{"as_of":"2026-08-17T08:23:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:fef115bf3ac7bcdfcc8bc14eacf35bad4ac75c27e114b9ed4546c4e09a57111f","coverage":[{"denominator":55,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":55,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T13:10:14.378269Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":2,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":2,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-15T16:27:56.828271Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"pith","source_observed_at":"2026-08-08T20:00:17.558848Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2505.22604","snapshot_observed_at":"2026-08-15T16:27:56.828271Z","title":null,"venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.05592","last_updated":"2025-09-06T04:36:41Z","snapshot_observed_at":"2026-08-16T06:19:14.858831Z","submitted_at":"2025-09-06T04:36:41Z","title":"MFFI: Multi-Dimensional Face Forgery Image Dataset for Real-World Scenarios","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-15T16:27:56.828271Z"},"links":{"cited_paper":"/paper/2505.22604","citing_paper":"/paper/2509.05592"},"observation_digest":"sha256:aeaf3f221626232d693b0bdfb57e2bb4ec7d101c2bd39f70ded665c65ad6c7e8","observation_id":"28c8cbf5-bd6c-40e4-bce6-d433c6ad9bdd","resolution":{"observed_at":"2026-08-15T16:27:56.828271Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"cited_work":{"arxiv_id":"2505.22604","doi":null,"metadata_source":"pith","pith_arxiv_id":"2505.22604","snapshot_observed_at":"2026-08-08T20:00:17.558848Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","venue":"cs.CV","work_id":"7d3f97a6-be21-4b75-b76d-5c9229df500a","year":2025},"citing_paper":{"arxiv_id":"2608.04314","last_updated":"2026-08-05T00:46:50Z","snapshot_observed_at":"2026-08-16T22:19:15.405042Z","submitted_at":"2026-08-05T00:46:50Z","title":"Adversarial Attacks for Good: A Survey of Proactive Protection across the Visual Content Lifecycle","version":1},"reference_index":179,"source":"pdf_text","source_observed_at":"2026-08-08T20:00:16.640220Z"},"links":{"cited_paper":"/paper/2505.22604","citing_paper":"/paper/2608.04314"},"observation_digest":"sha256:2dae45ffbebe37a3577b803ce55798ad516d99ab12959eb0a5c236abfeb7809a","observation_id":"4e853f2f-1cac-4f0c-a6c9-6ef0388a26de","resolution":{"observed_at":"2026-08-08T20:00:17.565652Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2505.22604/citation-record","integrity":"/paper/2505.22604/integrity","json":"/paper/2505.22604/citation-record.json","paper":"/paper/2505.22604"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:25.834817Z","title":"Cnn- generated images are surprisingly easy to spot","venue":null,"work_id":"3653b379-5cd4-45ab-b1ba-4a31cb3682f9","year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:05.787607Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:68e03bac1bc94cc3c9cfbe7e966a0e0f986b3d705812e02f0e6d260c35b89161","observation_id":"f50f0ae6-6c41-4045-a004-778c3138c565","resolution":{"observed_at":"2026-08-07T13:10:25.977184Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:05.950244Z","title":"Global texture enhancement for fake face detection in the wild","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:05.950244Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:5c36c100c8b56a685941a65562448b55fa7bc2f994cf2b919e52a796a1556743","observation_id":"94301217-db85-4511-8ea4-052174df6f1f","resolution":{"observed_at":"2026-08-07T13:10:05.950244Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:06.099259Z","title":"Detecting and simulating artifacts in gan fake images","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.099259Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:efbdd909e02f5328c3fa97f154730b4e4033522d2f186ba7d06ea5fd3efdd82f","observation_id":"674055ed-0cdd-45c0-b5b4-e2af58ade9ad","resolution":{"observed_at":"2026-08-07T13:10:06.099259Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:06.231473Z","title":"Leveraging frequency analysis for deep fake image recognition","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.231473Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:c177c3cad946ba4b107db6c066770c6c4cca995373dfe99a1df9bb7eff8e8d4f","observation_id":"f944b6bd-8bcb-4bd3-81a2-056cfff012e8","resolution":{"observed_at":"2026-08-07T13:10:06.231473Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:06.357281Z","title":"Diffusion noise feature: Accurate and fast generated image detection.arXiv preprint