Formal Guarantees on the Robustness of a Classifier against Adversarial Manipulation

Double backpropagation increasing generalization performance

H. Drucker and Y. Le Cun · 1992

Earlier work this paper cites.

Simplifying neural nets by discovering flat minima

S. Hochreiter and J. Schmidhuber · 1995

Earlier work this paper cites.

Learning with Kernels

B. Schölkopf and A. J. Smola · 2002

Earlier work this paper cites.

Adversarial classification

N. Dalvi, P. Domingos, Mausam, S. Sanghai, and D. Verma · 2004

Earlier work this paper cites.

Adversarial learning

D. Lowd and C. Meek · 2005

Earlier work this paper cites.

Man vs. computer: Benchmarking machine learning algorithms for traffic sign recognition

J. Stallkamp, M. Schlipsing, J. Salmen, and C. Igel · 2012

Earlier work this paper cites.

Dropout: A simple way to prevent neural networks from overfitting

N. Srivastava, G. Hinton, A. Krizhevsky, I. Sutskever, and R. Salakhutdinov · 2014

Earlier work this paper cites.

Intriguing properties of neural networks

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2014

Earlier work this paper cites.

Explaining and harnessing adversarial examples

I. J. Goodfellow, J. Shlens, and C. Szegedy · 2015

Earlier work this paper cites.

Towards deep neural network architectures robust to adversarial examples

S. Gu and L. Rigazio · 2015

Cited alongside, same era.

On the inductive bias of dropout

D. P. Helmbold and P. Long · 2015

Cited alongside, same era.

Tensorflow: Large-scale machine learning on heterogeneous distributed systems, 2016

M. Abadi, A. Agarwal, P. Barham, E. Brevdo, Z. Chen, C. Citro, G. S. Corrado, A. Davis, J. Dean, M. Devin, S. Ghemawat, I. J. Goodfellow, A. Harp, G. Irving, M. Isard, Y. Jia, R. Józefowicz, L. Kaiser, M. Kudlur, J. Levenberg, D. Mané, R. Monga, S. Moore, D. G. Murray, C. Olah, M. Schuster, J. Shlens, B. Steiner, I. Sutskever, K. Talwar, P. A. Tucker, V. Vanhoucke, V. Vasudevan, F. B. Viégas, O. Vinyals, P. Warden, M. Wattenberg, M. Wicke, Y. Yu, and X. Zheng · 2016

Cited alongside, same era.

Measuring neural net robustness with constraints

O. Bastani, Y. Ioannou, L. Lampropoulos, D. Vytiniotis, A. Nori, and A. Criminisi · 2016

Cited alongside, same era.

Deep residual learning for image recognition

K. He, X. Zhang, S. Ren, and J. Sun · 2016

Cited alongside, same era.

Understanding adversarial training: Increasing local stability of neural nets through robust optimization

U. Shaham, Y. Yamada, and S. Negahban · 2016

Later among the works it cites.

Improving the robustness of deep neural networks via stability training

S. Zheng, Y. Song, T. Leung, and I. J. Goodfellow · 2016

Later among the works it cites.

Adversarial examples are not easily detected: Bypassing ten detection methods

N. Carlini and D. Wagner · 2017

Closest in time.

Parseval networks: Improving robustness to adversarial examples

M. Cisse, P. Bojanowksi, E. Grave, Y. Dauphin, and N. Usunier · 2017

Closest in time.

Adversarial examples for generative models

J. Kos, I. Fischer, and D. Song · 2017

Closest in time.

Adversarial examples in the physical world

A. Kurakin, I. J. Goodfellow, and S. Bengio · 2017