Pith. sign in

Paper Citation Record · LEDGER

Position: Certified Robustness Does Not (Yet) Imply Model Security

As of 20 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 0 inbound Pith citation observations for arXiv:2506.13024.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.13024 v2

Coverage vector

measured 99 of 99 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:44:07.593011Z

measured 99 of 99 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-20T06:33:59.587034+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

99 of 99 outbound references displayed

  • verified exact4
  • verified fuzzy61
  • unresolved34
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 32002f84-9ce4-4666-a08f-ed98c5aaee6e · outbound

This paper cites Cullen, and Tansu Alpcan.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Tansu Alpcan

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.341285Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.341285Z digest=sha256:69c4fbe2bc873d622ad478f22d5269b3fddf1e2cae99ed1c2c32ab12a39feb93

Observation 9e5ba5bc-00f2-4b18-bcb7-249cb781e569 · outbound

This paper cites Politics of Adversarial Machine Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Politics of Adversarial Machine Learning

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.882415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:54.430300Z digest=sha256:1183b0a818df3db151545c099f645404075ac598e055a4a737b2e5239778e231

Observation 683b8811-063b-44ec-a697-aa479e73079f · outbound

This paper cites Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.555880Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.555880Z digest=sha256:7082db1496c3e3511c847a594a42607240666b5f30e1453069c703d5dfd5366e

Observation c09017f0-d971-4c58-82fc-9a049bd4e5b7 · outbound

This paper cites Differential Privacy on Finite Computers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differential Privacy on Finite Computers

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.678649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.678649Z digest=sha256:3044ac9a554ea8db95f91d93ff0f8f4b38f34bc1d525340774600a40ea056f54

Observation 657f7e27-c9dd-40eb-ac87-80f2a1dffb8b · outbound

This paper cites Evasion A ttacks A gainst M achine L earning at T est T ime.

Position: Certified Robustness Does Not (Yet) Imply Model Security Evasion A ttacks A gainst M achine L earning at T est T ime

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.782967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.782967Z digest=sha256:e44c2c2c2f220ebdbf6024c9cc8ad8e80a4859890d751984402bec2e9424dada

Observation b189dd80-5ad6-4fd1-85fb-97f93a9c2fe7 · outbound

This paper cites The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.903149Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.903149Z digest=sha256:95bb0e71170f03cbbd7bafbc5a17b69ae9fe1fb5772cf035856d5656b1cf86ed

Observation 26d07490-a690-4588-b8db-3f03f092c063 · outbound

This paper cites Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.039116Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.039116Z digest=sha256:69ed4322596439148ae564564122b81559c631048ce254c66efd350e09433d96

Observation ba2f1c9e-cacc-42cd-8cb2-d085de4b08c9 · outbound

This paper cites MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.155104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.155104Z digest=sha256:3e95e9cfd1b698b0fb07924b0cfb3a28da96215cd7321faf5c7f0e9fb4f52359

Observation 080decf2-33d9-46a7-b167-bb9cfba7fc7f · outbound

This paper cites Towards E valuating the R obustness of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating the R obustness of N eural N etworks

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.253314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.253314Z digest=sha256:fa1caadd891993a0dfe8a8d18cf60752e5fb20dcdceb25bf3f5ae9aea7e6e8d7

Observation ade5bd82-9233-4e61-85ef-6a967a184596 · outbound

This paper cites Implicit D iversity in I mage S ummarization.

Position: Certified Robustness Does Not (Yet) Imply Model Security Implicit D iversity in I mage S ummarization

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.411174Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.411174Z digest=sha256:f5e50e4baed7e8251e6a38d6e3a22e926d893bf3af51b2b6ae7105cf016dd67f

Observation d873f767-ba36-4d54-b789-aeb823e50085 · outbound

This paper cites Adversarial Attacks and Defences: A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial Attacks and Defences: A Survey

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.527362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.527362Z digest=sha256:2e04fd978b4252212969161f1e046862bf33f683d89f0ae806462f3f5c0bbe89

