Robustness of classifiers to uniform $\ell\_p$ and Gaussian noise

Theory of Probability

Bernstein, S. (1927) · 1927

Earlier work this paper cites.

A remark on stirling’s formula

Robbins, H. (1955) · 1955

Earlier work this paper cites.

The Asymptotic Theory of Extreme Order Statistics

Galambos, J. (1987) · 1987

Earlier work this paper cites.

The effect of lossy image compression on image classification

Paola, J. D. and Schowengerdt, R. A. (1995) · 1995

Earlier work this paper cites.

The MNIST database of handwritten digits

LeCun, Y., Cortes, C., and Burges, C. J. (1998) · 1998

Earlier work this paper cites.

A robust minimax approach to classification

Lanckriet, G., Ghaoui, L., Bhattacharyya, C., and Jordan, M. (2003) · 2003

Earlier work this paper cites.

Image quality assessment: from error visibility to structural similarity

Wang, Z., Bovik, A. C., Sheikh, H. R., and Simoncelli, E. P. (2004) · 2004

Earlier work this paper cites.

A probabilistic approach to the geometry of the

Barthe, F., Guédon, O., Mendelson, S., and Naor, A. (2005) · 2005

Earlier work this paper cites.

Handbook of image and video processing

Bovik, A. C. (2005) · 2005

Earlier work this paper cites.

Robustness and regularization of support vector machines

Xu, H., Caramanis, C., and Mannor, S. (2009) · 2009

Earlier work this paper cites.

Robust optimization in machine learning

Caramanis, C., Mannor, S., and Xu, H. (2012) · 2012

Cited alongside, same era.

Imagenet classification with deep convolutional neural networks

Krizhevsky, A., Sutskever, I., and Hinton, G. (2012) · 2012

Cited alongside, same era.

Evasion attacks against machine learning at test time

Biggio, B., Corona, I., Maiorca, D., Nelson, B., Šrndić, N., Laskov, P., Giacinto, G., and Roli, F. (2013) · 2013

Cited alongside, same era.

Caffe: Convolutional architecture for fast feature embedding

Jia, Y., Shelhamer, E., Donahue, J., Karayev, S., Long, J., Girshick, R., Guadarrama, S., and Darrell, T. (2014) · 2014

Cited alongside, same era.

Very deep convolutional networks for large-scale image recognition

Simonyan, K. and Zisserman, A. (2014) · 2014

Cited alongside, same era.

Intriguing properties of neural networks

Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., and Fergus, R. (2014) · 2014

Robustness of classifiers: from adversarial to random noise

Fawzi, A., Moosavi-Dezfooli, S., and Frossard, P. (2016) · 2016

Later among the works it cites.

Deep residual learning for image recognition

He, K., Zhang, X., Ren, S., and Sun, J. (2016) · 2016

Later among the works it cites.

Deepfool: a simple and accurate method to fool deep neural networks

Moosavi-Dezfooli, S.-M., Fawzi, A., and Frossard, P. (2016) · 2016

Later among the works it cites.

Adversarial manipulation of deep representations

Sabour, S., Cao, Y., Faghri, F., and Fleet, D. J. (2016) · 2016

Later among the works it cites.

Accessorize to a crime: Real and stealthy attacks on state-of-the-art face recognition

Sharif, M., Bhagavatula, S., Bauer, L., and Reiter, M. K. (2016) · 2016

Later among the works it cites.

Exploring the space of adversarial images

Tabacof, P. and Valle, E. (2016) · 2016