Extending Defensive Distillation

Y. LeCun et al. , “The mnist database of handwritten digits,” 1998

Original

1998

Earlier work this paper cites.

D. Lowd and C. Meek, “Adversarial learning,” in Proceedings of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining . ACM, 2005, pp. 641–647

2005

Earlier work this paper cites.

M. Barreno, B. Nelson, R. Sears, A. D. Joseph, and J. D. Tygar, “Can machine learning be secure?” in Proceedings of the 2006 ACM Symposium on Information, computer and communications security . ACM, 2006, pp. 16–25

2006

Earlier work this paper cites.

C. Szegedy et al. , “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

B. Biggio et al. , “Evasion attacks against machine learning at test time,” in Joint European Conference on Machine Learning and Knowledge Discovery in Databases . Springer, 2013, pp. 387–402

2013

Earlier work this paper cites.

I. J. Goodfellow et al. , “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

G. Hinton, O. Vinyals, and J. Dean, “Distilling the knowledge in a neural network,” arXiv preprint arXiv:1503.02531 , 2015

Original

2015

Earlier work this paper cites.

Y. Gal and Z. Ghahramani, “Dropout as a bayesian approximation: Representing model uncertainty in deep learning,” arXiv preprint arXiv:1506.02142 , vol. 2, 2015

Original

2015

Cited alongside, same era.

N. Papernot et al. , “Distillation as a defense to adversarial perturbations against deep neural networks,” in Security and Privacy (SP), 2016 IEEE Symposium on . IEEE, 2016, pp. 582–597

2016

Cited alongside, same era.

N. Papernot et al. , “The limitations of deep learning in adversarial settings,” in Security and Privacy (EuroS&P), 2016 IEEE European Symposium on . IEEE, 2016, pp. 372–387

2016

Cited alongside, same era.

N. Carlini et al. , “Towards evaluating the robustness of neural networks,” arXiv preprint arXiv:1608.04644 , 2016

Original

2016

Cited alongside, same era.

X. Huang, M. Kwiatkowska, S. Wang, and M. Wu, “Safety verification of deep neural networks,” arXiv preprint arXiv:1610.06940 , 2016

R. Feinman, R. R. Curtin, S. Shintre, and A. B. Gardner, “Detecting adversarial samples from artifacts,” arXiv preprint arXiv:1703.00410 , 2017

Original

2017

Closest in time.

K. Grosse, P. Manoharan, N. Papernot, M. Backes, and P. McDaniel, “On the (statistical) detection of adversarial examples,” arXiv preprint arXiv:1702.06280 , 2017

Original

2017

Closest in time.

H. Hosseini et al. , “Blocking transferability of adversarial examples in black-box learning systems,” arXiv preprint arXiv:1703.04318 , 2017

Original

2017

Closest in time.

N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z. B. Celik, and A. Swami, “Practical black-box attacks against machine learning,” in Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security . ACM, 2017, pp. 506–519

2017

Closest in time.