Pith. sign in

Paper Citation Record · LEDGER

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization

As of 17 August 2026, this Paper Citation Record lists 56 of 56 outbound references and 0 inbound Pith citation observations for arXiv:2507.06856.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2507.06856 v1

Coverage vector

measured 56 of 56 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-06T19:02:05.286844Z

measured 56 of 56 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

56 of 56 outbound references displayed

  • verified exact5
  • verified fuzzy40
  • unresolved10
  • parse uncertain0
  • malformed identifier1
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 299ab545-9dd4-4b53-b49e-3bb397853bcf · outbound

This paper cites Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Inconspicuous adversarial patches for fooling image-recognition systems on mobile devices

Reference 1

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.918332Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.092400Z digest=sha256:3e8fcac20130bd882700ad30e3bab5c8f5aae504156dbbcf9cc635da45e9e40a

Observation 6af8c1df-4221-4e5c-ad27-4926969925e4 · outbound

This paper cites Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Adversarial Patch

Reference 2

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.096629Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.096629Z digest=sha256:6f8160543169458a5e5ea4916f94e24be2070ee31fc4e66dd5cee47ff52d899f

Observation 85693d5e-b752-471a-b3bd-d679fa0cdd10 · outbound

This paper cites Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Look and think twice: Capturing top-down visual attention with feedback convolutional neural networks

Reference 3

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.908197Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.100673Z digest=sha256:aa9a2376ad5eed8533912f968acbbbe538ed435e633611100f2e8ac6df70c1a3

Observation b0bc6b3b-2dd6-44cd-a702-29f6f9cd2065 · outbound

This paper cites Towards evaluating the robustness of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards evaluating the robustness of neural networks

Reference 4

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.897193Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.104242Z digest=sha256:575ac40d7e2010e70ffe764ce4b5f6932ea77cc3e574727f7b3c469a2b3e7572

Observation ae8aaa8c-7bdf-4202-9fb7-b2911ac64997 · outbound

This paper cites Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jujutsu: A two-stage defense against adversarial patch attacks on deep neural networks, 2022

Reference 5

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.885334Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.108100Z digest=sha256:d4cbb1f2f682fd67cd1bf417d8214a1898bf8a8419922858efd9328ba23e959c

Observation 3f59faa7-3aca-4d59-b7d9-f3d011649801 · outbound

This paper cites Sparse and imperceiv- able adversarial attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Sparse and imperceiv- able adversarial attacks

Reference 6

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.875151Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.111768Z digest=sha256:08255900e0923a0f0f5c3dde131bde193d46df80fa9384cc6bd9add4bce591e0

Observation 35aad53c-ce37-460b-bac1-c750abf35f3a · outbound

This paper cites Diffusion models beat gans on image synthesis.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models beat gans on image synthesis

Reference 7

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.865794Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.115181Z digest=sha256:95d0763b459da187940ae34e5d19d5b7b94773d497705146fd4bd371cff2d530

Observation 770eb60e-4077-4148-91a9-e5def99783c4 · outbound

This paper cites Perceptual quality metrics applied to still image compression.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual quality metrics applied to still image compression

Reference 8

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.855357Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.118802Z digest=sha256:c3e731bc468710f81863934201ef9ca5f39bffb403419bfe20a2deadaa5ba4b4

Observation a13257ea-773b-4d09-adc0-c6bdffd67d6e · outbound

This paper cites Robust physical-world attacks on deep learning visual classification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Robust physical-world attacks on deep learning visual classification

Reference 9

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.844160Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.122059Z digest=sha256:fee8abeddf9125801660f6d36f9804a6e85e490def657d9f2e316eaa0cd59e6b

Observation 25de0660-82d6-4d56-8153-9a1a06da10d4 · outbound

This paper cites DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization DiffPAD: Denoising Diffusion-based Adversarial Patch Decontamination

Reference 10

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.444597Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.125550Z digest=sha256:9eec39ac34c6867cb881923754de2e3875f9a9fd3a7a92128dbf8d8e01c09911

Observation 967abd3d-f578-4ec7-9a85-0cae36515b7c · outbound

This paper cites Wichmann, and Wieland Brendel.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Wichmann, and Wieland Brendel

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.129316Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.129316Z digest=sha256:dc07e69c3cffbc48af78aec3d1d0666acdcce9c593785f2330bdd4bcd9b7a538

