L. Jing, R. Wang, J. Zhong, R. Li, and Z. Zhu, “False Positives Matter: Multidimensional Localization Evaluation and Training-Free Explainable Adversarial Patch Defense”, AAAI, vol. 40, no. 7, pp. 5557–5565, Mar. 2026.