Adversarial examples in the physical world

Adversarial classification

Nilesh Dalvi, Pedro Domingos, Sumit Sanghai, Deepak Verma, et al · 2004

Earlier work this paper cites.

Deep neural networks for acoustic modeling in speech recognition

Geoffrey Hinton, Li Deng, Dong Yu, George Dahl, Abdel rahman Mohamed, Navdeep Jaitly, Andrew Senior, Vincent Vanhoucke, Patrick Nguyen, Tara Sainath, and Brian Kingsbury · 2012

Earlier work this paper cites.

ImageNet classification with deep convolutional neural networks

Alex Krizhevsky, Ilya Sutskever, and Geoffrey Hinton · 2012

Earlier work this paper cites.

Evasion attacks against machine learning at test time

Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim Šrndić, Pavel Laskov, Giorgio Giacinto, and Fabio Roli · 2013

Earlier work this paper cites.

Explaining and harnessing adversarial examples

Original

Ian J. Goodfellow, Jonathon Shlens, and Christian Szegedy · 2014

Cited alongside, same era.

Imagenet large scale visual recognition challenge

Original

Olga Russakovsky, Jia Deng, Hao Su, Jonathan Krause, Sanjeev Satheesh, Sean Ma, Zhiheng Huang, Andrej Karpathy, Aditya Khosla, Michael Bernstein, et al · 2014

Cited alongside, same era.

Intriguing properties of neural networks

Original

Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian J. Goodfellow, and Rob Fergus · 2014

Cited alongside, same era.

Neural machine translation by jointly learning to align and translate

Original

Dzmitry Bahdanau, Kyunghyun Cho, and Yoshua Bengio · 2015

Cited alongside, same era.

Exploiting machine learning to subvert your spam filter

Blaine Nelson, Marco Barreno, Fuching Jack Chi, Anthony D Joseph, Benjamin IP Rubinstein, Udam Saini, Charles A Sutton, J Doug Tygar, and Kai Xia

Cited in the paper.

Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samples

Original

N. Papernot, P. McDaniel, and I. Goodfellow

Cited in the paper.

Practical black-box attacks against deep learning systems using adversarial examples

Original

Nicolas Papernot, Patrick Drew McDaniel, Ian J. Goodfellow, Somesh Jha, Z. Berkay Celik, and Ananthram Swami

Cited in the paper.

Face recognition on consumer devices: Reflections on replay attacks

Daniel F Smith, Arnold Wiliem, and Brian C Lovell · 2015

Later among the works it cites.

Rethinking the inception architecture for computer vision

Original

Christian Szegedy, Vincent Vanhoucke, Sergey Ioffe, Jonathon Shlens, and Zbigniew Wojna · 2015

Later among the works it cites.

Hidden voice commands

Nicholas Carlini, Pratyush Mishra, Tavish Vaidya, Yuankai Zhang, Micah Sherr, Clay Shields, David Wagner, and Wenchao Zhou · 2016

Closest in time.

Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Mahmood Sharif, Sruti Bhagavatula, Lujo Bauer, and Michael K. Reiter · 2016

Closest in time.