Observation dc823b87-a689-4606-a278-7db46527cc84 · outbound

This paper cites Certified D efenses for A dversarial P atches.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified D efenses for A dversarial P atches

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.648179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.648179Z digest=sha256:1f678a792fa0627b73727d080b4fe6c6d1faecc8935368160548d88842fb0f0d

Observation 77b19635-da9e-4b39-8dcc-5acaec0ff64e · outbound

This paper cites Certified A dversarial R obustness via R andomized S moothing.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness via R andomized S moothing

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.772984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.772984Z digest=sha256:b5f2804a6b7e3146303586054641d85d6b4d99b42d6e3fa35c82f55c01c8f2e0

Observation 15005d78-7cbb-4cde-81d9-c14823ae6e27 · outbound

This paper cites Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.915185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.915185Z digest=sha256:5a651439d6308bf71b582b8b22c5596f40f1e83fc21c6502c752fde8e8ac9760

Observation 438c87bf-c921-4d19-8d46-ef550e3b8609 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.018826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.018826Z digest=sha256:b5a62e0ec360f2e3753c845973e96393edb1dabb540f61cdf950b982aa6556ee

Observation 9aa1f3bc-120c-46f0-9564-65da0102129d · outbound

This paper cites Cullen, Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Benjamin I.P

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.145911Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.145911Z digest=sha256:e79aefcc9229413c580dbab5ee00d4e64430d3420cd9c8bf5829ff54ab25a0aa

Observation 07f0b557-9537-4a2a-8e4e-52aef8e6937b · outbound

This paper cites Cullen, Tansu Alpcan, and Alexander Kalloniatis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Tansu Alpcan, and Alexander Kalloniatis

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.255287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.255287Z digest=sha256:9a8640bd46f63836f9e98eebb2ea2b3b9db5c783afdfb13ee09b5cfbc846cee4

Observation f8733539-525f-4eea-abc5-55b8b59449a9 · outbound

This paper cites Cullen, Shijie Liu, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Shijie Liu, Paul Montague, Sarah M

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.378053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.378053Z digest=sha256:26fd88ad9b8f5c34fc00a4f8daa6322618f54ef46577f91a6c44d553704abb30

Observation 940c3ac5-9419-4e85-a8aa-6d0676d057e9 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.473475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.473475Z digest=sha256:bd8b374a9829a38cafbbbaf214d57f177b74d80f28ede053eb79480866dab34a

Observation 03ed78b4-ca6a-4337-81b5-589da24f918e · outbound

This paper cites Imagenet: A L arge-scale H ierarchical I mage D atabase.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet: A L arge-scale H ierarchical I mage D atabase

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.571392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.571392Z digest=sha256:5ede192f75aaafaa27e30933bbf7d7f771721df1759f5863e15ea682da32b6d3

Observation a899ed4a-1797-414a-91e6-53a366cccf6c · outbound

This paper cites Privacy A udits for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy A udits for D ifferential P rivacy

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.701497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.701497Z digest=sha256:87ef2abab790043ec65e042152920008d35818db368a1ff3203bb09f560ee632

Observation 1d4160d8-59e6-4577-b428-b3410c990b18 · outbound

This paper cites Towards learning with limited labels: Equivariance, Invariance, and Beyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards learning with limited labels: Equivariance, Invariance, and Beyond

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.864630Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.864630Z digest=sha256:7e674ae17d922d739a077c085091743692b9dd9c09095677bf6337c9eed77cc2

Observation ada41f51-3bd3-41f9-87e1-f1173e130281 · outbound

This paper cites A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences.

Position: Certified Robustness Does Not (Yet) Imply Model Security A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.015651Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.015651Z digest=sha256:3dfc0336e8c6339c1e154b83f042e64d19b83bf81829fdb02b96fda1bd2b04d0

Observation 5a787b67-478c-476c-994f-f46c434e2680 · outbound

This paper cites Calibrating N oise to S ensitivity in P rivate D ata A nalysis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Calibrating N oise to S ensitivity in P rivate D ata A nalysis

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.178267Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.178267Z digest=sha256:779d44618b1fd7ab4e4527aae30689d9e190f16c8adcf05a81b4d0f32447bdb1

Observation 1ab3122b-fba0-4161-beab-537787a12836 · outbound

This paper cites Adversarial A ttacks on M edical M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial A ttacks on M edical M achine L earning

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.878343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.293178Z digest=sha256:c583a9f64e00f022f67e2474b6560de6cd5b77ea76072aa13fdac3bcc8d6d62b

Observation 905191b3-561c-427c-b17f-1cf1f63aa089 · outbound

This paper cites A P rogramming F ramework for O pen D P.

