Pith. sign in

Paper Citation Record · LEDGER

Position: Certified Robustness Does Not (Yet) Imply Model Security

As of 9 August 2026, this Paper Citation Record lists 99 of 99 outbound references and 0 inbound Pith citation observations for arXiv:2506.13024.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2506.13024 v2

Coverage vector

measured 99 of 99 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-07T00:44:07.593011Z

measured 99 of 99 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-09T06:31:02.800959+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

99 of 99 outbound references displayed

  • verified exact4
  • verified fuzzy61
  • unresolved34
  • parse uncertain0
  • malformed identifier0
  • metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 32002f84-9ce4-4666-a08f-ed98c5aaee6e · outbound

This paper cites Cullen, and Tansu Alpcan.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Tansu Alpcan

Reference 1

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.341285Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.341285Z digest=sha256:4a574b2e3837a43c68d97caebf88d86d5176d5b4875298324bbc99a3d194d63d

Observation 9e5ba5bc-00f2-4b18-bcb7-249cb781e569 · outbound

This paper cites Politics of Adversarial Machine Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Politics of Adversarial Machine Learning

Reference 2

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.882415Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:54.430300Z digest=sha256:53a9e12d285f3f1a60d73ff26087d905505df8fde50ee70b1af9803a2e6f525e

Observation 683b8811-063b-44ec-a697-aa479e73079f · outbound

This paper cites Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples

Reference 3

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.555880Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.555880Z digest=sha256:bfe7b6c2842f5683d86752a66a7975fd410d88cbc7840dd60b40ef9a54365f22

Observation c09017f0-d971-4c58-82fc-9a049bd4e5b7 · outbound

This paper cites Differential Privacy on Finite Computers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differential Privacy on Finite Computers

Reference 4

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.678649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.678649Z digest=sha256:6221c94524ce4694b92ec6c34b950646676a572e1db8f8e2df509ab9aebc3126

Observation 657f7e27-c9dd-40eb-ac87-80f2a1dffb8b · outbound

This paper cites Evasion A ttacks A gainst M achine L earning at T est T ime.

Position: Certified Robustness Does Not (Yet) Imply Model Security Evasion A ttacks A gainst M achine L earning at T est T ime

Reference 5

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.782967Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.782967Z digest=sha256:eff3f7efbd8a41617bc7227fc43fc5c5e75b464cc564b3844f774eb7803a2f99

Observation b189dd80-5ad6-4fd1-85fb-97f93a9c2fe7 · outbound

This paper cites The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Fourth International Verification of Neural Networks Competition (VNN-COMP 2023): Summary and Results

Reference 6

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:54.903149Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:54.903149Z digest=sha256:363b55a17a706db345e9a2e461cf547ce4ccae41d57890469fd0c8bc612d9a6a

Observation 26d07490-a690-4588-b8db-3f03f092c063 · outbound

This paper cites Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gender S hades: I ntersectional A ccuracy D isparities in C ommercial G ender C lassification

Reference 7

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.039116Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.039116Z digest=sha256:6afee6d201cc115ea2806a7961130508d3b6911d3f35ea2c6976e3a84f887441

Observation ba2f1c9e-cacc-42cd-8cb2-d085de4b08c9 · outbound

This paper cites MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples.

Position: Certified Robustness Does Not (Yet) Imply Model Security MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples

Reference 8

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.155104Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.155104Z digest=sha256:462608f235c34fc5d5509067137439024b82282ad8ba3abc0e9ef340cf7ee293

Observation 080decf2-33d9-46a7-b167-bb9cfba7fc7f · outbound

This paper cites Towards E valuating the R obustness of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating the R obustness of N eural N etworks

Reference 9

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.253314Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.253314Z digest=sha256:f80b9c435128e5043ab1484fa1ad3dc640b70531c39e9cb1ee9e79ccd8dbfe5b

Observation ade5bd82-9233-4e61-85ef-6a967a184596 · outbound

This paper cites Implicit D iversity in I mage S ummarization.

Position: Certified Robustness Does Not (Yet) Imply Model Security Implicit D iversity in I mage S ummarization

Reference 10

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.411174Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.411174Z digest=sha256:dc6d69b9f491ea53f114ca35f70185390526b3bf591fa5d218fa9b5c8c2c5d9d

Observation d873f767-ba36-4d54-b789-aeb823e50085 · outbound

This paper cites Adversarial Attacks and Defences: A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial Attacks and Defences: A Survey

Reference 11

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.527362Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.527362Z digest=sha256:283e02a9819a41ed1a3cd05bb57438b2f8f7e8ba9377a01dbd713c609ed42f82

Observation dc823b87-a689-4606-a278-7db46527cc84 · outbound

This paper cites Certified D efenses for A dversarial P atches.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified D efenses for A dversarial P atches

Reference 12

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.648179Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.648179Z digest=sha256:c8ab89082bc8b5e40662acad7807d2ab45affd0db7220cbccaf3bbdfb91b4fd0

