{"as_of":"2026-08-16T21:20:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:074466c0c8c8bce74dad1a5d01742d036f345e96998b5254aaf018ae21e84067","coverage":[{"denominator":70,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":70,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T15:07:59.202250Z","state":"measured"},{"denominator":70,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":70,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-16T06:30:59.297886+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.16318/citation-record","integrity":"/paper/2505.16318/integrity","json":"/paper/2505.16318/citation-record.json","paper":"/paper/2505.16318"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.586594Z","title":"DorPatch: Distributed and occlusion-robust adversarial patch to evade certifiable defenses,","venue":null,"work_id":"68d6da80-d3f1-4d24-941b-c49ec1b38e14","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.407167Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fca583d638cb55dc14aeedd584d4becc307a7d026f7876188f638e748bfb260b","observation_id":"692bdb65-8ca3-48d6-97bf-07bebdfd0d6a","resolution":{"observed_at":"2026-08-07T15:08:08.644062Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.471390Z","title":"Imagenet classification with deep convolutional neural networks,","venue":null,"work_id":"a7e66a9b-432c-4457-822e-8e9f7b26a277","year":2012},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.462723Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:e17d351ae53e51046114397501b02d255ac5886651e44c3ae610345280ad3086","observation_id":"813cb60b-668c-453e-8ca8-b716c4693469","resolution":{"observed_at":"2026-08-07T15:08:08.523611Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.503248Z","title":"Deep residual learning for image recognition,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.503248Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d5d2a35dc2ec06f5258582770dd7942a26fe3eca67f5c0194307f9cdfdadef32","observation_id":"f69ea120-f8f3-4915-b019-9deb08cbd33e","resolution":{"observed_at":"2026-08-07T15:07:52.503248Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.563189Z","title":"An image is worth 16x16 words: Transformers for image recognition at scale,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.563189Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:525df248f1978611f132fe8a412f813204d1a6fbb5d3f123d2c754f236f6ebca","observation_id":"1c3bf134-dea9-4802-863a-fcf4bda9f554","resolution":{"observed_at":"2026-08-07T15:07:52.563189Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.663865Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.663865Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:a6ff24ae8d1a4041102a1fb9a122a1c8e87e39a038ce192948e02972e5fb328b","observation_id":"17493acb-2746-43b0-b2ef-d8361a00567b","resolution":{"observed_at":"2026-08-07T15:07:52.663865Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:52.745639Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.745639Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:ec9a6bc4a731b19eb4f3b2ee6cfa36b6f9c88baa5d58ac64219e88a4b5326111","observation_id":"3902649a-2ec8-4601-8a76-afdea50a0044","resolution":{"observed_at":"2026-08-07T15:07:52.745639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1712.09665","last_updated":"2018-05-17T01:44:59Z","snapshot_observed_at":"2026-08-16T02:01:26.676409Z","submitted_at":"2017-12-27T20:03:51Z","title":"Adversarial Patch","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1712.09665","snapshot_observed_at":"2026-08-07T15:07:52.799214Z","title":"Adversarial patch,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.799214Z"},"links":{"cited_paper":"/paper/1712.09665","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8d4f21483fcdb1d9ac54ad3f0413807e90235efba3a4268eefe90672e70a91e2","observation_id":"81b34f5b-5b6f-4e4b-8428-543663f36d81","resolution":{"observed_at":"2026-08-07T15:07:52.799214Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.283006Z","title":"Lavan: Localized and visible adversarial noise,","venue":null,"work_id":"14b7c279-2437-4c62-bcb9-47ad0b5d15c8","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.831462Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d44e396bb79d88347ebf5e79f50c74b48652b8288fe517f937ccb7c6af5dc02f","observation_id":"ef35909a-ed5d-4527-afcf-af9a98c55537","resolution":{"observed_at":"2026-08-07T15:08:08.352186Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.183565Z","title":"Robust physical-world attacks on deep learning visual