Position: Certified Robustness Does Not (Yet) Imply Model Security A P rogramming F ramework for O pen D P

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.570054Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.463244Z digest=sha256:c78aecfebf8ded0960e8c5fe59f5b794f4adc74c953c7ab0e83b1bae1858ed22

Observation 86c9c3eb-3112-4dd5-9df6-85110bbca59c · outbound

This paper cites Motivating the Rules of the Game for Adversarial Example Research.

Position: Certified Robustness Does Not (Yet) Imply Model Security Motivating the Rules of the Game for Adversarial Example Research

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.561699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.561699Z digest=sha256:10978e40afc77e3c9e9697a9760b98f8d2daa720a34937b5ea9074e6ab86796a

Observation c5af38d7-a1fd-4bce-876c-78b0a11e4be3 · outbound

This paper cites Explaining and H arnessing A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Explaining and H arnessing A dversarial E xamples

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.275199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.679535Z digest=sha256:2a55f418b416bf4b2d5561fb60f55904937cfe05acbaf911234d3b42bab84b69

Observation 55b0bee6-a653-4237-9866-c21c3b5e8a6c · outbound

This paper cites On S imultaneous C onfidence I ntervals for M ultinomial P roportions.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S imultaneous C onfidence I ntervals for M ultinomial P roportions

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.086787Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.805514Z digest=sha256:217f28aca8f3980ae092a5173081dd5f6f41b2b1f163ad47b6900448119a7d36

Observation 0a928acd-14e6-4b62-a6c0-92840f709a07 · outbound

This paper cites Scalable C ertified R obustness via I nterval B ound P ropagation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Scalable C ertified R obustness via I nterval B ound P ropagation

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.940883Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.934361Z digest=sha256:4d266fa3500b0c23541f6046df1ec561135a3429f556f9b91fd0c7d78bec2e00

Observation 8d9fce40-f1c9-4ab0-9d80-41a4641a6afa · outbound

This paper cites Reducing Certified Regression to Certified Classification for General Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reducing Certified Regression to Certified Classification for General Poisoning Attacks

Reference 31

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.535861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.047094Z digest=sha256:f97e7a5252ea5a965be8747772f38632236266097ad2e8d65852dd9c9a4c51dd

Observation 99a9f5f9-1f0e-447a-9519-0ac7c905e325 · outbound

This paper cites Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.757223Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.134365Z digest=sha256:6530844e965d3bc6231a5e42a08ac4d1a0ea29ca018d0a72271c6aa2879a037a

Observation c4e4e963-cc15-47f8-b338-930f19683b33 · outbound

This paper cites Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.490180Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.234518Z digest=sha256:0f13d6dad5a60dea18246a3119d32ae4dda61876eda6314e0b5087e0d469492a

Observation 03c57011-ecc9-427c-aecb-f38a4bd780e7 · outbound

This paper cites Joseph, Blaine Nelson, Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Joseph, Blaine Nelson, Benjamin I

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.265942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.342190Z digest=sha256:b7bd0bf1bf07202a56bbe5d5503346020b70fa2d61744b103015fb07f176871b

Observation 08517b48-08d4-417b-be16-caa1536a9744 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:22.994302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.463279Z digest=sha256:7cc095829bc6b370f2bab27825f8b8e510683c648a7c3913d054168fe1dd9803

Observation 696c13a3-f03a-42a0-98bf-3cd68921f942 · outbound

This paper cites The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:58.581546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:58.581546Z digest=sha256:6fb9826e95e6357ffa421a7a91ec4bbb2c72a2ee17313eeccbb3b24d40ede6c7

Observation fd002fbc-b17a-4165-b89f-78856e5faff2 · outbound

This paper cites International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022.

