Q. V. Vo, T. M. Haq, P. Montague, T. Abraham, E. Abbasnejad, and D. C. Ranasinghe, “Certified but Fooled! Breaking Certified Defenses with Ghost Certificates”, AAAI, vol. 40, no. 12, pp. 9621–9629, Mar. 2026.