arXiv:2312.02625, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.357281Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:17c340ee6fff69414e53662237f10bc49abb31a733f2abf17b2f2d641b2226b8","observation_id":"25f1be97-4e10-490b-8267-9b3490a11da9","resolution":{"observed_at":"2026-08-07T13:10:06.357281Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:06.532443Z","title":"Aeroblade: Training-free detection of latent diffusion images using autoencoder reconstruction error","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.532443Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:837c8cf5d223800dbc1aa65154766c633c0a88937264afa5477494daf1207ce3","observation_id":"13791789-b4a9-44ce-aa08-d85b8acb783c","resolution":{"observed_at":"2026-08-07T13:10:06.532443Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:25.509515Z","title":"Learning on gradients: Generalized artifacts representation for gan-generated images detection","venue":null,"work_id":"638d6cba-0cf7-46bb-b16c-f0346bf59202","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.690242Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:fe7d474ad7a051dd0507ea582a5d6b3f84d32a6bc0124799dcffd78b8f355def","observation_id":"a4e9a240-457b-4fbb-a2a4-5664e6c51d6e","resolution":{"observed_at":"2026-08-07T13:10:25.663648Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:06.833318Z","title":"Rethink- ing the up-sampling operations in cnn-based generative network for generalizable deepfake detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.833318Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:33383d7d8a35ba4958a6e6cafd24dccc39a6fc0f94880ed3cdea99121df71234","observation_id":"4413698a-3d0e-4a8b-963a-15dedf9f6906","resolution":{"observed_at":"2026-08-07T13:10:06.833318Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:25.203467Z","title":"Detecting generated images by real images","venue":null,"work_id":"b0551f04-035b-4a52-9b17-7eb955a353b0","year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:06.990980Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:f13d0624fb5926fa3eeaab4f3a5f3a362b9423c1fb4b6f4c276d2054b7d0270d","observation_id":"798d8375-2900-4ab7-a96d-177800d04b4f","resolution":{"observed_at":"2026-08-07T13:10:25.357039Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.12397","last_updated":"2024-03-07T14:26:32Z","snapshot_observed_at":"2026-08-16T14:41:35.850097Z","submitted_at":"2023-11-21T07:12:40Z","title":"PatchCraft: Exploring Texture Patch for Efficient AI-generated Image Detection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.12397","snapshot_observed_at":"2026-08-07T13:10:07.143180Z","title":"Patchcraft: Exploring texture patch for efficient ai-generated image detection.arXiv preprint arXiv:2311.12397, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.143180Z"},"links":{"cited_paper":"/paper/2311.12397","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:4cca2f784a193ffaca417059f44635dd355d65ab3052b2e695336fb225461942","observation_id":"6f0eb1d8-5860-43a9-8502-f2ff1e8ba7ce","resolution":{"observed_at":"2026-08-07T13:10:07.143180Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:07.264614Z","title":"Vulnerabilities in ai-generated image detection: The challenge of adversarial attacks","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.264614Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:39abde090bd9d80590684912c40b7f6070ed1c23b3f9ded4e22d23ab38aef63c","observation_id":"7a4d905c-dbd8-496a-a87a-bb7099b88401","resolution":{"observed_at":"2026-08-07T13:10:07.264614Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:24.910826Z","title":"Exploring the adversarial robustness of clip for ai-generated image detection","venue":null,"work_id":"42b26d82-c273-4422-9a1a-7f7a2090ba78","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.402110Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:580a9c643aff2bf8e12015eb5d126b5a2a0ab80624246896974f1c69c0ecfde7","observation_id":"d14d9340-5c6a-412f-aea4-9ca4f0216b86","resolution":{"observed_at":"2026-08-07T13:10:25.081590Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2410.01574","last_updated":"2026-06-25T10:02:29Z","snapshot_observed_at":"2026-08-16T13:13:21.264287Z","submitted_at":"2024-10-02T14:11:29Z","title":"Adversarial Robustness of AI-Generated Image Detectors in the Real World","version":4},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.01574","snapshot_observed_at":"2026-08-07T13:10:07.574515Z","title":"Fake it until you break it: On the adversarial robustness of ai-generated image detectors.arXiv preprint