Observation 77b19635-da9e-4b39-8dcc-5acaec0ff64e · outbound

This paper cites Certified A dversarial R obustness via R andomized S moothing.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness via R andomized S moothing

Reference 13

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.772984Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.772984Z digest=sha256:315f595ac010b93d9eafe9b976b173e9907dd38d9a9bf4121dc765e542be528d

Observation 15005d78-7cbb-4cde-81d9-c14823ae6e27 · outbound

This paper cites Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reliable E valuation of A dversarial R obustness with an E nsemble of D iverse P arameter- F ree A ttacks

Reference 14

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:55.915185Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:55.915185Z digest=sha256:38b3390828ee6ac76fdb0a29650951d75e39fb1e7f3e608f6b963d951388e008

Observation 438c87bf-c921-4d19-8d46-ef550e3b8609 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Monazam Erfani, and Benjamin I.P

Reference 15

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.018826Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.018826Z digest=sha256:827024f7b117fe654ca1a5bae31b0f5a051c7b11097f8f660c05b6c79c63faa0

Observation 9aa1f3bc-120c-46f0-9564-65da0102129d · outbound

This paper cites Cullen, Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Benjamin I.P

Reference 16

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.145911Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.145911Z digest=sha256:70d6e4236db0ea592aa38224726427fd51f1dc237dc2174d6fcd4feb83ba55d1

Observation 07f0b557-9537-4a2a-8e4e-52aef8e6937b · outbound

This paper cites Cullen, Tansu Alpcan, and Alexander Kalloniatis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Tansu Alpcan, and Alexander Kalloniatis

Reference 17

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.255287Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.255287Z digest=sha256:5c59c38065dabcfb214f856591ab80d5e7d38ee6429e221b0511aea56333f218

Observation f8733539-525f-4eea-abc5-55b8b59449a9 · outbound

This paper cites Cullen, Shijie Liu, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Shijie Liu, Paul Montague, Sarah M

Reference 18

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.378053Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.378053Z digest=sha256:9866789f80f8301367e37ae9e2d70124a0ac3555df68b8e5c636de93726993b8

Observation 940c3ac5-9419-4e85-a8aa-6d0676d057e9 · outbound

This paper cites Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Shijie Liu, Sarah Erfani, and Benjamin I

Reference 19

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.473475Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.473475Z digest=sha256:ca0d7d5a863069436a46a140aed531ba77cb2953a25be7ba28b7a400853c3a89

Observation 03ed78b4-ca6a-4337-81b5-589da24f918e · outbound

This paper cites Imagenet: A L arge-scale H ierarchical I mage D atabase.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet: A L arge-scale H ierarchical I mage D atabase

Reference 20

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.571392Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.571392Z digest=sha256:82efa67a13ac8e8efdaa73df02668fe7cb0c17c1ca4795c859a59a8eb80de5d9

Observation a899ed4a-1797-414a-91e6-53a366cccf6c · outbound

This paper cites Privacy A udits for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy A udits for D ifferential P rivacy

Reference 21

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.701497Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.701497Z digest=sha256:bda03ae15b876275247fe9025415a2beb015207b6ad3d856ca8144a60c5bd79b

Observation 1d4160d8-59e6-4577-b428-b3410c990b18 · outbound

This paper cites Towards learning with limited labels: Equivariance, Invariance, and Beyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards learning with limited labels: Equivariance, Invariance, and Beyond

Reference 22

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:56.864630Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:56.864630Z digest=sha256:53a511ebd060048766bb84fec8151d88bbc0373cccdedd144bd833327db4d397

Observation ada41f51-3bd3-41f9-87e1-f1173e130281 · outbound

This paper cites A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences.

Position: Certified Robustness Does Not (Yet) Imply Model Security A F ramework for R obustness C ertification of S moothed C lassifiers using f- D ivergences

Reference 23

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.015651Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.015651Z digest=sha256:09ffde61de4640d72804e2eb496aaa12bd6d832f4340045cffd517a5f114d336

Observation 5a787b67-478c-476c-994f-f46c434e2680 · outbound

This paper cites Calibrating N oise to S ensitivity in P rivate D ata A nalysis.

Position: Certified Robustness Does Not (Yet) Imply Model Security Calibrating N oise to S ensitivity in P rivate D ata A nalysis

Reference 24

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.178267Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.178267Z digest=sha256:a15d6e0fad976057e810b9464e66a213b1e34a54ef42704cd12870c713f5a6a1

Observation 1ab3122b-fba0-4161-beab-537787a12836 · outbound

This paper cites Adversarial A ttacks on M edical M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial A ttacks on M edical M achine L earning

Reference 25

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.878343Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.293178Z digest=sha256:aa5c53affe7386be339395bd708ccffd21a9d4c32f6072d66d0f3e8b8c877177

Observation 905191b3-561c-427c-b17f-1cf1f63aa089 · outbound

This paper cites A P rogramming F ramework for O pen D P.