classification,","venue":null,"work_id":"a5ed4617-9579-4de4-a803-beead4c014ca","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:52.904324Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:89958a92edff134b2132539169644dfeb843442084fab6ef971a1fdbb9425936","observation_id":"be140ea1-efa7-41f3-9f78-a6e9965fe9fc","resolution":{"observed_at":"2026-08-07T15:08:08.232571Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1806.02299","last_updated":"2019-04-23T16:44:32Z","snapshot_observed_at":"2026-08-15T07:39:47.178486Z","submitted_at":"2018-06-05T17:04:37Z","title":"DPatch: An Adversarial Patch Attack on Object Detectors","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1806.02299","snapshot_observed_at":"2026-08-07T15:07:53.039673Z","title":"Dpatch: An adversarial patch attack on object detectors,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.039673Z"},"links":{"cited_paper":"/paper/1806.02299","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9b6e67f1ef020b0dc2a32477c97c75c3bc96ceb7a81e3f3be6d457fcf644d14d","observation_id":"01df4e24-4aa6-4c7b-9515-fb628c4abe85","resolution":{"observed_at":"2026-08-07T15:07:53.039673Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.096055Z","title":"Pad: Patch- agnostic defense against adversarial patch attacks,","venue":null,"work_id":"768c0a28-c0a9-4d52-baf2-a03d6b9e8425","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.187831Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9db2914bcdf91bc255dc5a4794e402d1449cf10f1e39d40bae6232c4eedcc909","observation_id":"9a9a3d12-6c5a-4419-9820-c5bc33a1df50","resolution":{"observed_at":"2026-08-07T15:08:08.132529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:08.010039Z","title":"Certified defenses for adversarial patches,","venue":null,"work_id":"b018a577-33e5-4f37-8d21-dab75abcf3e2","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.315565Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:bfd99ed2074f788419bd407357b727e8b14038c61b5e04ffaac7a70470224af4","observation_id":"9b074267-cf51-4e2f-b47c-21d09e377e11","resolution":{"observed_at":"2026-08-07T15:08:08.049251Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.905355Z","title":"{PatchGuard}: A provably robust defense against adversarial patches via small receptive fields and masking,","venue":null,"work_id":"fd1d26eb-827d-476b-8f58-93486ce6afb0","year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.459817Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:e56ee69817e1545393e94eee6e7c51a65ff17577d165b91e668f29bcf806f0c5","observation_id":"27a21386-2b42-4ac1-bd32-6f65512fc4e9","resolution":{"observed_at":"2026-08-07T15:08:07.951855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.818201Z","title":"{PatchCleanser}: Certifiably robust defense against adversarial patches for any image classifier,","venue":null,"work_id":"d6b4b4d1-dad0-480d-ac9a-b6cbffa53963","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.584964Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:663930f3878aed87e0ef4c7ae31aee018505b19d6fce4aa57e8bc9579d3234f1","observation_id":"55eaff19-0aef-4ebb-9b17-607f89158e2a","resolution":{"observed_at":"2026-08-07T15:08:07.853498Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.679782Z","title":"{PatchCURE}: Improving certifiable robustness, model utility, and computation effi- ciency of adversarial patch defenses,","venue":null,"work_id":"c370f7f0-1bc1-4dcc-905e-f1d94c89381b","year":2024},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.735800Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:5f91b4e02b7797959f1425a121b1f99d56874735f6f4fa58e4dc28d5fe0f4ad8","observation_id":"bf4e3836-9d9c-49e0-a8a7-a90d5c7f6ff7","resolution":{"observed_at":"2026-08-07T15:08:07.728212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.557179Z","title":"Defending against adversarial attacks by randomized diversification,","venue":null,"work_id":"4c738eb8-25cd-4cb1-8c7a-3881ac13e11a","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.853619Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6eda67137c618c28705ba0bde0a3e928eb8b4a9f8db261bc92f6e132dbe10de7","observation_id":"bdcf039b-1f6d-4a0a-a212-fd43bc5873a7","resolution":{"observed_at":"2026-08-07T15:08:07.613090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.350498Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks,","venue":null,"work_id":"fd101696-4f31-48d3-97ef-2ee6d443cdaf","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:53.993670Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:1ce04f479b2059ab1756341be7cfbd99a062a110268ead28516af2dff08ec515","observation_id":"37cbdbd3-180c-4818-b6a8-cda7af65c514","resolution":{"observed_at":"2026-08-07T15:08:07.479931Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:07.186336Z","title":"Communication