arXiv:2410.01574, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.574515Z"},"links":{"cited_paper":"/paper/2410.01574","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:c3e0f51c19224b472489545693b3a34552d553de820d3975da59fd958aaf837d","observation_id":"903af63f-2550-47a9-a319-95c8d4784b5f","resolution":{"observed_at":"2026-08-07T13:10:07.574515Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2310.00076","last_updated":"2024-02-14T07:39:54Z","snapshot_observed_at":"2026-08-16T14:56:24.010301Z","submitted_at":"2023-09-29T18:30:29Z","title":"Robustness of AI-Image Detectors: Fundamental Limits and Practical Attacks","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2310.00076","snapshot_observed_at":"2026-08-07T13:10:07.745074Z","title":"Robustness of ai-image detectors: Fundamental limits and practical attacks.arXiv preprint arXiv:2310.00076, 2023","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.745074Z"},"links":{"cited_paper":"/paper/2310.00076","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:2d857f84074645194002c1e5a33fb1d5a32506e8a1216501337f7469715c4da1","observation_id":"e30d2622-3836-4bb3-a67e-dd65ce297fb4","resolution":{"observed_at":"2026-08-07T13:10:07.745074Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:24.668440Z","title":"Think twice before detecting gan-generated fake images from their spectral domain imprints","venue":null,"work_id":"81701991-d7bf-42a2-975a-7979c4de4450","year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.900594Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:9e72f5dcca3adc6d8aab8e4c4ad4e22f4331687d37b210c380415902a92860ba","observation_id":"1cf5d30d-44ba-4c48-a18a-689e586878f5","resolution":{"observed_at":"2026-08-07T13:10:24.777933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:24.422274Z","title":"Evading deepfake detectors via adversarial statistical consistency","venue":null,"work_id":"79113fe6-92dc-4946-95cd-4358b7ccac83","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:07.974962Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:73f3dde647b04c74063fda134b02ee7c15f14b6acdb061558e1565965aa5aed6","observation_id":"464dc641-44be-440e-b3da-2d836198ab56","resolution":{"observed_at":"2026-08-07T13:10:24.502482Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:24.094888Z","title":"Exploring frequency adversarial attacks for face forgery detection","venue":null,"work_id":"aa2e2704-3ba8-4327-b8f4-0d3298f32459","year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:08.166557Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:5c20bd7168142977c584200c14cb13bc78e0340a337f4f990b5fa350f7e3faaa","observation_id":"4337e481-ec46-46c9-887e-9996b2038695","resolution":{"observed_at":"2026-08-07T13:10:24.281070Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:23.675464Z","title":"Stealthd- iffusion: Towards evading diffusion forensic detection through diffusion model","venue":null,"work_id":"614007cc-e2a2-40f7-8332-62586a2f142b","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:08.339236Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:d31893b739b5358cb97baa77776525a6bda2bd0695acb27746953bf97276f3e4","observation_id":"ac12986d-d257-4320-bc4c-a8aa03986be9","resolution":{"observed_at":"2026-08-07T13:10:23.895426Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:23.266107Z","title":"Towards deep learning models resistant to adversarial attacks, 2019","venue":null,"work_id":"9bf30147-e39e-4eeb-88b9-ad2c25d8477a","year":2019},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:08.489035Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:e32a9b16ad5150e2a5bfe574c1d389a546e8bb60216b1a34765313d5e7b0a75f","observation_id":"87177b1f-e37f-4eb0-9e22-8bc6eb4f9736","resolution":{"observed_at":"2026-08-07T13:10:23.407605Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:22.951954Z","title":"Xing, Laurent El Ghaoui, and Michael I","venue":null,"work_id":"6621f53d-abad-4f8a-be2e-c0e163b478f8","year":2019},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:08.657078Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:a3f5d8b0d03c3d801af86af8a7e2dd4bee615dad2ad8fe1ba210964658b5d7b0","observation_id":"1746dacf-a297-40cb-91f4-b251896c166d","resolution":{"observed_at":"2026-08-07T13:10:23.088291Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:22.703143Z","title":"Pereira, and William Bialek","venue":null,"work_id":"8409f37e-1bad-4f3c-ab65-afa02a78fbde","year":2000},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:08.809648Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:9677b023fc4f82ede12ee4e5cf0e7b8702679754d2f671fb19bbfcec95141c62","observation_id":"ff7c89be-f9af-4a08-b7d0-21a9f1c9cf0e","resolution":{"observed_at":"2026-08-07T13:10:22.825975Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:22.549246Z","title":"Robustbench: a standardized adversarial robustness