MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples

Gradient-based learning applied to document recognition

Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner · 1998

Earlier work this paper cites.

Learning multiple layers of features from tiny images

A. Krizhevsky and G. Hinton · 2009

Earlier work this paper cites.

Rectified linear units improve restricted boltzmann machines

V. Nair and G. E. Hinton · 2010

Earlier work this paper cites.

Intriguing properties of neural networks

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2013

Earlier work this paper cites.

Delving into transferable adversarial examples and black-box attacks

Original

Y. Liu, X. Chen, C. Liu, and D. Song · 2016

Cited alongside, same era.

Towards evaluating the robustness of neural networks

N. Carlini and D. Wagner · 2017

Cited alongside, same era.

Towards deep learning models resistant to adversarial attacks

Original

A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu · 2017

Cited alongside, same era.

Generative adversarial nets

I. Goodfellow, J. Pouget-Abadie, M. Mirza, B. Xu, D. Warde-Farley, S. Ozair, A. Courville, and Y. Bengio

Cited in the paper.

Explaining and harnessing adversarial examples

Original

I. J. Goodfellow, J. Shlens, and C. Szegedy

Cited in the paper.

MagNet: a two-pronged defense against adversarial examples

Original

D. Meng and H. Chen · 2017

Closest in time.

APE-GAN: Adversarial Perturbation Elimination with GAN

Original

S. Shen, G. Jin, K. Gao, and Y. Zhang · 2017

Closest in time.

Efficient defenses against adversarial attacks

Original

V. Zantedeschi, M.-I. Nicolae, and A. Rawat · 2017

Closest in time.