With Friends Like These, Who Needs Adversaries?

Differential Geometry of Curves and Surfaces

do Carmo, M.: · 1976

Earlier work this paper cites.

Histograms of oriented gradients for human detection

Dalal, N., Triggs, B.: · 2005

Earlier work this paper cites.

Compositional pattern producing networks: A novel abstraction of development

Stanley, K.O.: · 2007

Earlier work this paper cites.

Network in network

Lin, M., Chen, Q., Yan, S.: · 2013

Earlier work this paper cites.

Deep inside convolutional networks: Visualising image classification models and saliency maps

Original

Simonyan, K., Vedald, A., Zisserman, A.: · 2013

Earlier work this paper cites.

Intriguing properties of neural networks

Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., Fergus, R.: · 2014

Earlier work this paper cites.

Explaining and harnessing adversarial examples

Goodfellow, I., Shlens, J., Szegedy, C.: · 2015

Earlier work this paper cites.

Deep neural networks are easily fooled: High confidence predictions for unrecognizable images

Nguyen, A., Yosinski, J., Clune, J.: · 2015

Earlier work this paper cites.

Improving the adversarial robustness of convnets by reduction of input dimensionality (2015)

Maharaj, A.V.: · 2015

Earlier work this paper cites.

ImageNet Large Scale Visual Recognition Challenge

Russakovsky*, O., Deng*, J., Su, H., Krause, J., Satheesh, S., Ma, S., Huang, Z., Karpathy, A., Khosla, A., Bernstein, M., Berg, A.C., Fei-Fei, L.: · 2015

Cited alongside, same era.

Deepfool: a simple and accurate method to fool deep neural networks

Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: · 2016

Cited alongside, same era.

Adversarial manipulation of deep representations

Sabour*, S., Cao*, Y., Faghri, F., Fleet, D.J.: · 2016

Cited alongside, same era.

A theoretical framework for robustness of (deep) classifiers under adversarial noise

Original

Wang, B., Gao, J., Qi, Y.: · 2016

Cited alongside, same era.

A boundary tilting persepective on the phenomenon of adversarial examples

Original

Tanay, T., Griffin, L.: · 2016

Cited alongside, same era.

Mitigating adversarial effects through randomization

Original

Xie, C., Wang, J., Zhang, Z., Ren, Z., Yuille, A.L.: · 2017

Later among the works it cites.

Safetynet: Detecting and rejecting adversarial examples robustly

Lu, J., Issaranon, T., Forsyth, D.: · 2017

Later among the works it cites.

On detecting adversarial perturbations

Original

Metzen, J.H., Genewein, T., Fischer, V., Bischoff, B.: · 2017

Later among the works it cites.

Classification regions of deep neural networks

Original

Fawzi*, A., Moosavi-Dezfooli*, S.M., Frossard, P., Soatto, S.: · 2017

Later among the works it cites.

The robustness of deep networks: A geometrical perspective

Fawzi, A., Moosavi-Dezfooli, S.M., Frossard, P.: · 2017

Later among the works it cites.