Position: Certified Robustness Does Not (Yet) Imply Model Security International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.738506Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.682798Z digest=sha256:bc3aba6d4ef43a739224ac4f8b46b03cac2ee98ba7b68b6315cb8c723466cbe9

Observation 3be9c7fa-1e2e-4dd9-b2dd-42d78eb10f6f · outbound

This paper cites Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems.

Position: Certified Robustness Does Not (Yet) Imply Model Security Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.480582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.772998Z digest=sha256:b411ebdfb59e91528ccb98698074d2d49b1c617e3d1eae80b0e58647e9be6d37

Observation 73ca5b6f-919a-452f-b207-da2d89202dce · outbound

This paper cites Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget.

Position: Certified Robustness Does Not (Yet) Imply Model Security Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.200654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.900522Z digest=sha256:11f7298cab620e30c2ffe2e3eeb34952ab554e9efaf82401e2d166111316bda6

Observation 8be3eb88-0dff-4916-bb04-9fca7b46e545 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 40

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:21.944206Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.047125Z digest=sha256:e008adeba1523461c751de13919c7f9a8d3cd8204b4597d97e83d61a7329d981

Observation 8027c612-0eca-4263-aef7-ccdc115bee58 · outbound

This paper cites Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.635192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.232185Z digest=sha256:a04e74fc399fcdb9dbe6aa06f17d600648f364663ab4ac70e16e4d75ab69cb67

Observation 42ef0d07-8c90-4967-8528-600551668ec3 · outbound

This paper cites Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.377984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.332867Z digest=sha256:784066568d432ba53aeb253ad120d04c423a84a1e16ec0719996077d98fcf8d1

Observation 9d63fcb4-7dd6-4961-a602-eac41817378b · outbound

This paper cites Certification of Speaker Recognition Models to Additive Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certification of Speaker Recognition Models to Additive Perturbations

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.413830Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.413830Z digest=sha256:8dc3d50104f47bf58288b7e9b7e40fd12c06f93f89faef5471422434d737a756

Observation ba0f7a72-8ca9-4ab3-b9d7-722ba9581d67 · outbound

This paper cites Learning M ultiple L ayers of F eatures from T iny I mages.

Position: Certified Robustness Does Not (Yet) Imply Model Security Learning M ultiple L ayers of F eatures from T iny I mages

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.068196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.538332Z digest=sha256:a18c1628b22190ca19f308095574dfbc4e4dffc349c5a06d2040ee85ac3b6d23

Observation 9928a483-7b77-454b-85ff-9a4754464ac4 · outbound

This paper cites Regularization for Deep Learning: A Taxonomy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Regularization for Deep Learning: A Taxonomy

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.642817Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.642817Z digest=sha256:52f7adb2085c09f12c06886d90ccd0bc795d10f93cfb678b363abbc17311295e

Observation 9c70a4ec-6903-4cf1-aa33-692992aa8038 · outbound

This paper cites Policy Smoothing for Provably Robust Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Policy Smoothing for Provably Robust Reinforcement Learning

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.795601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.795601Z digest=sha256:a7ceac59703bd02308ee11053f567f0867c229b6043b6ebec2eb04062883b787

Observation 6d06ed91-d523-4165-a057-ea816cafe2c4 · outbound

This paper cites Adversarial M achine L earning- I ndustry P erspectives.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial M achine L earning- I ndustry P erspectives

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.873872Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.926782Z digest=sha256:418d9df97a8f99726ae66da90a85b5de4f6f3a96e6cf97e0cd25ce0ea4b0c7ec

Observation f201aa00-22bb-4e4d-820d-303d9ce71602 · outbound

This paper cites Adversarial machine learning at scale.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial machine learning at scale

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.565732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.083113Z digest=sha256:af615fc1c0b0e685a0680e33e78eb9246c97a8ef6dce4bc3cf79a0c844560be2