Observation f9ef3337-8950-4b3c-9adc-62993a6b87cd · outbound

This paper cites Explaining and Harnessing Adversarial Examples.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Explaining and Harnessing Adversarial Examples

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.132750Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.132750Z digest=sha256:9cd3303691147eb71c7031bb30ea3b2f84cf94d9f274f2ae1c576fef6fc981b6

Observation 4786e2a1-2d30-4d7a-bcb2-acee2a3c1c5f · outbound

This paper cites Unravelling robustness of deep learning based face recognition against adversarial attacks,.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unravelling robustness of deep learning based face recognition against adversarial attacks,

Reference 13

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.825439Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.136260Z digest=sha256:1cee6f27bcfaf8ac3d4f68537ff25295ad4b8787e5391b751c2306028985c852

Observation e2338ec8-a17c-484c-b006-4bf8259e17eb · outbound

This paper cites On visible adversarial perturbations & digital watermarking.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization On visible adversarial perturbations & digital watermarking

Reference 14

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.814904Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.139567Z digest=sha256:28f871ca682a8e6f0802d6b46105186f6969040eb9dde352794aa5c53b679846

Observation 66a9de09-e542-4cbe-b864-bf9d86bc4038 · outbound

This paper cites Deep residual learning for image recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deep residual learning for image recognition

Reference 15

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.804253Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.143551Z digest=sha256:8a9b13e71c9aaee6cf4634f724a3d59e82e5cb81eea75e21fd84eecf2b471273

Observation b3f5c767-0e04-458a-85ea-1c0dd0710cfb · outbound

This paper cites CLIPScore: A Reference-free Evaluation Metric for Image Captioning.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization CLIPScore: A Reference-free Evaluation Metric for Image Captioning

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.146699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.146699Z digest=sha256:7620a8972b799e7bd5d59256ea4192644a71d774d36e5a928f9aeec7395ee05c

Observation 47bba56d-9829-4106-97ce-f13f8f00a064 · outbound

This paper cites Denoising diffu- sion probabilistic models.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Denoising diffu- sion probabilistic models

Reference 17

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.793798Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.150190Z digest=sha256:af0f6c3ef5b3107f4b8b85afbd2144de75cd5637df8cae24652b32c1810198e2

Observation 708f49fc-74e0-41bd-b04f-037451ceade5 · outbound

This paper cites Human imperceptible attacks and applications to improve fairness, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Human imperceptible attacks and applications to improve fairness, 2021

Reference 18

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.783508Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.153870Z digest=sha256:f7a2e8d90686308b1e0d039b429a02592f313d9bd79b8bf4b2a9d60760de5419

Observation 0bf0fdf1-7b13-4979-a66c-b91cbb24abdd · outbound

This paper cites Black-box adversarial attacks with limited queries and information, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Black-box adversarial attacks with limited queries and information, 2018

Reference 19

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.773345Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.157229Z digest=sha256:49971eaf1a4cec0d4baec1f9a92f325963c21b1e2cc94739c106e65288d11de5

Observation 02e2868b-1d8a-42a9-a199-ae7cb21a6b48 · outbound

This paper cites Diffender: Diffusion-based adversarial defense against patch attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffender: Diffusion-based adversarial defense against patch attacks

Reference 20

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.762770Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.160742Z digest=sha256:d1b26fe882189ee201668e76509bf63bcaefa123e4c7c2f5b02afc83573c8f30

Observation d449fe56-ebb4-40d4-b508-4eb100ba3bd6 · outbound

This paper cites Lavan: Localized and visible adversarial noise.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Lavan: Localized and visible adversarial noise

Reference 21

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.751908Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.164084Z digest=sha256:daa5e4de107c57ee26daeda34df3ba9b72024d357463c6b8a74121afae689140

Observation 0a17c12f-97b0-47a2-82af-7d07f9f5245f · outbound

This paper cites Advhat: Real- world adversarial attack on arcface face id system.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Advhat: Real- world adversarial attack on arcface face id system

Reference 22

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.740415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.167688Z digest=sha256:6013dacd82c74947a9b9c59ee7967afa6f93f62c1dce300a18b6036af0290d45

