Defensive Distillation is Not Robust to Adversarial Examples

The mnist database of handwritten digits

Y. LeCun and C. Cortes · 1998

Earlier work this paper cites.

Gradient-based learning applied to document recognition

Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner · 1998

Earlier work this paper cites.

Intriguing properties of neural networks

Original

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2013

Cited alongside, same era.

TensorFlow: Large-scale machine learning on heterogeneous systems, 2015

M. Abadi, A. Agarwal, P. Barham, E. Brevdo, Z. Chen, C. Citro, G. S. Corrado, A. Davis, J. Dean, M. Devin, S. Ghemawat, I. Goodfellow, A. Harp, G. Irving, M. Isard, Y. Jia, R. Jozefowicz, L. Kaiser, M. Kudlur, J. Levenberg, D. Mané, R. Monga, S. Moore, D. Murray, C. Olah, M. Schuster, J. Shlens, B. Steiner, I. Sutskever, K. Talwar, P. Tucker, V. Vanhoucke, V. Vasudevan, F. Viégas, O. Vinyals, P. Warden, M. Wattenberg, M. Wicke, Y. Yu, and X. Zheng · 2015

Cited alongside, same era.

Distillation as a defense to adversarial perturbations against deep neural networks

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami

Cited in the paper.

The limitations of deep learning in adversarial settings

N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami · 2016

Closest in time.