in the presence of noise,","venue":null,"work_id":"e59dc87f-cd8c-4741-b815-82b6e237396d","year":1949},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.073658Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:092d0e920e8f56b09967389e1cdceaf92d6f5c461f47dee34ef7f1830162d358","observation_id":"e7409901-ac08-4b82-ab8c-b0bc94c1ea6b","resolution":{"observed_at":"2026-08-07T15:08:07.231969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.982714Z","title":"Fourier features let networks learn high-frequency functions in low-dimensional domains,","venue":null,"work_id":"65249590-7f89-41b8-b2f8-148bd84a5c31","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.195583Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fb752cb6dd676f412759e4ab59db143f0155a2355ec60b3d8a3ad003cc81a8bd","observation_id":"f45e5a56-b506-4ab4-a3a6-21422451a105","resolution":{"observed_at":"2026-08-07T15:08:07.084720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.858504Z","title":"Statistics of natural image categories,","venue":null,"work_id":"c72770ea-d445-45f4-a46d-521a3821e718","year":2003},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.247049Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:bda1d460b406824b9e55e997149c491f2615e3c8bf2a8ce2a7cca2bdb5f7111a","observation_id":"e25b59a7-ad85-40ad-86b4-01ad13a4e1e3","resolution":{"observed_at":"2026-08-07T15:08:06.904180Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.361727Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.361727Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:df4513c9bc756d70e917b04d3aaccf9fa374ae6e287880880cb31a1597c6d56e","observation_id":"df0e5cb4-10b7-46cc-a823-daad42703e66","resolution":{"observed_at":"2026-08-07T15:07:54.361727Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.592898Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":"d8371811-643a-4de9-86b2-b051ca7bce33","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.464697Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:65ae339a44b0b69837671e9166443bc4e03f73c742e2aa2579086afcbad179be","observation_id":"a71156b5-1440-48c9-adf3-08753003d33c","resolution":{"observed_at":"2026-08-07T15:08:06.738292Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.373567Z","title":"The security of machine learning,","venue":null,"work_id":"106bd33e-772f-49a9-9e2e-bb008bfc89cd","year":2010},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.554399Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:a9c5322d837d2ecb73d5889ad3e9521b1632acb3cca182da18ae579f5a55e1f2","observation_id":"9942dc31-a438-4124-a945-7dd8b532c422","resolution":{"observed_at":"2026-08-07T15:08:06.463919Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:06.190008Z","title":"Evasion attacks against machine learning at test time,","venue":null,"work_id":"c85edadc-58b4-451c-8b26-5963feb1557d","year":2013},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.623565Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6f42a2d3f04cf7ce3f9cd00f164acda87f12f8bacd63f0a6d0054c930fa8d4b1","observation_id":"a0f4c822-adc5-48ea-a8d7-785d0051ecdc","resolution":{"observed_at":"2026-08-07T15:08:06.267470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.995697Z","title":"The limitations of deep learning in adversarial settings,","venue":null,"work_id":"2a994ced-95fd-45fa-a34e-c8eaefd7c87e","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.685306Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6bf1e324148ce8a894fdada28462ae16a42faf99dd266275d1b364216a85a756","observation_id":"588024b9-00c7-44db-9daa-d252a2850d90","resolution":{"observed_at":"2026-08-07T15:08:06.101369Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.883791Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack,","venue":null,"work_id":"f04b2157-8d71-4bd4-ba1e-bedd57975b26","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.739472Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:66b55115f954a7add48eba7743cbbbf268657957dabc8435f426c8f58f0e82c2","observation_id":"f2b9efe8-e4da-45f1-affc-df823d881b50","resolution":{"observed_at":"2026-08-07T15:08:05.957663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.791087Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.791087Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:dec8b0a49f5f8f37df9207b1780ef1e52967816b472f5a17fb05c372fcab2d33","observation_id":"f7472de9-fc9c-410f-a223-8761dac9d17b","resolution":{"observed_at":"2026-08-07T15:07:54.791087Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.690458Z","title":"On