Position: Certified Robustness Does Not (Yet) Imply Model Security A P rogramming F ramework for O pen D P

Reference 26

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.570054Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.463244Z digest=sha256:41fa4bf6ef294b7fdd1e94717ca3bcf668ed5e45e468212f3ee6defd67034645

Observation 86c9c3eb-3112-4dd5-9df6-85110bbca59c · outbound

This paper cites Motivating the Rules of the Game for Adversarial Example Research.

Position: Certified Robustness Does Not (Yet) Imply Model Security Motivating the Rules of the Game for Adversarial Example Research

Reference 27

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:57.561699Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:57.561699Z digest=sha256:c7677b6e09544b1d3743f818dc2db29c31ca6b1a54a7997b4b455bc404229c96

Observation c5af38d7-a1fd-4bce-876c-78b0a11e4be3 · outbound

This paper cites Explaining and H arnessing A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Explaining and H arnessing A dversarial E xamples

Reference 28

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.275199Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.679535Z digest=sha256:07b6fccf2043302b237b1dcef5f5ae6f0dd49ec8ccb45febd32cbfd72577184e

Observation 55b0bee6-a653-4237-9866-c21c3b5e8a6c · outbound

This paper cites On S imultaneous C onfidence I ntervals for M ultinomial P roportions.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S imultaneous C onfidence I ntervals for M ultinomial P roportions

Reference 29

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:24.086787Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.805514Z digest=sha256:da491d12f329716d2f55c80a2ace333997fab726f8d0caef66cee1db5b1de4b1

Observation 0a928acd-14e6-4b62-a6c0-92840f709a07 · outbound

This paper cites Scalable C ertified R obustness via I nterval B ound P ropagation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Scalable C ertified R obustness via I nterval B ound P ropagation

Reference 30

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.940883Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:57.934361Z digest=sha256:b3312d204c79a31eb604c5bcc7d2d27e701302a936a4010ed60f21412c27b5f1

Observation 8d9fce40-f1c9-4ab0-9d80-41a4641a6afa · outbound

This paper cites Reducing Certified Regression to Certified Classification for General Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reducing Certified Regression to Certified Classification for General Poisoning Attacks

Reference 31

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.535861Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.047094Z digest=sha256:5b054b69d0f44bda147416ae853eecdbc04cf489103c86fbe4ad609c75d2c48c

Observation 99a9f5f9-1f0e-447a-9519-0ac7c905e325 · outbound

This paper cites Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking.

Position: Certified Robustness Does Not (Yet) Imply Model Security Reinforcement L earning for A utonomous D efence in S oftware- D efined N etworking

Reference 32

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.757223Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.134365Z digest=sha256:fe388ae4bbde8b459b92ecedefe8d961bce9589297877feb78d02069ffd613fc

Observation c4e4e963-cc15-47f8-b338-930f19683b33 · outbound

This paper cites Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal G uarantees on the R obustness of a C lassifier A gainst A dversarial M anipulation

Reference 33

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.490180Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.234518Z digest=sha256:c0c234105706d17e19ea7f79ba5f173c82f4d9e22f95d63a1f932a2dddff68ee

Observation 03c57011-ecc9-427c-aecb-f38a4bd780e7 · outbound

This paper cites Joseph, Blaine Nelson, Benjamin I.

Position: Certified Robustness Does Not (Yet) Imply Model Security Joseph, Blaine Nelson, Benjamin I

Reference 34

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:23.265942Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.342190Z digest=sha256:0458c34b38a3b1e790cf36fc19959eeca28c1f50096ff7abaaa50dbff6e90a17

Observation 08517b48-08d4-417b-be16-caa1536a9744 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 35

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:22.994302Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.463279Z digest=sha256:2c3b81ba0e948096dcc14e108dd41deee32cf184e3659a4f60b50ff10d1b6f36

Observation 696c13a3-f03a-42a0-98bf-3cd68921f942 · outbound

This paper cites The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey

Reference 36

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:58.581546Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:58.581546Z digest=sha256:ff0a6edec7b8957029825e61e0dae11250b58e6c60ce8c5957a232351ac8b2c3

Observation fd002fbc-b17a-4165-b89f-78856e5faff2 · outbound

This paper cites International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022.

Position: Certified Robustness Does Not (Yet) Imply Model Security International Organization for Standardization and International Electrotechnical Commission, Geneva, Switzerland, 2022

Reference 37

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.738506Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.682798Z digest=sha256:6fadaa7b2b8ca6502976ea4bf43f03cf574aa47adf5a66e192df76c81ea62b5c

Observation 3be9c7fa-1e2e-4dd9-b2dd-42d78eb10f6f · outbound

This paper cites Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems.

Position: Certified Robustness Does Not (Yet) Imply Model Security Are W e T here Y et? T iming and F loating- P oint A ttacks on D ifferential P rivacy S ystems

Reference 38

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.480582Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.772998Z digest=sha256:d3a0866bc542460b9f11a4606cf84f90a52b44aa67918a71bc69a91e7193f51c

Observation 73ca5b6f-919a-452f-b207-da2d89202dce · outbound

This paper cites Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget.

