671-98f7-469f9ff7519a","resolution":{"observed_at":"2026-08-09T00:55:56.743758Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.277402Z","title":"Fsim: A feature similarity index for image quality assessment","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.277402Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:24d7a3e72789518e3ad7062a515831a0a26202db10ada1a01d83bed273956b49","observation_id":"813d4d36-7b02-48be-bc4b-d5712b05fd60","resolution":{"observed_at":"2026-08-09T00:55:56.277402Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.716430Z","title":"Metamers of the ventral stream","venue":null,"work_id":"3064481a-c8d9-405c-a628-ea40d1ee0e16","year":2011},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.281170Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:cf661fba75119ec676e1f0163fd755a26cb2b74f5898245414d43395fef5d473","observation_id":"a8672c30-5f34-45b3-b188-ec8a88bcb991","resolution":{"observed_at":"2026-08-09T00:55:56.721110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.702664Z","title":"On the role of spatial phase and phase correlation in vision, illusion, and cognition","venue":null,"work_id":"049d9b31-29fb-4c54-bb3d-e2fb67e945f9","year":2015},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.284882Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:51136bacfa6c04959ad6e958f03a01386e3050c21b5f7153253b78b30541f561","observation_id":"01b54e19-650f-4dc7-9a9e-52544dfa73ad","resolution":{"observed_at":"2026-08-09T00:55:56.707097Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.689846Z","title":"Amplitude-phase recombination: Rethinking robustness of convolutional neural networks in frequency domain","venue":null,"work_id":"598f8308-8d8e-4762-9333-e50a05a0d1c8","year":2021},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.288583Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:3b9c3de3f245aade9e528bdea15645a73143aca7746af8cdb38ca975b75bc659","observation_id":"cd677fff-6bc9-48b1-ad45-bb6f8b185e10","resolution":{"observed_at":"2026-08-09T00:55:56.693997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.292351Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.292351Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:045279b35edf012fca52851e1ce64e52d5cd756e57dc20930c64046d00524736","observation_id":"5bbd8a72-1bba-491d-98d9-9cb85bb40d42","resolution":{"observed_at":"2026-08-09T00:55:56.292351Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.296114Z","title":"Towards evaluating the robustness of neural networks","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.296114Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:722e551ab0cead4136afcaee30478625e79e9fe262c085891235a92b066e61a6","observation_id":"d9fa431d-356b-4699-b1e3-f9393251978b","resolution":{"observed_at":"2026-08-09T00:55:56.296114Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.660107Z","title":"Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses","venue":null,"work_id":"6816a493-0d2f-42ed-8594-a30d839aa485","year":2019},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.299984Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:c04ef72128cffc52838ebe01cbbd8f0536a6ecf0632380cb22cb78a07c072876","observation_id":"16accb87-0c1a-4047-b42b-8a019d736a99","resolution":{"observed_at":"2026-08-09T00:55:56.664414Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.647070Z","title":"Square attack: a query- efficient black-box adversarial attack via random search","venue":null,"work_id":"56fc64e9-3db1-4bfe-b833-d40d93d100d7","year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.303821Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:6fb90bbad1b2dbafa56950b9696f7523961e3a91c866167b89b902210bf780fc","observation_id":"b79d3a47-80b6-4298-8533-30397ab98c3c","resolution":{"observed_at":"2026-08-09T00:55:56.651466Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.307575Z","title":"Theoretically principled trade-off between robustness and accuracy","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.307575Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:d8d3a560edba2d6e26978e4606f70b280e5e53ef5049d45b7031f5414cf0ce35","observation_id":"71725fa4-c837-4efa-94eb-c132453b691d","resolution":{"observed_at":"2026-08-09T00:55:56.307575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.625398Z","title":"Improving adversarial robustness requires revisiting misclassified examples","venue":null,"work_id":"6f8d16a4-a541-4629-b85d-383dea676683","year":2019},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.311410Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:43dde9adee8f8c9a5b90fbb28907c73f70a44a9f0cb458fa27052c7374939767","observation_id":"cfd99c7c-40f2-4046-b739-d003e3502d52","resolution":{"observed_at":"2026-08-09T00:55:56.629584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.611893Z","title":"Ape-gan: Adversarial perturbation elimination with gan","venue":null,"work_id":"c6ace3ea-d08e-4a39-ab8b-f5a68893a6cd","year":2019},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.315082Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ee5cbf14e2fe657b9066e0290f8e2a69cd8e33162b5de6bb605f7df0c4a8c08e","observation_id":"01374524-b24b-47d3-9ae5-ec9f240aa939","resolution":{"observed_at":"2026-08-09T00:55:56.616165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.598809Z","title":"Texture and shape synthesis on surfaces","venue":null,"work_id":"60e31f31-d36a-4501-bd50-158f84780097","year":2001},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.319052Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:aca3d82fec34f56ef83c7f0c17f26f6b7ec7378d4435d4d05946840392788f6e","observation_id":"c2e89351-6658-4fae-b8ac-cb87d8e85b81","resolution":{"observed_at":"2026-08-09T00:55:56.603113Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.585397Z","title":"Learning lbp structure by maximizing the conditional mutual information","venue":null,"work_id":"93a1e283-ce5e-4d60-9f9c-3d72c54b8ab5","year":2015},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.323005Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ceb4728b75face7d289a9a862451a98c5dffba993df2f7a883cb48ec17d1ab30","observation_id":"fcbc34ff-2ceb-4710-9856-a4d0bf6adf5c","resolution":{"observed_at":"2026-08-09T00:55:56.590017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.326996Z","title":"Learning multiple layers of features from tiny images","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.326996Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:1ca92c8c966d6355eac2eb181f0ff51a0349c77f10ca6da56d5e0322cf771802","observation_id":"f766c576-1590-429c-836b-d48129726b40","resolution":{"observed_at":"2026-08-09T00:55:56.326996Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.331080Z","title":"Tiny imagenet visual recognition challenge","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.331080Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:ccde267579ef4d833439b658e1656af0dfd605cb3b2e26c8b0d36fbb11b96f1d","observation_id":"a5b7862e-6047-460a-89d3-21f7a90075a2","resolution":{"observed_at":"2026-08-09T00:55:56.331080Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.335307Z","title":"Deep residual learning for image recognition","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.335307Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:1712203b73b1fc7e92c3c911d83c693463f07606477263567eb382190796ccdb","observation_id":"f55bd2e2-04de-484c-9dbf-6a586edee4f2","resolution":{"observed_at":"2026-08-09T00:55:56.335307Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1605.07146","last_updated":"2017-06-14T06:06:48Z","snapshot_observed_at":"2026-08-08T14:57:17.868613Z","submitted_at":"2016-05-23T19:27:13Z","title":"Wide Residual Networks","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1605.07146","snapshot_observed_at":"2026-08-09T00:55:56.339374Z","title":"Wide residual networks","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.339374Z"},"links":{"cited_paper":"/paper/1605.07146","citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:bb80092af8bd8170e1b995583f7a3817069e10b5981613eb7ec3b104aa3e4e35","observation_id":"f7824f14-a5e6-42a8-b3ac-7bbb45d3d12b","resolution":{"observed_at":"2026-08-09T00:55:56.339374Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1409.1556","last_updated":"2015-04-10T16:25:04Z","snapshot_observed_at":"2026-07-06T03:53:32.549552Z","submitted_at":"2014-09-04T19:48:04Z","title":"Very Deep Convolutional Networks for Large-Scale Image Recognition","version":6},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1409.1556","snapshot_observed_at":"2026-08-09T00:55:56.343715Z","title":"Very deep convolutional networks for large-scale image recognition","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.343715Z"},"links":{"cited_paper":"/paper/1409.1556","citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:33d65b2e802e59806bf2f68f643924683cbffecb32f774fe52b8f03eaa4c69c6","observation_id":"c951741b-e5ce-4153-8ef3-b70755f002bb","resolution":{"observed_at":"2026-08-09T00:55:56.343715Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.348104Z","title":"Swin transformer: Hierarchical vision transformer using shifted windows","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.348104Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:9a0c29c53f7892caf01e66320678ee809b22908ab6fa4d993afca3a269ea2b1e","observation_id":"61a51109-eb58-4214-adf3-de8b9420ed9c","resolution":{"observed_at":"2026-08-09T00:55:56.348104Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.537419Z","title":"Scalable