Observation 8e443a2a-273c-4d40-862c-27d9651a5fb8 · outbound

This paper cites Gradient- B ased L earning A pplied to D ocument R ecognition.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gradient- B ased L earning A pplied to D ocument R ecognition

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.345931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.197396Z digest=sha256:e54c8295747f3d686c73d647255d615cbf7b6ff4f3338f894ef1a823f9043c4a

Observation c761a1da-9e89-44b9-a2a9-e504fc759036 · outbound

This paper cites Certified R obustness to A dversarial E xamples with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified R obustness to A dversarial E xamples with D ifferential P rivacy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.094262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.373136Z digest=sha256:1b29f559c149b556ba8d9e2ce726b5ad98b3715c72a7d63c35daff58bc51a76b

Observation 510637ab-24ef-4116-8e64-5bd7998858d6 · outbound

This paper cites Globally- R obust N neural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Globally- R obust N neural N etworks

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.919675Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.526509Z digest=sha256:23ba9996de7cd760da433e21e42d1c744ca738d697a831ce6e2c2f1ef2dfb552

Observation 7b10c08e-77f2-4bb3-82f0-22ff558006a9 · outbound

This paper cites (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.711905Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.675313Z digest=sha256:07c1d1634b441dc561c831a2ea8bb24a761fbdd87bdff895fdc9aa8382dcb654

Observation 730d2889-cca3-45d1-bdd4-dec4c0bdb84e · outbound

This paper cites Certified A dversarial R obustness with A dditive N oise.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness with A dditive N oise

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.512976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.844919Z digest=sha256:17d961798210b097318d13112af3622c8986e9f334e7e595819c56adcb587e33

Observation 6c35dbbd-4843-400c-9a15-9dbf23bd0872 · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.300429Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.023396Z digest=sha256:e5e7d8fab4958bd16a6b4b05b1a3fa426302afcc897d859fe5e94d6b182d6229

Observation 63d79340-45c4-4f74-987a-88d9692a772b · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.017095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.175405Z digest=sha256:4dc448fa489f441718899d01967cf2b2d9b221389f2d0c4b464dac926f0e2f29

Observation 26814004-f1fd-40ac-8dfe-eaa6b2887a79 · outbound

This paper cites Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:01.319756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:01.319756Z digest=sha256:6e851fbfd85b9b9017937e619aca9a573afd8e7c79fa5c65e90032e174ce04a8

Observation 1acaaa28-d8f9-41d1-a82a-73f3191d151e · outbound

This paper cites Group and A ttack: A uditing D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Group and A ttack: A uditing D ifferential P rivacy

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.847445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.443595Z digest=sha256:d342a5423316935eddf7fb72629f8be44ae9636e9310080841e9fc2bd9621691

Observation 5dca401e-02d2-41f7-a1d1-f38f6567eb2a · outbound

This paper cites o rn L \.

Position: Certified Robustness Does Not (Yet) Imply Model Security o rn L \

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.671015Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.591586Z digest=sha256:806e2be3241a9f75b2123d9687d2b144a218b586517b7e0514b578c11b5fa1c4

Observation c71de213-5962-4ade-9f81-d59fbdaa5b8f · outbound

This paper cites Towards E valuating and T raining R erifiably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating and T raining R erifiably R obust N eural N etworks

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.351514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.712521Z digest=sha256:7837a1cc37972bb2c3c224b281c62279ec46550ab045a9b0abda3e086976ac80

Observation b0eefaad-058f-4155-8b3a-2c1eed43ec3d · outbound

This paper cites Towards D eep L earning M odels R esistant to A dversarial A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards D eep L earning M odels R esistant to A dversarial A ttacks

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.067073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.823383Z digest=sha256:c5463e46e33b95363d5bcec4648b4942a7869780a0b47fe1179cfd93a2bf5620

Observation bf4f938a-abe9-428e-9e4b-2503520597bc · outbound

This paper cites Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval.

Position: Certified Robustness Does Not (Yet) Imply Model Security Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.847721Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.936545Z digest=sha256:5d022d6139fa7e9e22b6d2d7fd9eb5f7dfc5d41417e3d0a8ba6a0388da437008

Observation fdfb4625-c741-459c-bd61-fce61f29652d · outbound

This paper cites Is Certifying $\ell_p$ Robustness Still Worthwhile?.