Position: Certified Robustness Does Not (Yet) Imply Model Security Elephants D o N ot F orget: D ifferential P rivacy with S tate C ontinuity for P rivacy B udget

Reference 39

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:22.200654Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:58.900522Z digest=sha256:6b50b89124ace012d44a7d3d1409f9d1a4d505303c5c4b4150ddd05360877cba

Observation 8be3eb88-0dff-4916-bb04-9fca7b46e545 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 40

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:21.944206Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.047125Z digest=sha256:f29be081783c6e3238eeb0b7a51d49ead0ad3f94dd9c921dea0d04707f0247d5

Observation 8027c612-0eca-4263-aef7-ccdc115bee58 · outbound

This paper cites Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fairface: F ace A ttribute D ataset for B alanced R ace, G ender, and A ge for B ias M easurement and M itigation

Reference 41

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.635192Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.232185Z digest=sha256:27f3c6c0bb99d7637d5e325a4fb271fbde9d48b33e05cb3aadd90996785318a8

Observation 42ef0d07-8c90-4967-8528-600551668ec3 · outbound

This paper cites Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou.

Position: Certified Robustness Does Not (Yet) Imply Model Security Privacy T heater: W hy S ocial N etworks O nly P retend to P rotect Y ou

Reference 42

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.377984Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.332867Z digest=sha256:6c16d76cd0eba3145ac3707feb8cd2d5126e7c48734ed446277a94402ce25680

Observation 9d63fcb4-7dd6-4961-a602-eac41817378b · outbound

This paper cites Certification of Speaker Recognition Models to Additive Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certification of Speaker Recognition Models to Additive Perturbations

Reference 43

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.413830Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.413830Z digest=sha256:25950ef3378b8b37f002615ef8e08fe0a08ba3c6c1b008aaf21485c95b0c94c7

Observation ba0f7a72-8ca9-4ab3-b9d7-722ba9581d67 · outbound

This paper cites Learning M ultiple L ayers of F eatures from T iny I mages.

Position: Certified Robustness Does Not (Yet) Imply Model Security Learning M ultiple L ayers of F eatures from T iny I mages

Reference 44

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:21.068196Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.538332Z digest=sha256:d222c2681f171b8a2ad260bd7aab88efbefd19201b09750543d49608f2f9d723

Observation 9928a483-7b77-454b-85ff-9a4754464ac4 · outbound

This paper cites Regularization for Deep Learning: A Taxonomy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Regularization for Deep Learning: A Taxonomy

Reference 45

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.642817Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.642817Z digest=sha256:b4bc861fbe4a8d6122fc1644c14a05bfa02e05c8bb479fac1e7e0c14346962e3

Observation 9c70a4ec-6903-4cf1-aa33-692992aa8038 · outbound

This paper cites Policy Smoothing for Provably Robust Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Policy Smoothing for Provably Robust Reinforcement Learning

Reference 46

Resolution
unresolved
no resolver link, observed 2026-08-07T00:43:59.795601Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:43:59.795601Z digest=sha256:4e52059214bcaedb6f32cb19f6b5c2740936581e15dc863213c4ff303964bd80

Observation 6d06ed91-d523-4165-a057-ea816cafe2c4 · outbound

This paper cites Adversarial M achine L earning- I ndustry P erspectives.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial M achine L earning- I ndustry P erspectives

Reference 47

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.873872Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:43:59.926782Z digest=sha256:5afcfac60aa3578c33fcced61ee949bfefe52426b22c1d18948974a7f340b073

Observation f201aa00-22bb-4e4d-820d-303d9ce71602 · outbound

This paper cites Adversarial machine learning at scale.

Position: Certified Robustness Does Not (Yet) Imply Model Security Adversarial machine learning at scale

Reference 48

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.565732Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.083113Z digest=sha256:61f149e42db6be5066aa8cd59d057b646700cdd59e58aae55d2aeb434f5365f7

Observation 8e443a2a-273c-4d40-862c-27d9651a5fb8 · outbound

This paper cites Gradient- B ased L earning A pplied to D ocument R ecognition.

Position: Certified Robustness Does Not (Yet) Imply Model Security Gradient- B ased L earning A pplied to D ocument R ecognition

Reference 49

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.345931Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.197396Z digest=sha256:2180e70d3fb7fc69a95e3c87575ba992271d71553113afde5221d1bde9a28b03

Observation c761a1da-9e89-44b9-a2a9-e504fc759036 · outbound

This paper cites Certified R obustness to A dversarial E xamples with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified R obustness to A dversarial E xamples with D ifferential P rivacy

Reference 50

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:20.094262Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.373136Z digest=sha256:b45b6197d4fab67e4311d544123f121fe38979b91e038164ed84871f9c63d971

