Exploring the Space of Adversarial Images

C. Zhu, R. H. Byrd, P. Lu, and J. Nocedal, “Algorithm 778: L-bfgs-b: Fortran subroutines for large-scale bound-constrained optimization,” ACM Transactions on Mathematical Software (TOMS) , vol. 23, no. 4, pp. 550–560, 1997

1997

Earlier work this paper cites.

Y. LeCun, C. Cortes, and C. J. Burges, “The mnist database of handwritten digits,” 1998

1998

Earlier work this paper cites.

S. Boyd and L. Vandenberghe, Convex optimization . Cambridge university press, 2004

2004

Earlier work this paper cites.

J. Nocedal and S. Wright, Numerical optimization . Springer Science & Business Media, 2006

2006

Earlier work this paper cites.

A. K. Kaw, E. K. Kalu, and D. Nguyen, “Numerical methods with applications,” 2009

2009

Earlier work this paper cites.

J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei, “Imagenet: A large-scale hierarchical image database,” in Computer Vision and Pattern Recognition, 2009. CVPR 2009. IEEE Conference on . IEEE, 2009, pp. 248–255

2009

Earlier work this paper cites.

Y. Bengio, “Learning deep architectures for ai,” Foundations and trends® in Machine Learning , vol. 2, no. 1, pp. 1–127, 2009

2009

Earlier work this paper cites.

R. Collobert, K. Kavukcuoglu, and C. Farabet, “Torch7: A matlab-like environment for machine learning,” in BigLearn, NIPS Workshop , no. EPFL-CONF-192376, 2011

2011

Cited alongside, same era.

A. Krizhevsky, I. Sutskever, and G. E. Hinton, “Imagenet classification with deep convolutional neural networks,” in Advances in neural information processing systems , 2012, pp. 1097–1105

2012

Cited alongside, same era.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Cited alongside, same era.

P. Sermanet, D. Eigen, X. Zhang, M. Mathieu, R. Fergus, and Y. LeCun, “Overfeat: Integrated recognition, localization and detection using convolutional networks,” arXiv preprint arXiv:1312.6229 , 2013

Original

2013

Cited alongside, same era.

S. Sabour, Y. Cao, F. Faghri, and D. J. Fleet, “Adversarial manipulation of deep representations,” arXiv preprint arXiv:1511.05122 , 2015

Original

2015

Closest in time.

R. Bi, “Does deep learning have deep flaws?” http://www.kdnuggets.com/2014/06/deep-learning-deep-flaws.html

2015

Closest in time.

A. Fawzi, O. Fawzi, and P. Frossard, “Analysis of classifiers’ robustness to adversarial perturbations,” arXiv preprint arXiv:1502.02590 , 2015

Original

2015

Closest in time.

A. Nøkland, “Improving back-propagation by adding an adversarial gradient,” arXiv preprint arXiv:1510.04189 , 2015

Original

2015

Closest in time.

R. Huang, B. Xu, D. Schuurmans, and C. Szepesvari, “Learning with adversary,” arXiv preprint arXiv:1511.03034 , 2015

Original