{"as_of":"2026-08-10T11:54:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:f1fcb42859864ef81b998f435c25f33e3d647a092e2131f94e677feaa3518c87","coverage":[{"denominator":77,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":77,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:13:02.411975Z","state":"measured"},{"denominator":77,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":77,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2505.22486/citation-record","integrity":"/paper/2505.22486/integrity","json":"/paper/2505.22486/citation-record.json","paper":"/paper/2505.22486"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:16.788355Z","title":"Intriguing properties of neural networks,","venue":null,"work_id":"2da4ef3f-8a41-441d-97fc-c75819a050b8","year":2014},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:54.889256Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:277009883edd6244777257c8a1c986b5950f0499547e10129a520e574133275a","observation_id":"3daa1341-76a6-4fe0-8efa-e2b666690419","resolution":{"observed_at":"2026-08-07T13:13:16.898439Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:16.565124Z","title":"Explaining and harnessing adversarial examples,","venue":null,"work_id":"b420afa0-9560-4c2b-9e90-dc726bcb1cd0","year":2015},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:54.955197Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6210ac24200621f5dabaae09a9d39b3c051ca19f08e79f890dc7efc23324b217","observation_id":"575eff68-ad8c-443c-97bb-41bee41399e2","resolution":{"observed_at":"2026-08-07T13:13:16.698856Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:12:55.078223Z","title":"Towards deep learning models resistant to adversarial attacks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.078223Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6cc1191b96883ba08781a6d95b01217d23740789c833032cb62e720b07743d47","observation_id":"289c0cc1-1926-44ad-bb02-f49f4834860f","resolution":{"observed_at":"2026-08-07T13:12:55.078223Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:16.332658Z","title":"Theoretically principled trade-off between robustness and accuracy,","venue":null,"work_id":"fa5328c2-7852-444a-b74f-9ddb7678a419","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.231883Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:ca5077669fcf468e0c21548881dcd529bbc411e1512643e6511f00694cf784d5","observation_id":"f5c531fb-9be5-4bb8-96f5-aa6a8d392145","resolution":{"observed_at":"2026-08-07T13:13:16.460146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:16.133443Z","title":"Adversarial training for free!","venue":null,"work_id":"301a0678-0c94-4083-9de2-ec065f0c26fe","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.394017Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:8f5fed3a8de8358604b7dcc7c3714a95e62902c5685156d0645fe207e064ff8e","observation_id":"8dd67d73-c669-4a70-b2c3-82ae4b63d0ce","resolution":{"observed_at":"2026-08-07T13:13:16.219738Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:15.874952Z","title":"Fast is better than free: Revisiting adversarial training,","venue":null,"work_id":"a319cf7c-9ed9-4fb4-a5c6-ee26473673c0","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.545875Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:35e86e51faff5f19f32263b62e25e7008e8ad648df83f44371b31bd5cbf5c7c3","observation_id":"4c62b045-c62b-495a-a5cd-aee97c8f778d","resolution":{"observed_at":"2026-08-07T13:13:16.016483Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:15.658270Z","title":"Improving adversarial robustness requires revisiting misclassified examples,","venue":null,"work_id":"a7e3b659-e9d2-4ac7-bed4-cfbe3dbd06bb","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.650640Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0118dd85b8a570a86b91879fff95f2efe7c2d95d46de035f94110acc7a037bc0","observation_id":"9d225a32-e52c-45f1-ad9d-5a341a7a890d","resolution":{"observed_at":"2026-08-07T13:13:15.791959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:15.442131Z","title":"Towards efficient and effective adversarial training,","venue":null,"work_id":"8df58bbd-e9b7-4d5c-88fc-9d8ab3672aa6","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.773679Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0b0c381f1ca5076fedf3eb485a519d82707c9ada8e51b2786ab6c1e74176dd9e","observation_id":"3acf2d8a-5b9e-4567-9ead-2a64f4f9ec30","resolution":{"observed_at":"2026-08-07T13:13:15.579134Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:15.222023Z","title":"Guided adversarial attack for evaluating and enhancing adversarial defenses,","venue":null,"work_id":"6d63c671-b17e-49d2-86ed-94be289b05be","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:55.911042Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:cefe16c67e6b9ad76b062e49585e24291535811b90caabf521350cad9cf267ab","observation_id":"4644f834-29c3-48f6-9e80-b56ef1a3a69c","resolution":{"observed_at":"2026-08-07T13:13:15.309458Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:15.006516Z","title":"Unlabeled data improves adversarial