visible adversarial perturbations & digital watermarking,","venue":null,"work_id":"3b442c3e-5959-4c45-a65c-855e11b7c622","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.859082Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:a5220aeafae5eab405ed30f4821eb4a83a7fdac953711b759e3de8350d5ae351","observation_id":"cba142cc-135c-4051-9af1-19bbf41b64a2","resolution":{"observed_at":"2026-08-07T15:08:05.764095Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:54.908093Z","title":"Adversarial sticker: A stealthy attack method in the physical world,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.908093Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:17696839e52d9f08e64eb02451d943372fa9f9e45c5165e4bb4e1e41b4962b63","observation_id":"b36742a7-cb6f-4dc7-a239-e9cc3e510486","resolution":{"observed_at":"2026-08-07T15:07:54.908093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.511275Z","title":"Patchattack: A black-box texture-based attack with reinforcement learning,","venue":null,"work_id":"82ecfa7e-bf64-479e-9427-ea1031d6d960","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.966597Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:f3d2c7edb641952fb2a640bad02af958c577a215bcbfa857500067b33b3c67dc","observation_id":"56754783-0af7-40f2-930c-71c11b1645b4","resolution":{"observed_at":"2026-08-07T15:08:05.575161Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.11897","last_updated":"2019-06-20T11:04:57Z","snapshot_observed_at":"2026-08-13T18:17:41.806260Z","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.11897","snapshot_observed_at":"2026-08-07T15:07:54.998845Z","title":"On physical adversarial patches for object detection,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:54.998845Z"},"links":{"cited_paper":"/paper/1906.11897","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:e8cd02393302451786fee65ecc2653cf78efd6ce3614325ceb08a9e676b85735","observation_id":"fd2d35d2-676e-4e53-9097-6cbf2ad34c53","resolution":{"observed_at":"2026-08-07T15:07:54.998845Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.310907Z","title":"Local gradients smoothing: Defense against localized adversarial attacks,","venue":null,"work_id":"4f1eae5f-60d7-4047-a640-457921faa1bf","year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.086869Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:378703cdc8ddbcb3c6a3d7012a315293ea46dc11b3ae6376d81757301647688c","observation_id":"2b1cb77b-7f03-4308-b3a1-3b61b4bc491f","resolution":{"observed_at":"2026-08-07T15:08:05.393452Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.181265Z","title":"Clipped bagnet: Defending against sticker attacks with clipped bag-of-features,","venue":null,"work_id":"d426c790-8534-4405-8161-eeec61c7588a","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.163006Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:76cbb890c0e8a841fecda9bff23ba2056694e66459f4cfbec92341f788cc5511","observation_id":"f960c475-1cdd-4c7a-ba49-55faa9b80586","resolution":{"observed_at":"2026-08-07T15:08:05.240018Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:05.074797Z","title":"Sentinet: Detecting localized universal attacks against deep learning systems,","venue":null,"work_id":"2756416a-eb9f-4755-9998-13cf72aacdaa","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.219982Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:0a212ebf7f6a2311be18582ed303db79f6b629347d6d91b034e66b14370d14f0","observation_id":"cd5fee64-39b4-4686-bca8-98d032050a1b","resolution":{"observed_at":"2026-08-07T15:08:05.114793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.923960Z","title":"Jedi: Entropy-based localization and removal of adversarial patches,","venue":null,"work_id":"42840a62-ec73-4969-a5a6-250074cfa0cf","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.283905Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:76acf2e959d974bb659afa51a0c21d7e2e70688cfb69143142090b015f114d02","observation_id":"ecc94b7a-5219-4b74-a5b5-27bd04a1c21f","resolution":{"observed_at":"2026-08-07T15:08:04.993985Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.814456Z","title":"Patchzero: Defending against adversarial patch attacks by detecting and zeroing the patch,","venue":null,"work_id":"1ed92a51-1fa9-47cf-a17b-651d9aa00ef7","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.357001Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8eef98b84c6bbedab208fe9f5aab0eac6e0fb601a802c25b89242515941f8306","observation_id":"3c4234fc-86df-4bb1-a5fd-9446a1af7fbb","resolution":{"observed_at":"2026-08-07T15:08:04.850701Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.664612Z","title":"Adversarial