Position: Certified Robustness Does Not (Yet) Imply Model Security Is Certifying $\ell_p$ Robustness Still Worthwhile?

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:02.111831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:02.111831Z digest=sha256:9760bc84847aa110c9f35f3497ab8e13ba3f1caed716f7d886ea01bc5ad33130

Observation 73cad2c9-ce66-4949-977b-53ef46ad8e14 · outbound

This paper cites Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.563823Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.257917Z digest=sha256:ea35df2a3d2142bfd9892f44a15ff922869aeb953b902b38b6b72effb6b5a661

Observation 03ca042d-8d23-4190-b248-9fd21b6cec56 · outbound

This paper cites Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.297145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.406963Z digest=sha256:e577ec8ca0ab58c2b51b3958261d40257343a3e8755217f201cd058d638fd4d5

Observation 64978c58-95a1-40cd-81a2-2eb6135f65a9 · outbound

This paper cites On S ignificance of the L east S ignificant B its for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S ignificance of the L east S ignificant B its for D ifferential P rivacy

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.065784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.522187Z digest=sha256:e41de9dd77d44b60fa957c34e16db017b8b7d5c8a8c2024539c8b2706c8ee770

Observation 679e7f34-f412-4500-a566-ec23afdd99e4 · outbound

This paper cites Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.850573Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.712085Z digest=sha256:2b1b097bb2eae7663620b95c7e5af493c136b7c76cfb9593512c9699ceabd8f7

Observation 4b9ac994-fccc-49b9-bbbc-881991269c9e · outbound

This paper cites Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.568053Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.859767Z digest=sha256:aab4e530d63d837950f15e1dd1db47c17e69892b0e37496dab8044a19aad869b

Observation 26018a02-542a-4e90-b82e-29d6081946a3 · outbound

This paper cites Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.264174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.991995Z digest=sha256:0262785636e981717f79e1c5e475226fe11c598947d759a5a9674a9f32d6afe3

Observation 3f0b95e3-04db-43e9-9b1d-6870c49e6c2c · outbound

This paper cites The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:03.129488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:03.129488Z digest=sha256:1c9bd66a5ff301ce0b8716ebbb6142b258f55029fcd816f8c12a3eece352386a

Observation a45f60d7-bb75-447e-a967-7f7307d1f77d · outbound

This paper cites Instance S paces for M achine L earning C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Instance S paces for M achine L earning C lassification

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.019605Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.322040Z digest=sha256:d5fca1aa6617f14f3a1c2c6721ff7da47241168227370dd5ace1e262a38feaee

Observation 5e244b76-f6af-41bd-9d9e-80be11731611 · outbound

This paper cites AI Risk Management Framework (AI RMF) 1.0.

Position: Certified Robustness Does Not (Yet) Imply Model Security AI Risk Management Framework (AI RMF) 1.0

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.739778Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.444094Z digest=sha256:8d198c978de9dc9fd946e469bcc73205ebd22ba3624599bf073bc039852ea66a

Observation 3d55f40c-17af-4c4d-9275-752ad8326661 · outbound

This paper cites The O pen D P W hite P aper.

Position: Certified Robustness Does Not (Yet) Imply Model Security The O pen D P W hite P aper

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.479301Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.574216Z digest=sha256:801c1e6788ed262e2851e81091acc434a8d5e6fa082a32cdd5a729b98c82eef8

Observation 3b7b0378-6553-4ef6-ab52-e1edec9c9cd6 · outbound

This paper cites The limitations of deep learning in adversarial settings.