Observation 510637ab-24ef-4116-8e64-5bd7998858d6 · outbound

This paper cites Globally- R obust N neural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Globally- R obust N neural N etworks

Reference 51

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.919675Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.526509Z digest=sha256:7fa63fd49dffe740f43a5bd02523eaf376ed5c8dc5dbc284c20a04b49d2816f8

Observation 7b10c08e-77f2-4bb3-82f0-22ff558006a9 · outbound

This paper cites (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security (de) R andomized S moothing for C ertifiable D efense against P atch A ttacks

Reference 52

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.711905Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.675313Z digest=sha256:7ecf50db65acf9c5be1160887e3ecd504265274fa4826f7c3eac31b221e21ea3

Observation 730d2889-cca3-45d1-bdd4-dec4c0bdb84e · outbound

This paper cites Certified A dversarial R obustness with A dditive N oise.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified A dversarial R obustness with A dditive N oise

Reference 53

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.512976Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:00.844919Z digest=sha256:866c013314433133887d0b54e681b5ae90b8900aad6bc6d57afacd8dadcd2459

Observation 6c35dbbd-4843-400c-9a15-9dbf23bd0872 · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 54

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.300429Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.023396Z digest=sha256:93a2732e670476b669785d6c2bed270c4baeda381c38281b7e77c70370f730e5

Observation 63d79340-45c4-4f74-987a-88d9692a772b · outbound

This paper cites Cullen, Paul Montague, Sarah M.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, Paul Montague, Sarah M

Reference 55

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:19.017095Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.175405Z digest=sha256:41eb23459d1d9380f53c18d963eff763562b37c364ee8ef886bddc7022d13243

Observation 26814004-f1fd-40ac-8dfe-eaa6b2887a79 · outbound

This paper cites Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fox in the Henhouse: Supply-Chain Backdoor Attacks Against Reinforcement Learning

Reference 56

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:01.319756Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:01.319756Z digest=sha256:51add822c4966cf46cce5f12c2c9d82a4b45c86e2825a3d31b39fbc4167aaa5f

Observation 1acaaa28-d8f9-41d1-a82a-73f3191d151e · outbound

This paper cites Group and A ttack: A uditing D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Group and A ttack: A uditing D ifferential P rivacy

Reference 57

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.847445Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.443595Z digest=sha256:467840dd6f3ac95dbaf949785c8968d833f0921771655d2c9b8a93bf1c2e6ca8

Observation 5dca401e-02d2-41f7-a1d1-f38f6567eb2a · outbound

This paper cites o rn L \.

Position: Certified Robustness Does Not (Yet) Imply Model Security o rn L \

Reference 58

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.671015Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.591586Z digest=sha256:660d1255e038d5a3a306d7eb1296ed007d1cf22d6f3a56a45ebb6480e3e8f01a

Observation c71de213-5962-4ade-9f81-d59fbdaa5b8f · outbound

This paper cites Towards E valuating and T raining R erifiably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E valuating and T raining R erifiably R obust N eural N etworks

Reference 59

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.351514Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.712521Z digest=sha256:589ba194c1919f26c6e49a9b743db407f48275db60755687b4c0e1971d1f892f

Observation b0eefaad-058f-4155-8b3a-2c1eed43ec3d · outbound

This paper cites Towards D eep L earning M odels R esistant to A dversarial A ttacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards D eep L earning M odels R esistant to A dversarial A ttacks

Reference 60

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:18.067073Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.823383Z digest=sha256:21593b00929db64f80cf5d47574901a2ea9e13af714b820eea153a3560007751

Observation bf4f938a-abe9-428e-9e4b-2503520597bc · outbound

This paper cites Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval.

Position: Certified Robustness Does Not (Yet) Imply Model Security Dataset D iversity: M easuring and M itigating G eographical B ias in I mage S earch and R etrieval

Reference 61

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.847721Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:01.936545Z digest=sha256:97b5b722a77879dcb6b71a2baf8ca56cda99aa78f77f71b02ba7bebfcb8eea43

Observation fdfb4625-c741-459c-bd61-fce61f29652d · outbound

This paper cites Is Certifying $\ell_p$ Robustness Still Worthwhile?.

Position: Certified Robustness Does Not (Yet) Imply Model Security Is Certifying $\ell_p$ Robustness Still Worthwhile?