training against location- optimized adversarial patches,","venue":null,"work_id":"4b06a808-32ca-49e5-82f7-c455e9ca16b8","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.439930Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:e84d87f538efd713bae37213982382cf62e3a8b63b512c0a576db69fe8feb562","observation_id":"7e4aa260-9e54-4060-9373-71497deb4e2d","resolution":{"observed_at":"2026-08-07T15:08:04.747048Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.564843Z","title":"Defending against physically realizable attacks on image classification,","venue":null,"work_id":"e34a25f0-6271-4050-9d63-5628b042e565","year":2020},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.564574Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:0c2dd4dfd9ecff44be7962a5d2001f7e571ae21a17182929753e0d5a0edc4239","observation_id":"964503ef-0b4e-4fc2-9347-80a1fc16f525","resolution":{"observed_at":"2026-08-07T15:08:04.605042Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.445216Z","title":"Efficient training methods for achieving adversarial robustness against sparse attacks,","venue":null,"work_id":"9b437c21-5617-413a-a979-60b34a9d801d","year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.752613Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d2243b68efc3a6bbc1af6feeec661d82b4897c634fb88cd1ebc4eff530ed4517","observation_id":"257a3cd5-34e5-4d43-98a0-6ae509db6aea","resolution":{"observed_at":"2026-08-07T15:08:04.496537Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.321034Z","title":"Learning a deep convolu- tional network for image super-resolution,","venue":null,"work_id":"1529469c-9289-445e-891f-96446212228a","year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.821678Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d294c87efe1a36162680b2a6e2aca89af0519c9dfbe462486f158bea6798c785","observation_id":"b5e7fc04-8d98-4eb1-bf07-68e3e6fd0d03","resolution":{"observed_at":"2026-08-07T15:08:04.378939Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.213455Z","title":"Accurate image super-resolution using very deep convolutional networks,","venue":null,"work_id":"080f0392-01d0-4bbb-9a8e-4b8eaa837bb1","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:55.901713Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d7a9ed209f4433f0d7cfa9267d2f1ec7dc3a99a7ed5f3ccb1161d1df7f9ec00d","observation_id":"c65b8bb6-d715-401e-a645-8859e20aa6ce","resolution":{"observed_at":"2026-08-07T15:08:04.243566Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.117374Z","title":"Photo-realistic single image super-resolution using a generative adversarial network,","venue":null,"work_id":"ffcc773e-1324-4ab7-8e7b-4416c7d80f33","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.038657Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:1e480ff877a9df713e520d7496a85233f063b4afc0303311b528a6c1d28ba0c1","observation_id":"dc784e51-adb6-42a5-a2b0-7db628cff473","resolution":{"observed_at":"2026-08-07T15:08:04.158436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:04.004678Z","title":"Esrgan: Enhanced super-resolution generative adversar- ial networks,","venue":null,"work_id":"536e0948-2d36-4c8d-bcc3-06050d285964","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.240194Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7fd1e77dca53d820195331db0cafcb1e485c7c35cf738a4793bcab13f51747b2","observation_id":"0b5e29e9-fb3c-48a8-a536-b3423ea67bec","resolution":{"observed_at":"2026-08-07T15:08:04.045357Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.885077Z","title":"Image super- resolution as a defense against adversarial attacks,","venue":null,"work_id":"a3650833-219f-4063-a483-4d13ac2ebabb","year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.388225Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6011321d36a604f853877275033f42e23ca25615d10218379f72d7efda4bd202","observation_id":"646e0551-02fc-4af1-89e6-e64277251a26","resolution":{"observed_at":"2026-08-07T15:08:03.923479Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.07460","last_updated":"2022-05-16T06:03:00Z","snapshot_observed_at":"2026-08-16T17:00:08.573357Z","submitted_at":"2022-05-16T06:03:00Z","title":"Diffusion Models for Adversarial