robustness,","venue":null,"work_id":"0157ba9c-5d75-4ab8-9b69-c2148ec0c41d","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.021136Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6b35d7b95652d8bd7fbe2fb83766b2f2337650450ea95241b92cd720d2de7bbf","observation_id":"b7ea4964-8bf4-4a0a-92c7-716c2877e959","resolution":{"observed_at":"2026-08-07T13:13:15.127189Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:14.781547Z","title":"Improving robustness using generated data,","venue":null,"work_id":"51687b5c-38f0-4cb2-a207-7418284c2499","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.142611Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:37ccac7143e769525989cce4a078b9ab9bb246291acb2de1ad745969f842ff1c","observation_id":"6d231bfe-6cd5-4d2a-8d07-4bb15cc4c303","resolution":{"observed_at":"2026-08-07T13:13:14.902012Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:14.563550Z","title":"Better diffusion models further improve adversarial training,","venue":null,"work_id":"10feb75a-0ed3-41fd-83e0-8eead16aca15","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.298658Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:1c43937b650b4f82d308e2b1ba7dc84c71b379f791bda0b28301e9908dd1d6c4","observation_id":"965980e8-288f-4b19-8e99-ea0cb7e2022a","resolution":{"observed_at":"2026-08-07T13:13:14.679269Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:14.232996Z","title":"Probabilistic margins for instance reweighting in adversarial training,","venue":null,"work_id":"ffd749db-7f0a-4590-8217-50c7fd8d6141","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.390259Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:1627a4cf5aaf71ebaa6907f44c857321f3bd69ea60d63ce4986e6e494c41ba7c","observation_id":"3e35785c-b550-49b3-a167-5a894cf71e75","resolution":{"observed_at":"2026-08-07T13:13:14.414264Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:13.914643Z","title":"Overfitting in adversarially robust deep learning,","venue":null,"work_id":"15af1167-d184-4409-9eaf-c5e4131bb609","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.478081Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d1ed6fee727a0091cafad0bf9d05135b63ec267ec9e8b7c3448759b0b733a178","observation_id":"829ff276-75e3-449f-9e83-a151a7fed270","resolution":{"observed_at":"2026-08-07T13:13:14.049169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:13.624876Z","title":"Shedding more light on robust classifiers under the lens of energy- based models,","venue":null,"work_id":"68a6d36a-67c4-463b-aa41-cc6fe97e5674","year":2024},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.587584Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6d55cbf2a1d171a2e6f6cc0602cf990e78e64bb048be67b89a8cc1e2b64da276","observation_id":"4d5899ce-6005-411f-b1d8-37c7421ba604","resolution":{"observed_at":"2026-08-07T13:13:13.786698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:13.350714Z","title":"Understanding catastrophic overfitting in single-step adversarial training,","venue":null,"work_id":"e0baf382-e999-448a-97d1-39faeb034ae2","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.708272Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0909e824c340df38498708aa9562645beb60a1f2d044497384815d2b77cfa379","observation_id":"c6209312-ac54-4049-97b4-747bf35ce257","resolution":{"observed_at":"2026-08-07T13:13:13.471296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:13.116626Z","title":"Robustbench: a standardized adversarial robustness benchmark,","venue":null,"work_id":"76cfa2b4-6dde-482f-aca3-f36f899eab51","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.790871Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:f9dcc71e048813a3de45c4ac1049f9a3b81d0456c6aaba87fc96017488921efe","observation_id":"99827548-b776-4556-894e-db01d987bf72","resolution":{"observed_at":"2026-08-07T13:13:13.238576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:12.783643Z","title":"Robust principles: Architectural design principles for adversarially robust CNNs,","venue":null,"work_id":"a0a48cbc-a70f-4952-bec9-c2c1fd0e5f88","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.881019Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:453ae79d3faaa01ca14d0f3c5d6f8cf6dcc925e5b1d02f076f2ad84ce380810d","observation_id":"412921ce-0679-4b06-b3c0-327aa74319d4","resolution":{"observed_at":"2026-08-07T13:13:12.967858Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:12.424044Z","title":"Adversarial weight perturbation helps robust generalization,","venue":null,"work_id":"fa06e4b8-f3a6-4f60-9bd8-7b156e30fe28","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:56.988438Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:7e79cf47ed7743d19d40798beef0319fc041938383ac7fe0e475a8ea664f7266","observation_id":"951d45e5-64ab-492d-87a5-03d286d07bd8","resolution":{"observed_at":"2026-08-07T13:13:12.590286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:12.111432Z","title":"Towards understanding the generative capability of adversarially robust classifiers,","venue":null,"work_id":"4a47ebfb-c734-4e5f-a737-1dac034fc99a","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.114402Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:605e53726c71206d82c47cb94cdc11612c7070a36ebfe1758b7766e99a3e5c09","observation_id":"e26de8b8-836b-42b0-982a-43de417b4992","resolution":{"observed_at":"2026-08-07T13:13:12.269904Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:11.863867Z","title":"Your