Observation 718b978a-7a64-4152-89a2-3ca6f209a2de · outbound

This paper cites Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Super-resolution of sentinel-2 images: Learning a globally applicable deep neu- ral network

Reference 23

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.730070Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.170975Z digest=sha256:9030f00c11706969808b880dc36a7dd0a71ef226f167f436f0d66cbe53e9a6c1

Observation 25e07283-ddc1-4be7-9e40-fb24db658449 · outbound

This paper cites Generative Dynamic Patch Attack.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generative Dynamic Patch Attack

Reference 24

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.410546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.174128Z digest=sha256:398ccd87a7ca4455e3ff61a424870f249891d9428ed82469a783bca768725164

Observation 9aa57581-6e9b-4607-a0a9-989727cfb249 · outbound

This paper cites an unresolved cited work.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Unresolved cited work

Reference 25

Resolution
unresolved
raw_fallback, observed 2026-08-06T19:02:05.718918Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.177905Z digest=sha256:120561316a3bfd800704a2f0e178ee5750bb9654ff928a272e87d22f85aaa121

Observation 214276aa-e2fc-454f-8ef6-fd406cf37938 · outbound

This paper cites Perceptual-sensitive gan for generating adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Perceptual-sensitive gan for generating adversarial patches

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.707736Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.181478Z digest=sha256:b8b9d59f597eefb7b9aca1f6e3ecf1fc175655c27cee5443edb7ea21d5cfbf60

Observation 9c91745b-6ea1-4887-bbcf-e13d5230ea43 · outbound

This paper cites Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Segment and complete: Defending object detectors against adversarial patch attacks with robust patch detection

Reference 27

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.695591Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.185239Z digest=sha256:86f25b65ac214303e56fa401f7ede2cabc92b22850c81ea8a458ec2110893789

Observation 0a6c1c1b-9d57-4c96-a075-6c20ba31a3df · outbound

This paper cites Swin transformer: Hierarchical vision transformer using shifted windows.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Swin transformer: Hierarchical vision transformer using shifted windows

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.683587Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.189085Z digest=sha256:d73ad71dd5ae8aee57d1e585abaa7cc9e9862703c440ad4c2ab46b3e017d3c5d

Observation e39d81c6-ed70-4879-b6b0-8791fdeba67b · outbound

This paper cites Towards imperceptible and robust adversarial example attacks against 9 neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards imperceptible and robust adversarial example attacks against 9 neural networks

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.672104Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.192313Z digest=sha256:5ebe6203ec28ef8224a325dd3803e62061faf98ff4394b7ddca1f1798ab3827e

Observation 2aab3dc0-2051-4dbd-9ae3-f43914e6b323 · outbound

This paper cites Towards Deep Learning Models Resistant to Adversarial Attacks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Towards Deep Learning Models Resistant to Adversarial Attacks

Reference 30

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.195978Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.195978Z digest=sha256:88a7a96dc2f406da8ad688deb80738d529aa2edf55d7a2745f0d31d00bc326fb

Observation 1e5c525d-739b-4adb-ae29-dfc23fa4a80d · outbound

This paper cites Deepfool: a simple and accurate method to fool deep neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Deepfool: a simple and accurate method to fool deep neural networks

Reference 31

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.660317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.199893Z digest=sha256:7ddce3b28e2d7abbcaf2089bafb76e2718ed91b462bbef76d76a4e5967358df5

Observation 93e9ea78-aeb4-4a1d-a198-6113cc7184c0 · outbound

This paper cites Face Recognition as a Method of Authentication in a Web-Based System.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Face Recognition as a Method of Authentication in a Web-Based System

Reference 32

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.385165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.203908Z digest=sha256:77fc5d890d08d4ffb980a4ae3845beb245db83246f862584bcdbfc7ed72a9741

Observation 6f6e5f53-11b8-4f5d-92d2-8c411da88933 · outbound

This paper cites Diffusion models for adver- sarial purification, 2022.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Diffusion models for adver- sarial purification, 2022

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.649317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.207586Z digest=sha256:aeeccc0a451a2fbf6be78ebd7c70c6188318d3f1c14f4c9164d20653fedf2496

Observation be6733dc-537a-4b1c-8f92-3492e02daf89 · outbound

This paper cites Parkhi, Andrea Vedaldi, and Andrew Zisserman.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Parkhi, Andrea Vedaldi, and Andrew Zisserman