Purification","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.07460","snapshot_observed_at":"2026-08-07T15:07:56.509341Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.509341Z"},"links":{"cited_paper":"/paper/2205.07460","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:00ff39afb830cb7634ec1c1b7f36dcd1188f500bf629bbda53b82a861ea0a00f","observation_id":"dbc64a64-c0f2-493f-be44-3ad245c44d6f","resolution":{"observed_at":"2026-08-07T15:07:56.509341Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.784335Z","title":"Analysis and comparison of various image downsampling and upsampling methods,","venue":null,"work_id":"3d552603-3f6e-4b1b-b352-ada064a0baa6","year":1998},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.633272Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d18dd747615b5ec262364f0c6d82f286abae101a7a9b144a397c44e00b8152ae","observation_id":"915f979e-feae-4295-b81e-dc537e266104","resolution":{"observed_at":"2026-08-07T15:08:03.822377Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:56.761909Z","title":"Image quality assessment: From error visibility to structural similarity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.761909Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:261b7280b031517dd3dc2dbdb55bcf02699d72ea34fceb0409e049d10a4dce9a","observation_id":"6b0551bb-a36f-4af8-b09d-b12c623a8995","resolution":{"observed_at":"2026-08-07T15:07:56.761909Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.515086Z","title":"Countering adver- sarial images using input transformations,","venue":null,"work_id":"ba8fdd5d-bafa-4492-9369-524b460f497e","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.838735Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:889e6c5ac5845eed647913e0bc173e1867e9660418cfcf6f33be668500283ebf","observation_id":"af14b3a5-91f8-4b78-b8d5-ddea8b0138fe","resolution":{"observed_at":"2026-08-07T15:08:03.619586Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:03.254780Z","title":"Real-esrgan: Training real- world blind super-resolution with pure synthetic data,","venue":null,"work_id":"ea14f033-cfcc-4285-a6a0-db4960f6e9e6","year":1905},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:56.960455Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:358f7e352af694dcc683f188b1f696d25dfcaeeb0603c71798e8446e59313716","observation_id":"3eb665bc-bbbb-46f4-afdd-f30a2aa3483d","resolution":{"observed_at":"2026-08-07T15:08:03.360722Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.976559Z","title":"Diffusion models for adversarial purification,","venue":null,"work_id":"f881344f-37bf-43e5-8bc1-ca51e1be852f","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.063661Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:8810fe67beae3a3f3e2f6a8e591832bfb0f58a0edb5b9cde1a1cad6136ea28f7","observation_id":"51bcd8e5-db21-4b19-8fbe-5820b125d8f3","resolution":{"observed_at":"2026-08-07T15:08:03.107266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.191479Z","title":"Efficientnet: Rethinking model scaling for con- volutional neural networks,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.191479Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fb80a6222e5e99f337b07f532808d136b0030cf0a41ce1c766ee8e78007afadf","observation_id":"f156f7c3-10d0-4333-afcd-623ac429a573","resolution":{"observed_at":"2026-08-07T15:07:57.191479Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.714481Z","title":"Identity mappings in deep residual networks,","venue":null,"work_id":"47a2ad0c-281d-4537-b418-5b900210b946","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.329154Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fd879ac3faf641f5d4cedf3417f09c719d0f3eae4d92e10f814510c33a64e7b0","observation_id":"fe4ac0a6-e560-498e-a72b-37f7231192d3","resolution":{"observed_at":"2026-08-07T15:08:02.801017Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.413156Z","title":"Pytorch: An imperative style, high-performance deep learning library,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.413156Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:c05546989e0fdefa02cbf09869103e600a4fd63e806f04d8e4b51a5745bbc7fa","observation_id":"0cb81e37-3f41-47d0-ad4f-0bd0b0583868","resolution":{"observed_at":"2026-08-07T15:07:57.413156Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.343001Z","title":"Ntire 2017 challenge on single image super-resolution: Dataset and study,","venue":null,"work_id":"fda8c053-ca58-406e-b13d-cc02f0a2453d","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.500326Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:a24764e8e02e8db668e1670549362068f1189e8d5f045eacfcf2e266cb6466d9","observation_id":"409a27b7-bb46-4272-b568-d62f0280716b","resolution":{"observed_at":"2026-08-07T15:08:02.496703Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:02.098756Z","title":"Ntire 