classifier is secretly an energy based model and you should treat it like one,","venue":null,"work_id":"5df780b3-8d6e-4635-aaad-1a2358cdd430","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.256012Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:87139bf077b3df8bb2a5c0be0561edd3d512f6bb4c0420f5d983b3e2dee568b0","observation_id":"e2d7bf46-7cc0-4b33-a6e6-6346d9762a46","resolution":{"observed_at":"2026-08-07T13:13:11.984573Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:11.640520Z","title":"Exploring the connection between robust and generative models,","venue":null,"work_id":"3a51c68b-f6eb-4a21-ba9e-32c5fc93e328","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.361288Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d0efda6d16356454d14821c3a0b8e6e353a603551f246df64db41e96aadf30d9","observation_id":"60218606-f761-4548-961c-901edfe2f03d","resolution":{"observed_at":"2026-08-07T13:13:11.726242Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:12:57.502317Z","title":"Towards evaluating the robustness of neural networks,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.502317Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:9a444d776f78aece0377af9e4e60c11652889560ca9fc509db7cb0dbecfef6a9","observation_id":"6a0e3bad-1807-4593-bf0f-41b341a90dee","resolution":{"observed_at":"2026-08-07T13:12:57.502317Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:12:57.629828Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.629828Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d1ac0535ed6d01646a5bb8b298bf0bd01aab6a8e07f2414991d229bad8a72a85","observation_id":"72dcc6ad-8547-408a-a9c2-1af44e4809ab","resolution":{"observed_at":"2026-08-07T13:12:57.629828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:11.394777Z","title":"Diffusion-based adversarial sample generation for improved stealthiness and controllability,","venue":null,"work_id":"a2e06e1c-265e-42c0-95c0-d1215de42712","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.787913Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:f202aaf93f14c0318a2469f51e99b7418a96b471f7231a78cf3ccd3b69042c24","observation_id":"b14208c6-d970-4dd9-99bc-eee238087208","resolution":{"observed_at":"2026-08-07T13:13:11.510203Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.06373","last_updated":"2018-03-16T19:03:45Z","snapshot_observed_at":"2026-07-06T06:28:44.644165Z","submitted_at":"2018-03-16T19:03:45Z","title":"Adversarial Logit Pairing","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.06373","snapshot_observed_at":"2026-08-07T13:12:57.863828Z","title":"Adversarial logit pairing,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.863828Z"},"links":{"cited_paper":"/paper/1803.06373","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:ca5bffa5824290412c3f77de09b4d90c6bf9e50cf68fea55e494f0454b099b76","observation_id":"ed4902c9-d270-4172-954d-1f1d08ee2160","resolution":{"observed_at":"2026-08-07T13:12:57.863828Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:11.072344Z","title":"Eliminating catastrophic overfitting via abnormal adversarial examples regularization,","venue":null,"work_id":"0465e4ae-5316-4ee8-b476-e63a7ba46b6a","year":2024},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:57.962795Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:e123b2c18a949449d9002c88208d321ca02c0b62138759a49a6a63189c37a471","observation_id":"bfb73959-80ea-49f5-a598-9685c9f8d293","resolution":{"observed_at":"2026-08-07T13:13:11.258453Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:10.823016Z","title":"On adversarial training without perturbing all examples,","venue":null,"work_id":"a2d106d3-d373-488c-9b78-17df81c9d0da","year":2024},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.038432Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:fc38ce38eccd4d724c69feb02ca76f5a6f7e6976da31390ecbcbd4cb5cae2171","observation_id":"b1be3814-4cfe-498e-b83e-5b5b47414740","resolution":{"observed_at":"2026-08-07T13:13:10.954297Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:10.565793Z","title":"On the over-memorization during natural, robust and catastrophic overfitting,","venue":null,"work_id":"ede4990f-8b88-44d8-b1df-ca5a4a29a4fd","year":2024},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.093602Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:a8961498c448035d9605e160f7d13f53db3f47dea6e27b2ec888bd64147fcc6a","observation_id":"bfaa7bdb-ecfc-471f-b46a-6ee2e394e008","resolution":{"observed_at":"2026-08-07T13:13:10.696753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:10.302194Z","title":"Square attack: a query-efficient black-box adversarial attack via random search,","venue":null,"work_id":"1ad07e07-7c9f-4e7a-bd67-d59e911fb547","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.216400Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:04c569709f02b96cdb5c42dba3296d2d4a47b8cbfd0b41c4ec4d449f27a8e1cc","observation_id":"0c8fa87a-50d3-4484-8a14-d16497a0c0d1","resolution":{"observed_at":"2026-08-07T13:13:10.425179Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2305.13948","last_updated":"2024-10-27T08:32:11Z","snapshot_observed_at":"2026-08-10T04:32:31.633232Z","submitted_at":"2023-05-23T11:17:45Z","title":"Decoupled