MAT: A Multi-strength Adversarial Training Method to Mitigate Adversarial Attacks

Built on

Image quality assessment: from error visibility to structural similarity
Original
Zhou Wang, Alan C Bovik, Hamid R Sheikh, and Eero P Simoncelli · 2004
Earlier work this paper cites.
Graph-based visual saliency
Jonathan Harel, Christof Koch, and Pietro Perona · 2007
Earlier work this paper cites.
Intriguing properties of neural networks
Original
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2013
Earlier work this paper cites.
Deep learning
Yann LeCun, Yoshua Bengio, and Geoffrey Hinton · 2015
Earlier work this paper cites.

Explaining and harnessing adversarial examples
Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy · 2015
Cited alongside, same era.
Transferability in machine learning: from phenomena to black-box attacks using adversarial samples
Original
Nicolas Papernot, Patrick McDaniel, and Ian J Goodfellow · 2016
Cited alongside, same era.
Robustness of deep convolutional neural networks for image recognition
Matej Uličnỳ, Jens Lundström, and Stefan Byttner · 2016
Cited alongside, same era.
Practical black-box attacks against machine learning
Nicolas Papernot, Patrick McDaniel, Ian J Goodfellow, Somesh Jha, Z Berkay Celik, and Ananthram Swami · 2017
Cited alongside, same era.

Adversarial machine learning at scale
Alexey Kurakin, Ian J Goodfellow, and Samy Bengio · 2017
Closest in time.
Towards evaluating the robustness of neural networks
Nicholas Carlini and David Wagner · 2017
Closest in time.
Parseval networks: Improving robustness to adversarial examples
Moustapha Cisse, Piotr Bojanowski, Edouard Grave, Yann Dauphin, and Nicolas Usunier · 2017
Closest in time.