Reference 62

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:02.111831Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:02.111831Z digest=sha256:a934d302b54e70db45c6583b4f0a7747bd559d15a41388daa9cb0fe57d856394

Observation 73cad2c9-ce66-4949-977b-53ef46ad8e14 · outbound

This paper cites Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Mag N et: A T wo- P ronged D efense A gainst A dversarial E xamples

Reference 63

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.563823Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.257917Z digest=sha256:9217221558686570797057b7da194ffe7792b6e8c10ed255d830ed9c0fe53067

Observation 03ca042d-8d23-4190-b248-9fd21b6cec56 · outbound

This paper cites Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Differentiable A bstract I nterpretation for P rovably R obust N eural N etworks

Reference 64

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.297145Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.406963Z digest=sha256:50cd913a90f32290b37a138f3cad18d7544f6ebf8aef25dd96e4813432e8577b

Observation 64978c58-95a1-40cd-81a2-2eb6135f65a9 · outbound

This paper cites On S ignificance of the L east S ignificant B its for D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security On S ignificance of the L east S ignificant B its for D ifferential P rivacy

Reference 65

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:17.065784Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.522187Z digest=sha256:ef588c1d1b75b4472cbe6fa30f3805f18a6e91584e98960dbdd7674d78353af1

Observation 679e7f34-f412-4500-a566-ec23afdd99e4 · outbound

This paper cites Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards V erifying R obustness of N eural N etworks A gainst A F amily of S emantic P erturbations

Reference 66

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.850573Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.712085Z digest=sha256:fae1f4ed49836b98551c57b3eb2197596913ce1f0d52bec1c72995917cc5bce4

Observation 4b9ac994-fccc-49b9-bbbc-881991269c9e · outbound

This paper cites Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Deep F ool: A S imple and A ccurate M ethod to F ool D eep N eural N etworks

Reference 67

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.568053Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.859767Z digest=sha256:ac6e493fd345d37018aebb66ad384aa5570e26ebdad26e09e841ba36efa96753

Observation 26018a02-542a-4e90-b82e-29d6081946a3 · outbound

This paper cites Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Certified P olicy S moothing for C ooperative M ulti- A gent R einforcement L earning

Reference 68

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.264174Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:02.991995Z digest=sha256:de965c93661c48f7f9aaffabba212c70cbab3fbb2853ed463dec5e1a7b08615d

Observation 3f0b95e3-04db-43e9-9b1d-6870c49e6c2c · outbound

This paper cites The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results.

Position: Certified Robustness Does Not (Yet) Imply Model Security The Third International Verification of Neural Networks Competition (VNN-COMP 2022): Summary and Results

Reference 69

Resolution
unresolved
no resolver link, observed 2026-08-07T00:44:03.129488Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

source=arxiv_source observed=2026-08-07T00:44:03.129488Z digest=sha256:7ee14114a6608bd4474922e54d27656d7db3a4a2a3db69a29ff57c81ea548968

Observation a45f60d7-bb75-447e-a967-7f7307d1f77d · outbound

This paper cites Instance S paces for M achine L earning C lassification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Instance S paces for M achine L earning C lassification

Reference 70

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:16.019605Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.322040Z digest=sha256:3270be06e5068f50089cd8cf8524306c9420fc6d0ee1348b25bb0b474b9c3512

Observation 5e244b76-f6af-41bd-9d9e-80be11731611 · outbound

This paper cites AI Risk Management Framework (AI RMF) 1.0.

Position: Certified Robustness Does Not (Yet) Imply Model Security AI Risk Management Framework (AI RMF) 1.0

Reference 71

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.739778Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.444094Z digest=sha256:dd92f803331f543ddf998cc31fd07d35383dc1f1e263a668b3af6668d1e5f5c9

Observation 3d55f40c-17af-4c4d-9275-752ad8326661 · outbound

This paper cites The O pen D P W hite P aper.

Position: Certified Robustness Does Not (Yet) Imply Model Security The O pen D P W hite P aper

Reference 72

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.479301Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.574216Z digest=sha256:e99426ff5033496ffa62c8ac032c7e47bc87b3c2b37d1e5d0a9dce791c4f23fd

Observation 3b7b0378-6553-4ef6-ab52-e1edec9c9cd6 · outbound

This paper cites The limitations of deep learning in adversarial settings.

Position: Certified Robustness Does Not (Yet) Imply Model Security The limitations of deep learning in adversarial settings

Reference 73

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:15.048822Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.764544Z digest=sha256:84c927ec14241efb303d061f010f12bac4bc56f4899ef26f8516be0c36024930

Observation af3e2c7a-e67c-4c24-b415-98270657625f · outbound

This paper cites Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Distillation as a D efense to A dversarial P erturbations against D eep N eural N etworks

Reference 74

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.788538Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:03.893390Z digest=sha256:e48c451a0ac7810cb5f0e38af7077d01ea92041001f23eed97933c7b4140ff11

Observation edca459c-0af5-49e3-a142-aafd7b4f9c77 · outbound

This paper cites Practical B lack- B ox A ttacks against M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security Practical B lack- B ox A ttacks against M achine L earning

Reference 75

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.505729Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.044941Z digest=sha256:e913996ece19e297d9227fae7cbb61cf5d39197990ddecb9d12ea34614bffde3

Observation 85a5bd81-bc05-4beb-bec9-1bb224d1a11f · outbound

This paper cites Playing the Game of Universal Adversarial Perturbations.

Position: Certified Robustness Does Not (Yet) Imply Model Security Playing the Game of Universal Adversarial Perturbations

Reference 76

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:08.227652Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.186104Z digest=sha256:846f740db88fa0ca8be9159e8b5bb92b23031007e105599813b1ff8a78c3c6c5

Observation 2d19e063-3b34-47b1-ad64-5a4429fb7fa7 · outbound

This paper cites an unresolved cited work.