Position: Certified Robustness Does Not (Yet) Imply Model Security The limitations of deep learning in adversarial settings

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.048822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.764544Z digest=sha256:4f46f329d87276fcbb921002e9c5339c18018ff42865779d7fbd25cdbc320d26

Observation af3e2c7a-e67c-4c24-b415-98270657625f · outbound

This paper cites Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.788538Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.893390Z digest=sha256:ef557efdcb4b78edf5956487910f443cf3205655715e1092e1aed60ad3efc5d3

Observation edca459c-0af5-49e3-a142-aafd7b4f9c77 · outbound

This paper cites Practical B lack- B ox A ttacks against M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Practical B lack- B ox A ttacks against M achine L earning

Reference 75

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.505729Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.044941Z digest=sha256:e6523680425433f27cd5125c3ccbb960ff680fd7d77fd671939b1c37a8a42c10

Observation 85a5bd81-bc05-4beb-bec9-1bb224d1a11f · outbound

This paper cites Playing the Game of Universal Adversarial Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Playing the Game of Universal Adversarial Perturbations

Reference 76

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.227652Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.186104Z digest=sha256:7ecc661fab9472d1f00ad7b1fa64e149e0dd535248f7438573629ad966eb74d1

Observation 2d19e063-3b34-47b1-ad64-5a4429fb7fa7 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 77

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:14.283134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.372797Z digest=sha256:22782376f37eb9693b8a59adf24d37372e76d68f8082a38177a5067994c98be2

Observation 65ad6063-27c1-46ff-9dea-6cded413d3b6 · outbound

This paper cites Imagenet L arge S cale V isual R ecognition C hallenge.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet L arge S cale V isual R ecognition C hallenge

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.012463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.491871Z digest=sha256:97b3ee24f253146d20a9d7da381c35bc5615ebc4127787d1954842b3950fdc79

Observation 40a881eb-397d-418e-9bff-b4ab41b8dc82 · outbound

This paper cites Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers

Reference 79

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.802312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.610720Z digest=sha256:8aaa94fb7f5bbedb7c2aa220a078a054192a1f2da23ebf3b4ac4c11c14b87aab

Observation 2f3a950c-58e5-4465-8abf-9566a85dc5ae · outbound

This paper cites A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.544017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.758198Z digest=sha256:8d2f63397f6a8030d95aec0bb42ce89a51720e33820ceb533b3ea29ee368c4c8

Observation 1ad92bf6-9483-494d-9651-5980b3d5e302 · outbound

This paper cites Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound

Reference 81

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.222826Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.911695Z digest=sha256:69386b4e573d4ec71709fb33340ccb097845e0fe962e9afd31fcc1318d4f8469

Observation bd212a7b-91c1-40ed-9714-abc5449bc591 · outbound

This paper cites Fast and E ffective R obustness C ertification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fast and E ffective R obustness C ertification

Reference 82

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.984188Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.037794Z digest=sha256:aac2a874095a3360c7171abb44c8bf6b77328abcf174b30df7373863276dca47

Observation 1e121935-a6b0-4e2d-a056-d3b40456ed11 · outbound

This paper cites An A bstract D omain for C ertifying N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security An A bstract D omain for C ertifying N eural N etworks

Reference 83

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.824716Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.202288Z digest=sha256:f12ebc320cfd8cf878eefeb5ca876465c3920c82d4cb77e7c61de2d9e7fd9b02

Observation ef75589d-9b18-454f-9614-5d22364aeaff · outbound

This paper cites Understanding R isks of P rivacy T heater with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding R isks of P rivacy T heater with D ifferential P rivacy

Reference 84

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.674576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.353619Z digest=sha256:f97f5151c84ec488ac92ff78092bee9a6fa4577a6b2f2a07aac8750034f9defb

Observation cdc09798-42f1-4546-aaac-e1588ce6b779 · outbound

This paper cites Understanding TSP D ifficulty by L earning from E volved I nstances.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding TSP D ifficulty by L earning from E volved I nstances

Reference 85

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.490448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.502054Z digest=sha256:a391ac4e34e7989da30020a157c891753899d27df85314f7e7b4953dc19914b6

Observation a9935a73-37ce-4a4e-ac31-7ffa6dfec873 · outbound

This paper cites Cullen, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Benjamin I.P

Reference 86

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.291349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.608620Z digest=sha256:d15ba2870e1fa29f9326e32b7f60eec7654f5f5281e19fa513f2093adce8889d