benchmark","venue":null,"work_id":"df078c6e-e539-4e69-9c12-cff4c5d542d6","year":2021},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.009150Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:1f543c89ac73acd29a220fb30b2c0dade6f2760c3d84709c2193017a92441d80","observation_id":"223d470a-5592-4ca0-8ef8-110f74be4bd8","resolution":{"observed_at":"2026-08-07T13:10:22.629773Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:22.302135Z","title":"Genimage: A million-scale benchmark for detecting ai-generated image.Advances in Neural Information Processing Systems, 36:77771–77782, 2023","venue":null,"work_id":"6031db6a-7ded-409c-9827-0733d9a620f8","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.165770Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:423eac47453c21f79fff5b7f967f1739e7ec91d41b13e4c458b192c01a84bc69","observation_id":"84d3ad8b-ae79-46a7-b248-5b255c3ad2e9","resolution":{"observed_at":"2026-08-07T13:10:22.422793Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:21.955694Z","title":"Towards universal fake image detectors that generalize across generative models, 2024","venue":null,"work_id":"daf92fbc-a6f2-4d3f-836f-0c7b7f4c2575","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.348111Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:fb305927559b76f48834ded54f7ac483c285dd001d959b170d8cd852a7c31eac","observation_id":"fa559cef-0d15-4c94-8a19-9815b278e12d","resolution":{"observed_at":"2026-08-07T13:10:22.118836Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:09.577782Z","title":"Emergence of invariance and disentanglement in deep representations.Journal of Machine Learning Research, 19(50):1–34, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.577782Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:5f52d1234fdf051e031b7d2524470dbf957617dd4f2b4190d643e3f9691c9e18","observation_id":"314f7015-0164-47fc-b02c-392281ba6a81","resolution":{"observed_at":"2026-08-07T13:10:09.577782Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:21.685236Z","title":"Information dropout: Learning optimal representations through noisy computation.IEEE transactions on pattern analysis and machine intelligence, 40(12):2897–2905, 2018","venue":null,"work_id":"1d99f739-75cd-4a18-8cee-497394896b16","year":2018},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.774342Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:8edfa9eebe071175b0e96b2d9577a5cd2d4c6d2ce3110e8419ccb80ab48d9bf3","observation_id":"6e2ac375-1aad-4693-b040-3b0f3417ae58","resolution":{"observed_at":"2026-08-07T13:10:21.806147Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:21.326815Z","title":null,"venue":null,"work_id":"bdf4c97c-c897-4cba-bc22-6a654663405f","year":2019},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:09.962461Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:979128e255ec914523fb73dceb2eaf704f4929ae1eb559005b9cd769cd5aed59","observation_id":"5cd9928e-1691-4331-aa2a-836cff809b39","resolution":{"observed_at":"2026-08-07T13:10:21.476111Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:21.026279Z","title":null,"venue":null,"work_id":"2ee706ba-621a-4856-89b8-58d22cb06f38","year":2013},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.095161Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:f82bb9b139b7ca9cd8af5142b2d417eb9b1c551041ed47749c051d4c2cc5e444","observation_id":"d99328bc-e583-4f85-9d6e-d29ecb703272","resolution":{"observed_at":"2026-08-07T13:10:21.141428Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:20.681088Z","title":"Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks, 2020","venue":null,"work_id":"ecac9985-d9d2-4d83-9b3e-b1faf2e06c45","year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.226363Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:8f2ca31d2fee1b747663ee00125471f4392ffdc24043b14101b888e2e6e6f48a","observation_id":"35ae5811-c3f3-42a7-a1cf-ac679765e91d","resolution":{"observed_at":"2026-08-07T13:10:20.845923Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:20.412388Z","title":"Pixle: a fast and effective black-box attack based on rearranging pixels","venue":null,"work_id":"b4a4711c-0a43-4de3-8da1-f3ede3a4c5e8","year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.367428Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:28c4b2e749107c564559851dd1cb3f35fabae668fc708fdffe245c5ba6cc6e0d","observation_id":"470a077f-eec5-4e77-8b79-11f492b79742","resolution":{"observed_at":"2026-08-07T13:10:20.540493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:20.091597Z","title":"Square attack: a query-efficient black-box adversarial attack via random search, 