Kullback-Leibler Divergence Loss","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2305.13948","snapshot_observed_at":"2026-08-07T13:12:58.304197Z","title":"Decou- pled kullback-leibler divergence loss,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.304197Z"},"links":{"cited_paper":"/paper/2305.13948","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:1dc283ade291c3f5448bbd907f0ab0a38d17c47b82004945f12e85a2294c5ff2","observation_id":"dac37fe8-b8a6-4c8b-ac4b-15a6c40c3163","resolution":{"observed_at":"2026-08-07T13:12:58.304197Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:09.925924Z","title":"Ensemble adversarial training: Attacks and defenses,","venue":null,"work_id":"774c47b0-ed13-4a05-8431-bb32c07d0c99","year":2018},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.380389Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:168e1e4d8069273a13b4d62cdb5555c13a018a3f167919d2dd7edbaa45b805f1","observation_id":"e866b9ba-b3fb-4c7d-852e-215453f0a06e","resolution":{"observed_at":"2026-08-07T13:13:10.062470Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:09.656752Z","title":"Single-step adversarial training with dropout scheduling,","venue":null,"work_id":"18f4863a-ed34-4f0b-b74c-2c33ab9bd7ed","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.486692Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:171b8a2e117b78eabfaf18f254ee51dd1c1b4dff44348e10be8280fec64192db","observation_id":"0bc130ad-c6a9-41f1-b17f-5bd13100b750","resolution":{"observed_at":"2026-08-07T13:13:09.792398Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:09.340792Z","title":"Make some noise: Reliable and efficient single-step adversarial training,","venue":null,"work_id":"b770a184-125a-4af2-9614-780028e74445","year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.600999Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:629e2fb9afa250fe8add6e92cf7ab21302de7b4073decdcabf8ae01724e5f533","observation_id":"e248ae70-0226-4ddf-a26e-b13ef1a83b52","resolution":{"observed_at":"2026-08-07T13:13:09.519475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:09.075916Z","title":"Reliably fast adversarial training via latent adversarial perturbation,","venue":null,"work_id":"83a719d4-d783-4dae-84f3-1987820b78b3","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.710490Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0ad8751cbac9701b4c7475583e9d845d4f752a8206424cb4e4f6efeb8e5d03da","observation_id":"6f98ffbd-4f4e-4efa-9caf-83400634bfc8","resolution":{"observed_at":"2026-08-07T13:13:09.204188Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:08.810764Z","title":"Zerograd: Costless conscious remedies for catastrophic overfitting in the fgsm adversarial training,","venue":null,"work_id":"e719b639-8b6d-44d7-a5cb-12649e024751","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.777380Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:b0e89e759bd6de38972900507a8351a34b83cb819414f296318e44d050525d81","observation_id":"fdd432a1-1306-4182-bce8-d1d266f31bd2","resolution":{"observed_at":"2026-08-07T13:13:08.939792Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:08.563932Z","title":"Understanding and improving fast adversarial training,","venue":null,"work_id":"7c534ba1-f266-4289-8654-73dee60e7937","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:58.906417Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:350dd2a5a55218b44b1dd41e7b3134d385891dfece0ea24c72f4c5c5db89f2da","observation_id":"0fb15b3e-ac9a-4cc5-9211-ce8398a43d42","resolution":{"observed_at":"2026-08-07T13:13:08.669194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:08.429017Z","title":"Subspace adversarial training,","venue":null,"work_id":"5032ca51-c464-4af8-ac38-fdb53ba948d0","year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.006545Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:7cde8037f6aa03de432824ef4bb3391d77d1f327143e6b4e99835c9d93ab9abf","observation_id":"124cb047-a8e3-4156-af27-67e85c6144fa","resolution":{"observed_at":"2026-08-07T13:13:08.496282Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:08.286559Z","title":"Fast adversarial training with adaptive step size,","venue":null,"work_id":"56e393f3-8457-49d2-9697-c61479b76c2f","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.085856Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:81596043dc33760e48ce910c231b0c692b3af66a3787b426ee1374236d015c1b","observation_id":"bd1fea41-ba9e-4e75-866a-c4781329fc8e","resolution":{"observed_at":"2026-08-07T13:13:08.357499Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:08.079107Z","title":"Adver- sarially robust generalization requires more data,","venue":null,"work_id":"c4f84cd6-947f-461b-b3e1-56cc915661ac","year":2018},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.183849Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:a56f7d9e2054aa62111fab78f84d14d0febfc8a2e8c4aa8f81fb650753b2c13e","observation_id":"113d1ea3-273f-44d6-ac1d-2a65740f0c1b","resolution":{"observed_at":"2026-08-07T13:13:08.217177Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.957750Z","title":"Are