Position: Certified Robustness Does Not (Yet) Imply Model Security Unresolved cited work

Reference 77

Resolution
unresolved
raw_fallback, observed 2026-08-07T00:44:14.283134Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.372797Z digest=sha256:2fbadc50e32f38d9c071fc8e21a81df8ee047603c5fbeb3663499bdd50ae0a3e

Observation 65ad6063-27c1-46ff-9dea-6cded413d3b6 · outbound

This paper cites Imagenet L arge S cale V isual R ecognition C hallenge.

Position: Certified Robustness Does Not (Yet) Imply Model Security Imagenet L arge S cale V isual R ecognition C hallenge

Reference 78

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:14.012463Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.491871Z digest=sha256:dd304157c567ad9039f0b690d4f2e99b026170a1e98187dcc15269dd0618a7d7

Observation 40a881eb-397d-418e-9bff-b4ab41b8dc82 · outbound

This paper cites Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers.

Position: Certified Robustness Does Not (Yet) Imply Model Security Provably R obust D eep L earning via A dversarially T rained S moothed C lassifiers

Reference 79

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.802312Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.610720Z digest=sha256:120f123ba1574ceb7c55fcbb0bba54e592495ef8d33f86b20df714f7b69b98a1

Observation 2f3a950c-58e5-4465-8abf-9566a85dc5ae · outbound

This paper cites A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security A C onvex R elaxation B arrier to T ight R obustness V erification of N eural N etworks

Reference 80

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.544017Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.758198Z digest=sha256:dc8d9a3edfc5afcf2e3ab84e08568faafd1a07031a5f363239dab41da6f60598

Observation 1ad92bf6-9483-494d-9651-5980b3d5e302 · outbound

This paper cites Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound.

Position: Certified Robustness Does Not (Yet) Imply Model Security Formal V erification for N eural N etworks with G eneral N onlinearities via B ranch- A nd- B ound

Reference 81

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:13.222826Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:04.911695Z digest=sha256:09f9fb01bc0fee755d1738aaf78772c00ebdf8332d442eafa250d287129f21d0

Observation bd212a7b-91c1-40ed-9714-abc5449bc591 · outbound

This paper cites Fast and E ffective R obustness C ertification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Fast and E ffective R obustness C ertification

Reference 82

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.984188Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.037794Z digest=sha256:95c1c5a494a8a32a037dd21635e59da1356963a646e8404cfbc045f395e1fed6

Observation 1e121935-a6b0-4e2d-a056-d3b40456ed11 · outbound

This paper cites An A bstract D omain for C ertifying N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security An A bstract D omain for C ertifying N eural N etworks

Reference 83

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.824716Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.202288Z digest=sha256:15920c1391608d695013492e6a2a1c5d55fcb28fef90682ec73fd1b27297bba1

Observation ef75589d-9b18-454f-9614-5d22364aeaff · outbound

This paper cites Understanding R isks of P rivacy T heater with D ifferential P rivacy.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding R isks of P rivacy T heater with D ifferential P rivacy

Reference 84

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.674576Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.353619Z digest=sha256:4752492122a08a7c75b28ccb440207ac17edba8e6e36ac17ed05a353a56b127a

Observation cdc09798-42f1-4546-aaac-e1588ce6b779 · outbound

This paper cites Understanding TSP D ifficulty by L earning from E volved I nstances.

Position: Certified Robustness Does Not (Yet) Imply Model Security Understanding TSP D ifficulty by L earning from E volved I nstances

Reference 85

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.490448Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.502054Z digest=sha256:8611d1073f3ebd4d036dc5cc24fd33e2c6036350d60c36f860bf4bfbfd6eb65c

Observation a9935a73-37ce-4a4e-ac31-7ffa6dfec873 · outbound

This paper cites Cullen, and Benjamin I.P.

Position: Certified Robustness Does Not (Yet) Imply Model Security Cullen, and Benjamin I.P

Reference 86

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.291349Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.608620Z digest=sha256:143f4b9423ad2fe4c0696da8da89345c2073530c50af3afbb235f1da8e972d9d

Observation 93edb3aa-0986-4ed0-a7a9-d69485ed668d · outbound

This paper cites Intriguing P roperties of N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Intriguing P roperties of N eural N etworks

Reference 87

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:12.051888Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.777669Z digest=sha256:3c7b3a663dc80e1b79d5482e27ca8d555144caaedeee23daf45af142ce6343f6

Observation c4bcb770-24fd-46fd-b603-bcf7c2b6a375 · outbound

This paper cites Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Lipschitz- M argin T raining: S calable C ertification of P erturbation I nvariance for D eep N eural N etworks

Reference 88

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.883970Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:05.894033Z digest=sha256:22fc91f70b8f8a7a91d264403631afd8559a6a23183582ee762b25a1348a6ced

Observation e982f0e8-0ce5-49b8-acf1-362596d663e4 · outbound

This paper cites Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification.