2020","venue":null,"work_id":"ea66d071-06f7-4eae-995a-bff5053f2e16","year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.441821Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:0c64baf094c51fb5dbdd9e7d5d8335ccde6b909297934a758f145a52b67fa179","observation_id":"770057a1-5819-47ee-a700-10bf50101294","resolution":{"observed_at":"2026-08-07T13:10:20.239069Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:19.756227Z","title":"On adaptive attacks to adversarial example defenses, 2020","venue":null,"work_id":"789d7daa-349a-46ef-b547-25bc7ea49616","year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.615051Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:7673038d9b8ef98dc1b5bc67df9a894f90b2bb43d6645500686f0b59bfb6fe48","observation_id":"45b4f8f8-f0ef-4ada-a4d9-002c2b97f8d7","resolution":{"observed_at":"2026-08-07T13:10:19.881090Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:10.776474Z","title":"Adversarial examples are not easily detected: Bypassing ten detection methods, 2017","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.776474Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:6f2f1914ddfe9061c260cf51dcda69e670bb269b363e13391b404be7ad330fb7","observation_id":"45dcfcd6-4027-410d-b92a-53d0b2234618","resolution":{"observed_at":"2026-08-07T13:10:10.776474Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:10.986550Z","title":"High-resolution image synthesis with latent diffusion models, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:10.986550Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:53d1be98462f91d6c53aff712b62d1204a95f1c7d0337a40fa9c7529228b0439","observation_id":"deed95b4-0b40-400e-8a59-6d8edde5a4cb","resolution":{"observed_at":"2026-08-07T13:10:10.986550Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:19.416438Z","title":"Lsun: Construction of a large-scale image dataset using deep learning with humans in the loop","venue":null,"work_id":"f8626caa-cf77-4ba0-af75-47750279d3b1","year":2015},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.150172Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:9ac15aa8c5cd273936983770ab60290c5b6a15b256466b4b49dcf5d6e47a2707","observation_id":"2714d8bf-667e-4fab-ba6b-0409586f2894","resolution":{"observed_at":"2026-08-07T13:10:19.568011Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:19.121007Z","title":"Progressive growing of gans for im- proved quality, stability, and variation","venue":null,"work_id":"9ab9804c-a40a-4b26-84d8-51bf8296c1e6","year":2018},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.348839Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:71628fe213175f5120cd6a82912336120b544475d4b551201c9bad55da235354","observation_id":"bd355a24-a57f-4897-85cd-78e4f5d18253","resolution":{"observed_at":"2026-08-07T13:10:19.247880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:11.501004Z","title":"Frequency-aware deepfake detection: Improving generalizability through frequency space learning, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.501004Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:ba79c6d1ec42354493ffb84cfc1502e7a695983f0ae659048bf47cf7336be000","observation_id":"341afacd-826d-40aa-9f96-47f6161cba6c","resolution":{"observed_at":"2026-08-07T13:10:11.501004Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:18.781032Z","title":"Towards evaluating the robustness of neural networks, 2017","venue":null,"work_id":"a536f80f-2d71-4a40-89c7-4bcfe3a82940","year":2017},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.665116Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:047617a5f320e8da5d01ab1bf79fff27f719145db35313dbdb75bf55c6bccfb9","observation_id":"cd78852e-e4bc-4f3d-849a-1888dfc4be9a","resolution":{"observed_at":"2026-08-07T13:10:18.930916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:18.471382Z","title":"Minimally distorted adversarial examples with a fast adaptive boundary attack, 2020","venue":null,"work_id":"07e9168a-c4d9-4e31-a34b-7601f2571b00","year":2020},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.797039Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:7650b25c32897054fc556d2d3ee49c297edfd8b140dbae2ecb8fb1b3ce07b4f8","observation_id":"c5f53db8-6aae-4fcd-9e47-f6601e433bdb","resolution":{"observed_at":"2026-08-07T13:10:18.612409Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:11.949869Z","title":"Learning transferable visual models from natural language supervision, 2021","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:11.949869Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:d00577b0fba8470101c643642685dbd28d9d74bd3c46496bb1d19a930e6eed0c","observation_id":"9115cb62-8c2d-40da-bb84-21d72c34127f","resolution":{"observed_at":"2026-08-07T13:10:11.949869Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:18.103227Z","title":"Randomized