labels required for improving adversarial robustness?","venue":null,"work_id":"f7321d8c-1052-435b-931a-4a5e9b18bb13","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.279241Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:5eb0caa349b27b88412ee8fcb401e37edeb651b2f10a00b4ea4b2928ee920c68","observation_id":"4b481688-23fa-4347-9aa2-88faf51f4041","resolution":{"observed_at":"2026-08-07T13:13:08.001454Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1906.00555","last_updated":"2019-09-26T01:44:46Z","snapshot_observed_at":"2026-07-06T07:57:23.973409Z","submitted_at":"2019-06-03T03:56:41Z","title":"Adversarially Robust Generalization Just Requires More Unlabeled Data","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1906.00555","snapshot_observed_at":"2026-08-07T13:12:59.355379Z","title":"Adversarially robust generalization just requires more unlabeled data,","venue":null,"work_id":null,"year":1906},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.355379Z"},"links":{"cited_paper":"/paper/1906.00555","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:9cd98b7239ec830be0d2d8ae27ee14cd8ead7b296378176a6e1e5c29bba1783c","observation_id":"c7ece742-dbc1-4ffb-896e-423c6a1d4d79","resolution":{"observed_at":"2026-08-07T13:12:59.355379Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:12:59.474651Z","title":"Denoising diffusion probabilistic models,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.474651Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6265a8e0b145e768fb4b23e3f29452889b1973b0c8d21d5f6ba59a70b9d62462","observation_id":"30a4b299-e2f6-42bb-8f8f-5f5bb1174ae9","resolution":{"observed_at":"2026-08-07T13:12:59.474651Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.945512Z","title":"Exploring memorization in adversarial training,","venue":null,"work_id":"c4b16116-d967-447f-be99-51d82c1c9d21","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.553489Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:e55add7fa82c4e593ca3a948bb8d7800653555e8e3e2166ca52524625be63ce1","observation_id":"a15e0164-c52c-43f8-91b5-3313ba31e5d3","resolution":{"observed_at":"2026-08-07T13:13:07.948569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.756198Z","title":"Enhancing adversarial training via reweighting optimization trajectory,","venue":null,"work_id":"d5f6f6c6-071d-4c45-a493-1e77c21b95dd","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.617659Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:47c232fc20fd55d71920e368ed5ab83b5ff8fcaaf67499d428706b547ba6969b","observation_id":"aa82b3b7-6a95-446c-a95c-e335ba2a3837","resolution":{"observed_at":"2026-08-07T13:13:07.859581Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2202.09844","last_updated":"2022-02-27T07:42:30Z","snapshot_observed_at":"2026-08-09T00:29:35.236312Z","submitted_at":"2022-02-20T15:52:08Z","title":"Sparsity Winning Twice: Better Robust Generalization from More Efficient Training","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2202.09844","snapshot_observed_at":"2026-08-07T13:12:59.672324Z","title":"Sparsity winning twice: Better robust generaliztion from more efficient training,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.672324Z"},"links":{"cited_paper":"/paper/2202.09844","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0e3872bf0615801275e18be14feb7f7676554ea78af0276acdfed83f92383a9b","observation_id":"8ce0a46a-f246-49b5-8b15-3ab9c510bcb5","resolution":{"observed_at":"2026-08-07T13:12:59.672324Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.549406Z","title":"Relating adversarially robust generalization to flat minima,","venue":null,"work_id":"abb0d736-be23-42a2-ab8e-7e85ad883624","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.738598Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:6953d88998a08ca41eb83fb85103d3ec35bd34d07e8786678d1292564e748e16","observation_id":"74f326ab-cbd0-43d0-857e-3d8afde765f8","resolution":{"observed_at":"2026-08-07T13:13:07.656530Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.320379Z","title":"Low curvature activations reduce overfitting in adversarial training,","venue":null,"work_id":"8881ea0f-d0de-4006-b988-ddc6dfa1e887","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.817351Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d0121c6c494384d02b95207a1c764a7a7145d8914f4cab0d70c7fa05eb704c99","observation_id":"3ccdfd84-cba8-4c6f-973f-f722abaa5546","resolution":{"observed_at":"2026-08-07T13:13:07.449253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:07.014967Z","title":"Robust overfitting may be mitigated by properly learned smoothening,","venue":null,"work_id":"4d46eac6-a5a6-4af4-8b16-cc27c33f1ba4","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T13:12:59.908858Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:551b0ad6cb1359e768a6bc0a73aa326542229e4ab459c44838b52260fda6cb15","observation_id":"b9e4f7f6-59d9-49da-9cf3-45e858dcbee5","resolution":{"observed_at":"2026-08-07T13:13:07.177038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:06.752034Z","title":"Adversarial robustness through the