Global Robustness Evaluation of Deep Neural Networks with Provable Guarantees for the $L_0$ Norm

Pulina, L., Tacchella, A.: An abstraction-refinement approach to verification of artificial neural networks. In: CAV 2010. pp. 243–257 (2010)

2010

Earlier work this paper cites.

Krizhevsky, A., Sutskever, I., Hinton, G.E.: ImageNet classification with deep convolutional neural networks. In: Advances in neural information processing systems. pp. 1097–1105 (2012)

2012

Earlier work this paper cites.

Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)

Original

2014

Earlier work this paper cites.

Simonyan, K., Zisserman, A.: Very deep convolutional networks for large-scale image recognition. arXiv preprint arXiv:1409.1556 (2014)

Original

2014

Earlier work this paper cites.

Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: Intriguing properties of neural networks. In: In ICLR. Citeseer (2014)

2014

Earlier work this paper cites.

Miyato, T., Maeda, S.i., Koyama, M., Nakae, K., Ishii, S.: Distributional smoothing with virtual adversarial training. arXiv preprint arXiv:1507.00677 (2015)

Original

2015

Earlier work this paper cites.

He, K., Zhang, X., Ren, S., Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE conference on computer vision and pattern recognition. pp. 770–778 (2016)

2016

Earlier work this paper cites.

Kurakin, A., Goodfellow, I., Bengio, S.: Adversarial examples in the physical world. arXiv preprint arXiv:1607.02533 (2016)

Original

2016

Earlier work this paper cites.

Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: DeepFool: a simple and accurate method to fool deep neural networks. In: CVPR 2016. pp. 2574–2582 (2016)

2016

Earlier work this paper cites.

Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. In: EuroS&P 2016. pp. 372–387. IEEE (2016)

2016

Earlier work this paper cites.

Carlini, N., Katz, G., Barrett, C., Dill, D.L.: Ground-truth adversarial examples. arXiv preprint arXiv:1709.10207 (2017)

Original

2017

Earlier work this paper cites.

Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: Security and Privacy (SP), 2017 IEEE Symposium on. pp. 39–57. IEEE (2017)

2017

Cited alongside, same era.

Dutta, S., Jha, S., Sanakaranarayanan, S., Tiwari, A.: Output range analysis for deep neural networks. arXiv preprint arXiv:1709.09130 (2017)

Original

2017

Cited alongside, same era.

Huang, X., Kwiatkowska, M., Wang, S., Wu, M.: Safety verification of deep neural networks. In: CAV 2017. pp. 3–29 (2017)

2017

Cited alongside, same era.

Katz, G., Barrett, C., Dill, D., Julian, K., Kochenderfer, M.: Reluplex: An efficient SMT solver for verifying deep neural networks. In: CAV 2017 (2017)

2017

Cited alongside, same era.

Lomuscio, A., Maganti, L.: An approach to reachability analysis for feed-forward relu neural networks. CoRR abs/1706.07351

Original

Gopinath, D., Katz, G., Pasareanu, C.S., Barrett, C.: DeepSafe: A data-driven approach for checking adversarial robustness in neural networks. In: Automated Technology for Verification and Analysis (ATVA). LNCS, vol. 11138, pp. 3–19. Springer (2018)

2018

Closest in time.

Mirman, M., Gehr, T., Vechev, M.: Differentiable abstract interpretation for provably robust neural networks. In: International Conference on Machine Learning. pp. 3575–3583 (2018)

2018

Closest in time.

Olah, C., Satyanarayan, A., Johnson, I., Carter, S., Schubert, L., Ye, K., Mordvintsev, A.: The building blocks of interpretability. Distill (2018). https://doi.org/10.23915/distill.00010, https://distill.pub/2018/building-blocks

2018

Closest in time.

Ruan, W., Huang, X., Kwiatkowska, M.: Reachability analysis of deep neural networks with provable guarantees. The 27th International Joint Conference on Artificial Intelligence (IJCAI’18) (2018)

2018

Closest in time.