adversarial training via taylor expansion, 2023","venue":null,"work_id":"d9d1e887-8a58-4990-8b37-31510808391e","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:12.138840Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:e504564408be913a3b7581436ef17c9e5fd93f0beac50da66c7ad58609f57df5","observation_id":"929fed8f-ec08-4cc5-bf38-b6b438fca8d9","resolution":{"observed_at":"2026-08-07T13:10:18.256682Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:17.807427Z","title":"Feature squeezing: Detecting adversarial examples in deep neural networks","venue":null,"work_id":"26582972-05f9-4be6-8fdc-dcd5002fecb9","year":2018},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:12.329687Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:be321a17fa41d12fc65c1229bca345acf7c374d3366a1de3251d0718b2629138","observation_id":"a7f74d66-e6f3-4f50-b13d-92eed0b21f02","resolution":{"observed_at":"2026-08-07T13:10:17.917539Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:12.492086Z","title":"Diffusion models for adversarial purification, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:12.492086Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:6fba15e1f54377648c673f6623c51782cfe79fe175b6d33287bd627a818910f5","observation_id":"14ffbe0f-389e-453e-aded-f1b896a030b6","resolution":{"observed_at":"2026-08-07T13:10:12.492086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:17.531961Z","title":"Robust overfitting does matter: Test-time adversarial purification with fgsm","venue":null,"work_id":"64c8c199-81c7-4677-b773-67612fbb1999","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:12.620082Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:9dcb678db7826528269a7c5653af783eaa02ab2842fd1bea86e8a337f523837e","observation_id":"75de3bd9-fd4e-400a-9c0e-4b100d8bebaa","resolution":{"observed_at":"2026-08-07T13:10:17.652342Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:17.171776Z","title":"Robust clip: Unsupervised adversarial fine-tuning of vision embeddings for robust large vision-language models, 2024","venue":null,"work_id":"4537a310-4bc0-4494-9f3e-fd28b2116194","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:12.806709Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:b7f44efd3649bac0d128c552d0583180569aa08c6b9061819f0e2f7c44b705b3","observation_id":"81948614-33c2-41a7-b2dd-2a1174c64d8c","resolution":{"observed_at":"2026-08-07T13:10:17.303160Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:16.812249Z","title":"Forgery-aware adaptive transformer for generalizable synthetic image detection, 2023","venue":null,"work_id":"cdb698db-102d-4130-9e5b-b04052bf284f","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.018251Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:f66d8e666a6c38493b63b586c4a03f9352ef7a03a4109a838aceadb810209c5e","observation_id":"5489af7c-a26a-4eab-a24e-81f396818277","resolution":{"observed_at":"2026-08-07T13:10:16.962824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:13.221953Z","title":"Forgery-aware adaptive transformer for generalizable synthetic image detection","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.221953Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:c608f7e44a7343b58b37a4683c363ca803708a6fba67f90cebdefa9c3fbbf0a8","observation_id":"f7c6a5b7-6571-4b47-8ac7-6b1f83e9b178","resolution":{"observed_at":"2026-08-07T13:10:13.221953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:16.450339Z","title":"Univer- sal adversarial perturbations","venue":null,"work_id":"fba6f7f1-249f-4c53-a43c-0a19a7698d0c","year":2017},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.373431Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:126160172be6e6a5ecd8661573b79508e880abc940ec60220311f58984e50b30","observation_id":"5f3fc9c5-3689-49de-8bb5-2fe3c6d5263b","resolution":{"observed_at":"2026-08-07T13:10:16.642233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:16.184982Z","title":"Adversarial example detection using latent neighborhood graph","venue":null,"work_id":"b00aedf0-2707-4dde-8c34-d0ee3715ccbd","year":2021},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.492253Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:2f23e4c63d7867438428826fb7d5ec64bb9a16e5df57ad7adbd8cee32adec5d7","observation_id":"51ff02df-8c70-4675-848c-4b543b0c9a09","resolution":{"observed_at":"2026-08-07T13:10:16.313281Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1801.02613","last_updated":"2018-03-14T07:24:10Z","snapshot_observed_at":"2026-08-14T19:56:59.076369Z","submitted_at":"2018-01-08T18:54:40Z","title":"Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionality","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1801.02613","snapshot_observed_at":"2026-08-07T13:10:13.621948Z","title":"Characterizing