lens of causality,","venue":null,"work_id":"88f056b0-fce0-4453-9959-179447efa2e6","year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.012758Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d0d9f503506b398624471f709f395acb0d3d7cd4555d35e975d8277992075b52","observation_id":"bdd7c572-e147-4396-954c-98cfc86cabb8","resolution":{"observed_at":"2026-08-07T13:13:06.897365Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:06.572128Z","title":"Understanding robust overfitting of adversarial training and beyond,","venue":null,"work_id":"da390877-04c9-4c0b-aa6a-595002122d2a","year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.093363Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:0d632fae0d8c15a94bf99ad1bfba96b499beb2e40c3220427bee747b7f67373a","observation_id":"5e94165f-4856-4274-b736-2d68e146d783","resolution":{"observed_at":"2026-08-07T13:13:06.643160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:06.389588Z","title":"Jem++: Improved techniques for training jem,","venue":null,"work_id":"11108db1-a5ee-445f-bc64-da1ffa131efa","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.161578Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:583f22ba1dfa3a35e1bba62548f378b0f2a68f262ff271c5e6c5bb76fab7060d","observation_id":"ce625ceb-4b40-4b4f-8d6e-d9d16fdae200","resolution":{"observed_at":"2026-08-07T13:13:06.484127Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:06.156545Z","title":"Sharpness-aware minimization for efficiently improving generalization,","venue":null,"work_id":"f6439eb3-c2b9-4c74-9280-9ad5b67973cf","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.223723Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:34b6e6241a3f316b7a86fc20d054057dc071a4dc62ef74e729b09b6269a315ad","observation_id":"2b4e48af-f395-4764-ac75-8ab02ea28211","resolution":{"observed_at":"2026-08-07T13:13:06.312041Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.950452Z","title":"A unified contrastive energy- based model for understanding the generative ability of adversarial training,","venue":null,"work_id":"6266922e-fc03-4c26-bc2f-e70cc3323e57","year":2022},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.311281Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:883b642e2b59038541b41d8608cd630cec3d2f05d24ed07b92113b0ecf6c0349","observation_id":"889c1e7a-1aed-4e46-873d-cd95ac63ddf8","resolution":{"observed_at":"2026-08-07T13:13:06.040436Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.822809Z","title":"Towards bridging the performance gaps of joint energy-based models,","venue":null,"work_id":"5f2936de-9b5f-43b2-9eb2-705471bd8e63","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.415153Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:c7adceb8973ccd4b2ad88b7fb2e33bf870a8f1ebff3b4fc2385877238eaeacdd","observation_id":"4bdb9030-b2e2-4710-843b-abc0e6c6a13f","resolution":{"observed_at":"2026-08-07T13:13:05.872021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.698926Z","title":"M-ebm: Towards understanding the manifolds of energy-based models,","venue":null,"work_id":"ac8a1421-b123-49c1-95b2-3dd5f353dcd0","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.512632Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:95b07f1abf257998bae34514c817e296d778d6ab31af3dc8f3870595c21637bf","observation_id":"719aa396-7645-4929-9bf6-2b5fbf10b9ed","resolution":{"observed_at":"2026-08-07T13:13:05.755245Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2106.06927","last_updated":"2022-10-21T17:59:55Z","snapshot_observed_at":"2026-07-06T11:18:44.145746Z","submitted_at":"2021-06-13T05:51:00Z","title":"Inverting Adversarially Robust Networks for Image Synthesis","version":5},"cited_work":{"arxiv_id":"2106.06927","doi":null,"metadata_source":"pith","pith_arxiv_id":"2106.06927","snapshot_observed_at":"2026-08-07T13:13:02.773798Z","title":"Inverting Adversarially Robust Networks for Image Synthesis","venue":"cs.CV","work_id":"476a347c-c69c-43e5-b37e-6e2d3f614b69","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.580715Z"},"links":{"cited_paper":"/paper/2106.06927","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:003e835342cc4e5d7fe658ca8130def35e3fe396aa362280d742bf844f711588","observation_id":"b4d90ab8-cc2f-4d2a-b9fd-75fecf2ec325","resolution":{"observed_at":"2026-08-07T13:13:02.879218Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.520381Z","title":"MAGIC: Mask-guided image synthesis by inverting a quasi-robust classifier,","venue":null,"work_id":"cc6bb09d-65f2-40c6-8478-c45295431641","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.678402Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:1c598b11e0f2d458f3ed0a0161cd841d97f5dfc6cb8eec1112b645d568259ecc","observation_id":"af46d98a-33cc-4e6a-830b-583d9bab7405","resolution":{"observed_at":"2026-08-07T13:13:05.619350Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.322798Z","title":"Effective single-step adversarial training with energy-based models,","venue":null,"work_id":"6763aa61-cb56-4f5d-98b6-5336588c045b","year":2024},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.752435Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:37da25d121627ac6a71c25c1799816f3e102aa70bda34a581737113b730f0f62","observation_id":"322ec248-6ff7-4b0f-8923-291059f0703b","resolution":{"observed_at":"2026-08-07T13:13:05.427053Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:05.136679Z","title":"Geometry-aware