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.638192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.210908Z digest=sha256:5bbee60c99501075ebe729e2882614437ade2ef25056a68589fdd2c4062ca07e

Observation 8ac3e957-5ef1-41ad-879c-6a94951ce284 · outbound

This paper cites Visually Imperceptible Adversarial Patch Attacks on Digital Images.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visually Imperceptible Adversarial Patch Attacks on Digital Images

Reference 35

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.369809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.214447Z digest=sha256:748ddf6df1c269540f7b5cfe7fe1203716fa609d38e19c71f3d2d6fe8d4db189

Observation 92e96646-0315-4f22-babe-dd14a87bb251 · outbound

This paper cites Berg, and Li Fei-Fei.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Berg, and Li Fei-Fei

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.218232Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.218232Z digest=sha256:d028fa939a277f15295258c743003aff94024233bf2c131d4bf8c563d95a02f7

Observation 3fa15ba9-d27a-43b6-ac83-42b0da465843 · outbound

This paper cites Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Defense-gan: Protecting classifiers against adversarial attacks using generative models, 2018

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.621102Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.221815Z digest=sha256:67d17a4b2051d8eda89f62fbe11badba71b6430ce71784e92d2eef08f9f7ca5f

Observation 0e0e8cb8-7742-4664-8fa0-782e3ca09cf5 · outbound

This paper cites Grad- cam: Visual explanations from deep networks via gradient- based localization.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Grad- cam: Visual explanations from deep networks via gradient- based localization

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.609035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.225548Z digest=sha256:fb1f6f9c926fbc9171ea6b8d8c48c248986895fab761868a572d29ade4f1ba26

Observation 334692ea-6ccc-4ef7-8183-a94911cce4e3 · outbound

This paper cites Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.598567Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.228749Z digest=sha256:f6585d26feed335a835dc39a8769ecfd86926dcc771f408b03009577794f8efb

Observation 7f80e671-113d-4a27-83e0-5b16121731b2 · outbound

This paper cites A general framework for adversarial ex- amples with objectives.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A general framework for adversarial ex- amples with objectives

Reference 40

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.588781Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.232541Z digest=sha256:295b608f20bc9b927f49dcdfbcfaaa41928b7112cc4738cf99ac6c291acbd4d7

Observation 4ad5f2dd-f9a6-4ef8-86f8-91378594a931 · outbound

This paper cites Very Deep Convolutional Networks for Large-Scale Image Recognition.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Very Deep Convolutional Networks for Large-Scale Image Recognition

Reference 41

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.236010Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.236010Z digest=sha256:fcc0fa5cc8e7846baef0b7b0c48eb0e06467b7e3c584f9700bd0feef25552f9a

Observation 7f3193fe-fe52-4f80-a6c2-06657c10d0b8 · outbound

This paper cites Intriguing properties of neural networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Intriguing properties of neural networks

Reference 42

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.239599Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.239599Z digest=sha256:41e8823820636cf0ef6fae3a969b2c5427f2a50c53bd2ea35a1a89f73a643263

Observation 042dd1a1-b454-4fd4-b128-4401f8c54d4d · outbound

This paper cites Jedi: entropy-based localization and removal of adversarial patches.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Jedi: entropy-based localization and removal of adversarial patches

Reference 43

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.577870Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.242958Z digest=sha256:2e4ea5fd4536d52a3335ad71fba4c3557d8d28cfa692b61d37d3caad5154b572

Observation 5971908d-e759-4d83-af38-6c56fe5047dc · outbound

This paper cites Guided Diffusion Model for Adversarial Purification.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Guided Diffusion Model for Adversarial Purification

Reference 44

Resolution
unresolved
no resolver link, observed 2026-08-06T19:02:05.246199Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=pdf_text observed=2026-08-06T19:02:05.246199Z digest=sha256:55b5eebf68b6b1867f8e49bf5cb6aeb8b3ae5b5c24f3bb30573c291a0c0d2195

Observation 3c9d7d99-7724-4a7e-b43c-3670910704ad · outbound

This paper cites Generating Visually Realistic Adversarial Patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Generating Visually Realistic Adversarial Patch