adversarial subspaces using local intrinsic dimensionality.arXiv preprint arXiv:1801.02613, 2018","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.621948Z"},"links":{"cited_paper":"/paper/1801.02613","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:13d9db6299a6568da0a51580a6c1e934df10cc92c31bd21061788ff812650942","observation_id":"fb6a9ded-3626-4f10-a132-6d70972ea20e","resolution":{"observed_at":"2026-08-07T13:10:13.621948Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:15.798917Z","title":"Detecting adversarial examples via reconstruction-based semantic inconsistency","venue":null,"work_id":"b26c7605-fd9f-4788-b045-1b8a50c120e3","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.775128Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:d962d3b330887cb5ffe298eefd83a9a2a77b5ee03d9c9d48ed4216be6678ad3b","observation_id":"00694277-5a5f-4366-9357-484b8414126f","resolution":{"observed_at":"2026-08-07T13:10:15.974933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:15.530217Z","title":"The devil’s advocate: Shattering the illusion of unexploitable data using diffusion models","venue":null,"work_id":"9744d673-7501-49a3-bee0-09c7e17c0b06","year":2024},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:13.932430Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:81e24fd2201f63e5368d0d929e087640a06466ae5964f1b6354ab3c398a48afe","observation_id":"32ce206e-c471-4388-80ea-4a41f65dad3e","resolution":{"observed_at":"2026-08-07T13:10:15.689397Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2301.13862","last_updated":"2023-05-19T05:36:30Z","snapshot_observed_at":"2026-08-16T15:58:44.578550Z","submitted_at":"2023-01-31T18:56:41Z","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","version":2},"cited_work":{"arxiv_id":"2301.13862","doi":null,"metadata_source":"pith","pith_arxiv_id":"2301.13862","snapshot_observed_at":"2026-08-07T13:10:14.589679Z","title":"Salient Conditional Diffusion for Defending Against Backdoor Attacks","venue":"cs.LG","work_id":"67928618-f246-4cac-8c8b-13d232ab6af6","year":2023},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:14.075220Z"},"links":{"cited_paper":"/paper/2301.13862","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:100de39246e228299182e9e97442edfef1eafa4b0714ec03081e4a06120aa84e","observation_id":"6c8633f0-b8ed-4b16-92b0-28f7d6af5643","resolution":{"observed_at":"2026-08-07T13:10:14.688522Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2205.14969","last_updated":"2022-06-29T02:42:05Z","snapshot_observed_at":"2026-08-16T16:56:43.538585Z","submitted_at":"2022-05-30T10:11:15Z","title":"Guided Diffusion Model for Adversarial Purification","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2205.14969","snapshot_observed_at":"2026-08-07T13:10:14.244190Z","title":"Guided diffusion model for adversarial purification.arXiv preprint arXiv:2205.14969, 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:14.244190Z"},"links":{"cited_paper":"/paper/2205.14969","citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:09643f6ef869ee95360b286ee1dfdd799a291724244fbf5c836fde072af9f6c7","observation_id":"5841c4ea-9b28-4a02-bd9b-0792b1dd6ffb","resolution":{"observed_at":"2026-08-07T13:10:14.244190Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T13:10:15.139975Z","title":"Improving adversarial robustness via mutual information estimation, 2022","venue":null,"work_id":"12abc8f5-65fe-42d0-abd6-1aacb154e2e2","year":2022},"citing_paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T13:10:14.378269Z"},"links":{"citing_paper":"/paper/2505.22604"},"observation_digest":"sha256:24483241eb83e86f8ce8f94902765b57c91765756ba0f7ee64f3441354e694db","observation_id":"9465f26b-9c68-4e34-bd20-c32a88222d6a","resolution":{"observed_at":"2026-08-07T13:10:15.313829Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2505.22604","last_updated":"2025-05-30T10:57:06Z","latest_version":2,"primary_category":"cs.CV","snapshot_observed_at":"2026-08-15T10:15:08.212965Z","submitted_at":"2025-05-28T17:20:49Z","title":"Adversarially Robust AI-Generated Image Detection for Free: An Information Theoretic Perspective"},"reference_resolution":{"displayed":55,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":21,"verified_exact":1,"verified_fuzzy":33},"total_outbound_references":55},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 55 of 55 outbound references and 2 inbound Pith citation observations for arXiv:2505.22604."}