instance-reweighted adversarial training,","venue":null,"work_id":"ee672b28-b350-413c-8bd9-59a61620c597","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.844589Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:23690ca82f0d2f0bef07481c18f28351a5c35311e1a1118c4784adad2d5ff14c","observation_id":"767a039d-8571-4d85-acc9-1068b96f2a33","resolution":{"observed_at":"2026-08-07T13:13:05.232405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2103.01914","last_updated":"2021-03-05T13:04:35Z","snapshot_observed_at":"2026-08-09T17:03:38.936837Z","submitted_at":"2021-03-02T18:15:42Z","title":"Evaluating the Robustness of Geometry-Aware Instance-Reweighted Adversarial Training","version":2},"cited_work":{"arxiv_id":"2103.01914","doi":null,"metadata_source":"pith","pith_arxiv_id":"2103.01914","snapshot_observed_at":"2026-08-07T13:13:02.533835Z","title":"Evaluating the Robustness of Geometry-Aware Instance-Reweighted Adversarial Training","venue":"cs.LG","work_id":"0cf03fe4-bcfd-4b60-978e-7019d6ee40d8","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:00.930617Z"},"links":{"cited_paper":"/paper/2103.01914","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:bcfb8687d1c6066936be64f0311c1bd3e0049a815a9c866a371bee57ef2d09e3","observation_id":"41a057b5-d254-4099-b731-3461a6e22089","resolution":{"observed_at":"2026-08-07T13:13:02.639233Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.874256Z","title":"Entropy weighted adversarial training,","venue":null,"work_id":"5e4fd2bf-9f65-4eaf-932f-a0fd46ff8be7","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.035151Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d2af0b3b1e42c4e0b9ab2ad04f429ee56d3f436fe23fb2b0abf9ccf343282f96","observation_id":"eb2ee494-0d44-47da-95ca-252242ccc880","resolution":{"observed_at":"2026-08-07T13:13:05.009419Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.690261Z","title":"Memorization weights for instance reweighting in adversarial training,","venue":null,"work_id":"aaec8724-512a-48c1-8d8e-2b733352244a","year":2023},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.118223Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:e7f9e6539560d6193bb9493f1b34fffed947f9824a0bde51b563d336211d305a","observation_id":"1189317d-a055-475f-b691-f5cfafd2c587","resolution":{"observed_at":"2026-08-07T13:13:04.787059Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.500719Z","title":"A tutorial on energy-based learning,","venue":null,"work_id":"da869ff9-2ca0-4535-9ddc-9afe85e61d8b","year":2006},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.232411Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:199ba345d348aa391f852f296493a0a35676351c590b379e2f9e270a25360774","observation_id":"e9ce07d8-cb7f-47d8-bb85-83d8ee262c63","resolution":{"observed_at":"2026-08-07T13:13:04.575435Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.358944Z","title":"Generative modeling by estimating gradients of the data distribution,","venue":null,"work_id":"739bee42-2b2b-4884-b059-684a7c8110c7","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.308222Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:a776828412bff7d96a4429bbbe0312c065e31f005c786f3d3188bee657819c2b","observation_id":"3436c544-cede-4f1b-898a-cbdcd73bce69","resolution":{"observed_at":"2026-08-07T13:13:04.428961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:01.354256Z","title":"Diffusion models beat gans on image synthesis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.354256Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:f7bde816bb5ae719994a8728a786b8dbbcf41a4134ce365236b4885f24d925ea","observation_id":"0de7f175-416b-4555-b065-d266c844ebf6","resolution":{"observed_at":"2026-08-07T13:13:01.354256Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.202675Z","title":"Attacks which do not kill training make adversarial learning stronger,","venue":null,"work_id":"d3266ff2-6087-4d1d-b9d9-20ca5bd61485","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.451104Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:d943c08a9e6485a72aacd8329ac4c51e25a08966ae192c15414021d0973acdeb","observation_id":"2a1864bf-7903-4c6b-b78c-9f8bc8fb2ae6","resolution":{"observed_at":"2026-08-07T13:13:04.264883Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:04.053186Z","title":"Mma training: Direct input space margin maximization through adversarial training,","venue":null,"work_id":"02a2ab9b-3364-4657-a35d-366f36b371c2","year":2020},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.561699Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:50bb1302c0266014d2c3728223108b66c5e9743d718b82c30b97a9e016e42a11","observation_id":"831a71f1-e537-45f5-b9f0-3448329bfe00","resolution":{"observed_at":"2026-08-07T13:13:04.100110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:01.657710Z","title":"Image quality assess- ment: From error visibility to structural