Reference 45

Resolution
verified exact
local_arxiv, observed 2026-08-06T19:02:05.323915Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.249694Z digest=sha256:a2cc43eefcd2c2b01899423f8e89a7c8b10e3c222b3cb2e4f292b917cb68d3b0

Observation 33270bd5-cf97-443f-b362-7aff7daf8024 · outbound

This paper cites A universal image quality index.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A universal image quality index

Reference 46

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.568001Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.253404Z digest=sha256:d8304def72e262544636ac7b3e6b48137966affc0b0bc7def78dfe4662def3bf

Observation 78b34c76-dbb8-4b4c-a085-1f1d59b48ca0 · outbound

This paper cites Image quality assessment: from error visibility to structural similarity.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Image quality assessment: from error visibility to structural similarity

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.558099Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.256345Z digest=sha256:1f8e3a38ff832252fc573e1290abf5b1905ca0c5494e748261853ae43bd948ea

Observation a7d579ed-de42-4dbd-89c5-284b20c65545 · outbound

This paper cites Privacy-preserving adversarial facial features.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Privacy-preserving adversarial facial features

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.547636Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.259670Z digest=sha256:97ffb0cf72b23991151494dcf537a7eefec87060ca99f37f7e7fbd67c45d55a0

Observation c4161b82-f911-4591-858c-68264d2d69eb · outbound

This paper cites Patchguard++: Efficient provable attack detection against adversarial patches, 2021.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchguard++: Efficient provable attack detection against adversarial patches, 2021

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.537589Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.263014Z digest=sha256:bd0d26c81bae24dc00b0530151969ce8c6f103d3cceae91d49d71a6f04398e43

Observation 0d965048-9686-4749-ae0e-093211d71678 · outbound

This paper cites Densepure: Understanding diffusion models for adversarial robustness.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Densepure: Understanding diffusion models for adversarial robustness

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.527593Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.266074Z digest=sha256:af4753cf8d409310e7a52dd41f4cc0dc6aadc41a650ef0ac8173c282fc1f2ca0

Observation b73a1066-a902-4348-b8a8-5a6b3a214a5b · outbound

This paper cites Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Patchzero: Defending against adversarial patch at- tacks by detecting and zeroing the patch

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.517128Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.269082Z digest=sha256:85194ce4886579007786063881b8d5e0e5085acc90c64251bff181b3ec840df9

Observation b8fdc49d-a8f3-4563-bcd8-328ce302da6a · outbound

This paper cites Visualizing and un- derstanding convolutional networks.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Visualizing and un- derstanding convolutional networks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.506635Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.272766Z digest=sha256:0ad3da1d4ee59ba9bcc27b90ee74b72cdf2e4e37adcfe254cc12a10c8aea5478

Observation 6030ad09-3b94-40b0-9ae4-94ed7e8499b5 · outbound

This paper cites The unreasonable effectiveness of deep features as a perceptual metric.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The unreasonable effectiveness of deep features as a perceptual metric

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.496718Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.276338Z digest=sha256:5dde2604da49e05117f18f8f8e4c9f6543b6bb7e7b6e0bdb363d893df79ecea8

Observation 490bde89-7e2c-4dac-8695-16ca84298333 · outbound

This paper cites The translucent patch: A physical and universal attack on object detectors.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization The translucent patch: A physical and universal attack on object detectors

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.486339Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.279629Z digest=sha256:623e1c9b7b9599b563aaa0f492bb58cf51a14a1d5f63d34e165d68056b196297

Observation a9ff3bf6-de3e-4bdf-84b9-b30051d54f3c · outbound

This paper cites Toaster” class to include “Baseball.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization Toaster” class to include “Baseball

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-06T19:02:05.476133Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.282996Z digest=sha256:8c4a7d399d65f725be089b0efbf69e4f4ff13d97eca4dd6f344d484b1e03d332

Observation cab95ced-b4d6-471c-9424-016c09b08aae · outbound

This paper cites A. J. Buckley.

IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization A. J. Buckley

Reference 56

Resolution
malformed identifier
raw_fallback, observed 2026-08-06T19:02:05.466187Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

source=pdf_text observed=2026-08-06T19:02:05.286844Z digest=sha256:c30df95f178b9d70ec511fa85c013d3f58c37f88991424dc3a261fefc975bd30

Pith citing papers

No inbound Pith citation observations are available.