2017 challenge on single image super-resolution: Methods and results,","venue":null,"work_id":"e75df9af-3e69-4611-b321-61ab45803363","year":2017},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.576176Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:43b5c48d2dc3b8a6f0025e04aa9bfe5f83f0a95ed2624b6a2df2c5aa0f002224","observation_id":"a5c8e13c-bb6d-4e43-9d2a-02ab1cb03e22","resolution":{"observed_at":"2026-08-07T15:08:02.248997Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.840860Z","title":"Recovering realistic texture in image super-resolution by deep spatial feature transform,","venue":null,"work_id":"fb1db055-417d-4568-96a5-24d687f33bbd","year":2018},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.688042Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:fbd30ac16df6e5ecb639af11ac6ba41b7ebcc96d664b493719cf01d7061defcc","observation_id":"6f0cc8c1-57ee-4d20-84ab-8da6be63bed0","resolution":{"observed_at":"2026-08-07T15:08:01.906592Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:57.802575Z","title":"Very deep convolutional networks for large-scale image recognition,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.802575Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4ec608b82ca3329956cd81223eaafd8d4b8b25a78d16b8ef01087b482383d507","observation_id":"13c10796-14ee-4f4d-99b3-957bd35aa9fa","resolution":{"observed_at":"2026-08-07T15:07:57.802575Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.650433Z","title":"Wide residual networks,","venue":null,"work_id":"d5b5b73e-2784-4aaf-9013-a2b73908eddb","year":2016},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.893928Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:afcc81b1e6c2f8829704b4351cc90623a7f1a1763eaa55845646949b45032158","observation_id":"e18c6ac1-bbbb-42d2-9b2c-b2aacaf6bd7f","resolution":{"observed_at":"2026-08-07T15:08:01.723795Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.483069Z","title":"Microsoft coco: Common objects in context,","venue":null,"work_id":"5958a8b5-1c6d-4d94-86ec-6b19915bba9d","year":2014},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:57.987401Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:2dc2fe7ae7bffbb872bce2ffa7a7454fdbdef24867adfa34a34628a7a337ed1b","observation_id":"7dcda8d5-b514-4e1e-9443-2ed432d9bd16","resolution":{"observed_at":"2026-08-07T15:08:01.575835Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.319411Z","title":"Faster r-cnn: Towards real-time object detection with region proposal networks,","venue":null,"work_id":"117040c8-bb09-4116-9a8b-31cd2f9bfb12","year":2015},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.085625Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:4ef9f77813b7ec9b0f27541fedf1b3a5cdc64df059747747b374820ce9c755be","observation_id":"7517dea0-5971-4b38-81a6-1d25bece28df","resolution":{"observed_at":"2026-08-07T15:08:01.389342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:01.151277Z","title":"Dpatch: An adversarial patch attack on object detectors,","venue":null,"work_id":"874fadb4-c4ec-4f55-b2db-ad2b53ee28d1","year":2022},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.200727Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:129f9e018925984a5e324763a1d59832ebdb2bef02413e9d40c25684e2b16360","observation_id":"6e20000d-4187-43ff-9d68-83808800c71c","resolution":{"observed_at":"2026-08-07T15:08:01.233041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.941946Z","title":"Adversarial robustness toolbox (art),","venue":null,"work_id":"13a3d01a-9ca5-44f3-95be-74007cb18ff9","year":2023},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.312900Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:7733946b14e38c325fa41485f4005029eb9e9e7bf4b06e79708b690a65efb6e2","observation_id":"62cd6e0f-b937-4aca-a698-ae42d1d9b9b7","resolution":{"observed_at":"2026-08-07T15:08:01.021577Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:58.443383Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.443383Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:520b82cc99f802f7e668c447ab4538c2af012a89e5a86fdb3e8a85135eb5d66e","observation_id":"89d28a0d-f985-41fc-a30e-556b930d3861","resolution":{"observed_at":"2026-08-07T15:07:58.443383Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2104.07636","last_updated":"2021-06-30T07:34:57Z","snapshot_observed_at":"2026-08-16T18:31:18.345286Z","submitted_at":"2021-04-15T17:50:42Z","title":"Image Super-Resolution via Iterative Refinement","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2104.07636","snapshot_observed_at":"2026-08-07T15:07:58.541705Z","title":"Image