similarity,","venue":null,"work_id":null,"year":2004},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.657710Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:75c6460bcda0c9741ec281144bd59e334770747c432cbf1d13a9ca33bb5f8edf","observation_id":"16e87bc9-8b7c-4299-abe2-eb592437c6e9","resolution":{"observed_at":"2026-08-07T13:13:01.657710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:01.760123Z","title":"Improved techniques for training gans,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.760123Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:7fdb2ca3945568059cf4d0a05560c0a501a706ad56b752b56556c9f730cd49c8","observation_id":"d4165823-f335-4db1-ae97-095c5c612511","resolution":{"observed_at":"2026-08-07T13:13:01.760123Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:03.824935Z","title":"Gans trained by a two time-scale update rule converge to a local nash equilibrium,","venue":null,"work_id":"99aeb8d1-5013-461b-a291-59a3d361a7c5","year":2017},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.822836Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:093c0f79eb94182c358b8ff47db3de171286448e15b86cad2981838fa9cb6a30","observation_id":"c0864371-e77e-4991-8cae-01e698fc0684","resolution":{"observed_at":"2026-08-07T13:13:03.930878Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:03.657858Z","title":"Learning multiple layers of features from tiny images,","venue":null,"work_id":"5813953a-db1c-477c-81ef-15e187cee8ad","year":2009},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:01.939701Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:8d48acc6b3acafc493954b23da646e6cc7f323ffaec5bfd42e1de15d881f91fd","observation_id":"c694b63b-88e8-49fa-adbf-6e6d2bb1d3a2","resolution":{"observed_at":"2026-08-07T13:13:03.743157Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:03.507567Z","title":"Reading digits in natural images with unsupervised feature learning,","venue":null,"work_id":"37ea433f-1f57-427a-b40e-2ecfb3792bef","year":2011},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:02.040506Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:c9d37321ae1a43f237c49ff82a127c4aa5632ea9d04e3049de67b7da18e0d18c","observation_id":"2563dbb0-9857-4499-9ff9-1ad999610590","resolution":{"observed_at":"2026-08-07T13:13:03.576933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:03.339156Z","title":"Imagenet: A large-scale hierarchical image database,","venue":null,"work_id":"e5335077-19fa-42de-b8a1-566740ce0bab","year":2009},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:02.144640Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:a54c3e232fbcfc0ca6e8609d8cc40255915c9270bd242735084789fc7459ce0b","observation_id":"c0841b46-25fe-407d-812d-59a54e72fb51","resolution":{"observed_at":"2026-08-07T13:13:03.390052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1803.05407","last_updated":"2019-02-25T14:18:11Z","snapshot_observed_at":"2026-07-31T19:09:21.589864Z","submitted_at":"2018-03-14T17:09:27Z","title":"Averaging Weights Leads to Wider Optima and Better Generalization","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1803.05407","snapshot_observed_at":"2026-08-07T13:13:02.224237Z","title":"Averaging weights leads to wider optima and better generalization,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:02.224237Z"},"links":{"cited_paper":"/paper/1803.05407","citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:ae43988067d480c1269ece94c5fb9f8261ea6ff5d637d0c34c4976a9a9c0cb91","observation_id":"14f12785-9ec6-4575-abfc-89ba73b746c5","resolution":{"observed_at":"2026-08-07T13:13:02.224237Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:03.147985Z","title":"Learning energy-based models by diffusion recovery likelihood,","venue":null,"work_id":"ef3e9406-8115-4a70-82de-1daf9113a2bc","year":2021},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:02.317664Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:25865d1427a2285910214c59e6a9048651685c53dd6d33b81c4ff2c528ff87eb","observation_id":"5f22cb8f-8676-40b3-b2cb-3a2e4f7d30d6","resolution":{"observed_at":"2026-08-07T13:13:03.217551Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:13:02.995854Z","title":"Image synthesis with a single (robust) classifier,","venue":null,"work_id":"ad272766-4673-4ada-87cc-475c79aba4f5","year":2019},"citing_paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T13:13:02.411975Z"},"links":{"citing_paper":"/paper/2505.22486"},"observation_digest":"sha256:f07a1fce1870ed62e9a0dba926b74a247a3e2b9b12d31bbd0efdd67f8a901a4d","observation_id":"d8b2339d-663e-49b3-90e2-2e0c4211a1e9","resolution":{"observed_at":"2026-08-07T13:13:03.059743Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.22486","last_updated":"2025-05-28T15:36:02Z","latest_version":1,"primary_category":"cs.LG","snapshot_observed_at":"2026-08-09T00:29:57.255518Z","submitted_at":"2025-05-28T15:36:02Z","title":"Understanding Adversarial Training with Energy-based Models"},"reference_resolution":{"displayed":77,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":2,"verified_fuzzy":63},"total_outbound_references":77},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 77 of 77 outbound references and 0 inbound Pith citation observations for arXiv:2505.22486."}