Observation 93edb3aa-0986-4ed0-a7a9-d69485ed668d · outbound

This paper cites Intriguing P roperties of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Intriguing P roperties of N eural N etworks

Reference 87

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.051888Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.777669Z digest=sha256:f280aaf21772a3a081e2666b29111e38d6897c0b1fa68e0689a5827bfbf85efe

Observation c4bcb770-24fd-46fd-b603-bcf7c2b6a375 · outbound

This paper cites Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks

Reference 88

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.883970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.894033Z digest=sha256:60e49549ac848dc081439c1714acd130aea4ce1aaa54f165ae9147677f500d34

Observation e982f0e8-0ce5-49b8-acf1-362596d663e4 · outbound

This paper cites Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification

Reference 89

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.747975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.028432Z digest=sha256:acc47c5567cad31a5c19f97cdf1e91e7f29f2e8fe81cf7d386beeabea198c760

Observation db70ca01-8cda-4f0b-9e4b-004324f00d71 · outbound

This paper cites Towards F ast C omputation of C ertified R obustness for R e LU N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards F ast C omputation of C ertified R obustness for R e LU N etworks

Reference 90

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.517799Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.171655Z digest=sha256:92c6f6ab5fbdaaa8b05502cf3518270ed602047e5110fc67f7c585b5160da8f0

Observation 251618a8-f297-4142-86f9-716ca981dce1 · outbound

This paper cites COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks

Reference 91

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:07.892575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.336873Z digest=sha256:03d69f849b1300d175fcb1b0048605b8d9bb05671a265c4b4ab3aefc758d2b61

Observation 946cff58-4c37-4cc2-9953-a7907a9587c5 · outbound

This paper cites Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors.

Position: Certified Robustness Does Not (Yet) Imply Model Security Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors

Reference 92

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.254767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.500370Z digest=sha256:ab8870537ce3ec7523732cd930a59614ad9fd35deae71ee920df87cc06460639

Observation 1eafc73d-65a5-4e82-901c-6a5bba6dde30 · outbound

This paper cites Spatially T ransformed A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Spatially T ransformed A dversarial E xamples

Reference 93

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.964546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.655922Z digest=sha256:9e1ae24ef02055e107282c7a624fb8c702e4e22507b9f959261513080abcd9a5

Observation 48f3fd9d-29e9-43a0-a05c-15e80d670406 · outbound

This paper cites Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension

Reference 94

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.680317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.815848Z digest=sha256:82aa2fdee4c2908401f750f4e411779feb963d7005712248eba08b4e960e8f9e

Observation a49a79dc-b5d6-41a7-8833-941f8a821c22 · outbound

This paper cites Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond

Reference 95

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.360779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.974416Z digest=sha256:12336f4e5ea63649a805a215eddcf2f77563d3d9b60618a919828d28994a6a4a

Observation 18928d75-3cc4-4c69-86cf-1046c0947976 · outbound

This paper cites Randomized S moothing of A ll S hapes and S izes.

Position: Certified Robustness Does Not (Yet) Imply Model Security Randomized S moothing of A ll S hapes and S izes

Reference 96

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.112431Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.132781Z digest=sha256:7fa3d515b72c106c853122be227ea30709018530ac4f40784558da45b641598d

Observation 6abfca14-d837-432a-bc52-91161014df03 · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 97

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.845695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.281854Z digest=sha256:ab7312077948fc1c0937b425ed4efd81c4c0446141324f2ea20b2e8a2c62bd7e

Observation 6889ea0c-5f15-477b-bc4a-f20141c92dbf · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 98

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.530014Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.475253Z digest=sha256:9083000d7ddc99a6332b5fc3fac4f514cc759966fe6ac3278fd0d279c1ef4781

Observation d2f459ea-33aa-47bf-96ea-fd5897a0a5f2 · outbound

This paper cites A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning

Reference 99

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.188483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-20T06:33:59.587034+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.593011Z digest=sha256:96d2df15ca76bce6e1785d0689af7f1f23dbd2bf8c6355b85463bad71095bb00

Pith citing papers

No inbound Pith citation observations are available.