On the Limitation of MagNet Defense against $L_1$-based Adversarial Examples

A. Beck and M. Teboulle, “A fast iterative shrinkage-thresholding algorithm for linear inverse problems,” SIAM journal on imaging sciences , vol. 2, no. 1, pp. 183–202, 2009

2009

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” ICLR’15; arXiv preprint arXiv:1412.6572 , 2015

Original

2015

Earlier work this paper cites.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial examples in the physical world,” arXiv preprint arXiv:1607.02533 , 2016

Original

2016

Earlier work this paper cites.

Y. Liu, X. Chen, C. Liu, and D. Song, “Delving into transferable adversarial examples and black-box attacks,” arXiv preprint arXiv:1611.02770 , 2016

Original

2016

Earlier work this paper cites.

N. Papernot, P. McDaniel, and I. Goodfellow, “Transferability in machine learning: from phenomena to black-box attacks using adversarial samples,” arXiv preprint arXiv:1605.07277 , 2016

Original

2016

Earlier work this paper cites.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial machine learning at scale,” ICLR’17; arXiv preprint arXiv:1611.01236 , 2016

Original

2016

Earlier work this paper cites.

S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , 2016, pp. 2574–2582

2016

Cited alongside, same era.

I. Evtimov, K. Eykholt, E. Fernandes, T. Kohno, B. Li, A. Prakash, A. Rahmati, and D. Song, “Robust physical-world attacks on machine learning models,” arXiv preprint arXiv:1707.08945 , 2017

Original

2017

Cited alongside, same era.

A. Athalye and I. Sutskever, “Synthesizing robust adversarial examples,” arXiv preprint arXiv:1707.07397 , 2017

Original

2017

Cited alongside, same era.

N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z. B. Celik, and A. Swami, “Practical black-box attacks against machine learning,” in ACM Asia Conference on Computer and Communications Security , 2017, pp. 506–519

2017

Cited alongside, same era.

D. Meng and H. Chen, “Magnet: a two-pronged defense against adversarial examples,” ACM CCS , 2017

2017

Later among the works it cites.

N. Carlini and D. Wagner, “Magnet and” efficient defenses against adversarial attacks” are not robust to adversarial examples,” arXiv preprint arXiv:1711.08478 , 2017

Original

2017

Later among the works it cites.

Y. Sharma and P.-Y. Chen, “Attacking the Madry defense model with L 1 L_{1} -based adversarial examples,” ICLR Workshop; arXiv:1710.10733 , 2018

Original

2018

Closest in time.

P.-H. Lu, P.-Y. Chen, and C.-M. Yu, “On the limitation of local intrinsic dimensionality for characterizing the subspaces of adversarial examples,” ICLR Workshop; arXiv:1803.09638 , 2018

Original

2018

Closest in time.

A. Athalye, N. Carlini, and D. Wagner, “Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,” arXiv preprint arXiv:1802.00420 , 2018