training of l 1-regularized log-linear models","venue":null,"work_id":"72a67ec7-7f9b-4feb-9dce-a8b04b648824","year":2007},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.351634Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:666c24c4ca53c2c3c6f4d0dcfe0f1f7cf55750b6b5f577c7e2ac88060b4270ab","observation_id":"acb5ee35-4bc3-498d-8b9a-792015040474","resolution":{"observed_at":"2026-08-09T00:55:56.541591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.355656Z","title":"Adversarial self-supervised contrastive learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.355656Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:56605dbfbb81cfd3fdf933ae484f4ad9e85c5d2d7944e7195683b3bbe7855f72","observation_id":"33b913f4-14c4-4809-b3c5-ff022e2e219f","resolution":{"observed_at":"2026-08-09T00:55:56.355656Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.359395Z","title":"Robust pre-training by adversarial contrastive learning","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.359395Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:1b88f87bf9ac72ec19433d96c3833317157e8f99190ee26fc08cdbc3368b2bad","observation_id":"50188292-9a37-4309-8990-b81f298b8ecb","resolution":{"observed_at":"2026-08-09T00:55:56.359395Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.506451Z","title":"Enhancing adversarial contrastive learning via adversarial invariant regularization","venue":null,"work_id":"617b2ea9-6530-48c1-a33c-230e5a145a8e","year":2024},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.363273Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:b4bcb717cf4c09807ca7167ba7db0f0bb6e62ca783cf0ba328e05d0a8583b103","observation_id":"1d434a0b-cb9c-4e7e-9424-e1d7a16ccc16","resolution":{"observed_at":"2026-08-09T00:55:56.510733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.492468Z","title":"Exploring the relationship between architectural design and adversarially robust generalization","venue":null,"work_id":"d40838e0-0c5c-4ba0-8a8d-8b803f353811","year":2023},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.367186Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:a1ede5d65ef3c6435869126c0dbc155353e3c31aeaffa0f8859bc7889e4be09d","observation_id":"a6101bb7-82f8-449c-8fb8-3a83f071acf5","resolution":{"observed_at":"2026-08-09T00:55:56.496745Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.11146","last_updated":"2018-11-29T22:50:01Z","snapshot_observed_at":"2026-08-08T11:28:36.813476Z","submitted_at":"2018-06-28T19:06:26Z","title":"Adversarial Reprogramming of Neural Networks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.11146","snapshot_observed_at":"2026-08-09T00:55:56.371063Z","title":"Adversarial reprogramming of neural networks","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.371063Z"},"links":{"cited_paper":"/paper/1806.11146","citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:f03524151d4f4c284bd2f81ab2d9d6c9caa86682c4c61dd156c20bbcb26bfb36","observation_id":"d44e30c1-cdb0-4653-afcc-d86e245f5809","resolution":{"observed_at":"2026-08-09T00:55:56.371063Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.478551Z","title":"Transfer learning without knowing: Reprogramming black-box machine learning models with scarce data and limited resources","venue":null,"work_id":"c31d3fcb-f5e8-4d81-b493-50ef3fd4cefd","year":2020},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.374985Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:fe18db9fc3355947b1c371e94df61283a8e209b128e201decc9d561e742eb0f9","observation_id":"9a28740a-1150-4cb2-a5a8-113edac17268","resolution":{"observed_at":"2026-08-09T00:55:56.483494Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-09T00:55:56.463765Z","title":"Fairness repro- gramming","venue":null,"work_id":"b127d2ab-eaac-488e-8608-eef35ec38c16","year":2022},"citing_paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-09T00:55:56.378999Z"},"links":{"citing_paper":"/paper/2502.03758"},"observation_digest":"sha256:8aeb96577cff12456dbbfbbcb8a9e057018618a09840ace3127dc661eb769930","observation_id":"f12232f7-d6be-429f-988b-778c572682f4","resolution":{"observed_at":"2026-08-09T00:55:56.469016Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.03758","last_updated":"2025-05-30T09:44:35Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-09T08:50:15.482582Z","submitted_at":"2025-02-06T03:43:34Z","title":"Improving Adversarial Robustness via Phase and Amplitude-aware Prompting"},"reference_resolution":{"displayed":47,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":17,"verified_exact":0,"verified_fuzzy":29},"total_outbound_references":47},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 47 of 47 outbound references and 0 inbound Pith citation observations for arXiv:2502.03758."}