Position: Certified Robustness Does Not (Yet) Imply Model Security Beta- CROWN : E fficient B ound P ropagation with P er- N euron S plit C onstraints for N eural N etwork R obustness V erification

Reference 89

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.747975Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.028432Z digest=sha256:1e9c73e7fe6760fe818e25bf96b72fb41f9e0f77bae8825307af8006af4fbb66

Observation db70ca01-8cda-4f0b-9e4b-004324f00d71 · outbound

This paper cites Towards F ast C omputation of C ertified R obustness for R e LU N etworks.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards F ast C omputation of C ertified R obustness for R e LU N etworks

Reference 90

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.517799Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.171655Z digest=sha256:291cada4311bf22c12803c53169b028717bbc94d51842c8fb3faafebf250a2f4

Observation 251618a8-f297-4142-86f9-716ca981dce1 · outbound

This paper cites COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks.

Position: Certified Robustness Does Not (Yet) Imply Model Security COPA: Certifying Robust Policies for Offline Reinforcement Learning against Poisoning Attacks

Reference 91

Resolution
verified exact
local_arxiv, observed 2026-08-07T00:44:07.892575Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.336873Z digest=sha256:ee444c39b958d000c9ea790d0eb1fc3ee8bb32c6fe4fe7fbac9e510c9d239231

Observation 946cff58-4c37-4cc2-9953-a7907a9587c5 · outbound

This paper cites Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors.

Position: Certified Robustness Does Not (Yet) Imply Model Security Making an I nvisibility C loak: R eal W orld A dversarial A ttacks on O bject D etectors

Reference 92

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:11.254767Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.500370Z digest=sha256:9b875ff240c19aef16927a14b1f908b1804919731140502215085efcdcd3fa13

Observation 1eafc73d-65a5-4e82-901c-6a5bba6dde30 · outbound

This paper cites Spatially T ransformed A dversarial E xamples.

Position: Certified Robustness Does Not (Yet) Imply Model Security Spatially T ransformed A dversarial E xamples

Reference 93

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.964546Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.655922Z digest=sha256:30475eee8e299ca370e8e8ebdd5f6abade1b54fe9d68decf99fb370ff90410f6

Observation 48f3fd9d-29e9-43a0-a05c-15e80d670406 · outbound

This paper cites Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension.

Position: Certified Robustness Does Not (Yet) Imply Model Security Towards E ffective D ifferential P rivacy C ommunication for U sers’ D ata S haring D ecision and C omprehension

Reference 94

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.680317Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.815848Z digest=sha256:e1cbd6f437e63e378731f34db53aad5f3cad268298c9445c60224b5a11050b04

Observation a49a79dc-b5d6-41a7-8833-941f8a821c22 · outbound

This paper cites Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond.

Position: Certified Robustness Does Not (Yet) Imply Model Security Automatic P erturbation A nalysis for S calable C ertified R obustness and B eyond

Reference 95

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.360779Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:06.974416Z digest=sha256:986d869361adbddb7c6cb03ddf7725c6603b1ef9c91ae66a8e527a1b02810674

Observation 18928d75-3cc4-4c69-86cf-1046c0947976 · outbound

This paper cites Randomized S moothing of A ll S hapes and S izes.

Position: Certified Robustness Does Not (Yet) Imply Model Security Randomized S moothing of A ll S hapes and S izes

Reference 96

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:10.112431Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.132781Z digest=sha256:f84a7d5137a78e3c1d336eaa22d98c0836807bd726a07f08f3b0785cfeb626c2

Observation 6abfca14-d837-432a-bc52-91161014df03 · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 97

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.845695Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.281854Z digest=sha256:848412809504fc4966d12f43ae4cd7664f58ef5dd54b2d1f02a24737440b725a

Observation 6889ea0c-5f15-477b-bc4a-f20141c92dbf · outbound

This paper cites Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions.

Position: Certified Robustness Does Not (Yet) Imply Model Security Efficient N eural N etwork R obustness C ertification with G eneral A ctivation F unctions

Reference 98

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.530014Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.475253Z digest=sha256:c501c9d3e3ba0e78578f31a7e2690124e92bb3e7546125262c962af1700b5399

Observation d2f459ea-33aa-47bf-96ea-fd5897a0a5f2 · outbound

This paper cites A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning.

Position: Certified Robustness Does Not (Yet) Imply Model Security A S urvey of G ame T heoretic A pproach for A dversarial M achine L earning

Reference 99

Resolution
verified fuzzy
raw_fallback, observed 2026-08-07T00:44:09.188483Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.

source=arxiv_source observed=2026-08-07T00:44:07.593011Z digest=sha256:c2a93053b7a7234f07c4bf8dfc9eadee1ffb515f7d354dc446d907820bf8f701

Pith citing papers

No inbound Pith citation observations are available.