super-resolution via iterative refinement (sr3),","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.541705Z"},"links":{"cited_paper":"/paper/2104.07636","citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:88acf33afaea76b35e9c260d2f931ee2605ff126794203b4ed8f4597b45121d9","observation_id":"1bb68669-1bce-4c40-a86f-b61dd609a7e8","resolution":{"observed_at":"2026-08-07T15:07:58.541705Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.626954Z","title":"This underscoresSuperPure’splug-and-playcapability, as no task-specific retraining is required","venue":null,"work_id":"b0138521-e6ac-4e7d-b9b0-0361df9640f2","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.665084Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:c1a2f0e9e0983f19b8df3c9384766e413af74aaf868d0a16e34de0c87d102449","observation_id":"4f4fbda5-eaba-4982-8491-e9f6b5ff20c9","resolution":{"observed_at":"2026-08-07T15:08:00.759168Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.378971Z","title":"Clean detection accuracy of60%plunges to35%under DPatch, but SuperPurerestores it to58%, indicating robust generalization beyond classification tasks","venue":null,"work_id":"a86e1c3f-3abf-4ef4-953a-463dd9d205bd","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.785948Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6b0d98aff10f33ef62a28951094aa19f18d42411797f4c4fe85486357afacd32","observation_id":"a3264d57-5500-4da7-a044-d5c4af7a82d9","resolution":{"observed_at":"2026-08-07T15:08:00.482733Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:08:00.108996Z","title":"The total adversarial area thus becomes increasingly fragmented, posing a stronger challenge","venue":null,"work_id":"2946eed7-5262-47c9-b7e0-8e44f11fec57","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.876327Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:d48495c7f2317ef106c53fffc7d136fa68a6ba8e6a353b4df2a287c1a5673921","observation_id":"80c73725-01f0-4452-9364-77fd4676ca31","resolution":{"observed_at":"2026-08-07T15:08:00.242830Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.833733Z","title":"De- spite the attacker’s full knowledge ofSuperPure, our method 0 1 2 4 80 0.2 0.4 0.6 0.8 1 Number of Patches Robustness SuperPure+ PatchCleanser [14] Fig","venue":null,"work_id":"70b9c257-6092-4806-9dd7-2bcbeaea966a","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:58.979958Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:9370a5f51b9f6da3d5e515779ab5f5d3a7c78b328df1cdde35bba11a37cf5a2b","observation_id":"e0c1ad01-c312-4368-9f70-1a9be420fac3","resolution":{"observed_at":"2026-08-07T15:07:59.980412Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.608058Z","title":null,"venue":null,"work_id":"77b4c439-7284-4587-98f1-02aa4f2891b1","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:59.101436Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:93bcfb6734ec53dbc68789152305041c3a53445ce8346417530b220b97953fee","observation_id":"21b69f2e-813c-43d8-b68d-978c311ef8b5","resolution":{"observed_at":"2026-08-07T15:07:59.736835Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T15:07:59.425082Z","title":"Robustness Trade-off:Our tests show that while SR3 can improve image fidelity slightly, it issignifi- cantly slower","venue":null,"work_id":"9e94f882-6e3e-4957-82b9-6ff355b8cb1c","year":null},"citing_paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T15:07:59.202250Z"},"links":{"citing_paper":"/paper/2505.16318"},"observation_digest":"sha256:6dd3085faab518f6aaef43832782a413b4cc4fd69d96adb9fbcd0c8189034376","observation_id":"cfbf5add-dfc7-4519-9e1e-dfb74a5a5b3f","resolution":{"observed_at":"2026-08-07T15:07:59.510409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-16T06:30:59.297886+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.16318","last_updated":"2025-05-22T07:21:04Z","latest_version":1,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-16T10:55:11.833156Z","submitted_at":"2025-05-22T07:21:04Z","title":"SuperPure: Efficient Purification of Localized and Distributed Adversarial Patches via Super-Resolution GAN Models"},"reference_resolution":{"displayed":70,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":18,"verified_exact":0,"verified_fuzzy":52},"total_outbound_references":70},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-16T06:30:59.297886+00:00","source":"crossref"},{"observed_at":"2026-08-16T06:30:54.164669+00:00","source":"retraction_watch"}],"thesis":"As of 16 August 2026, this Paper Citation Record lists 70 of 70 outbound references and 0 inbound Pith citation observations for arXiv:2505.16318."}