Fetching the paper…
Reading the bibliography…
Many machine learning models are vulnerable to adversarial attacks; for example, adding adversarial perturbations that are imperceptible to humans can often make machine learning models produce wrong predictions with high confidence.
Efficient agnostic learning of neural networks with bounded fan-in
Wee Sun Lee, Peter L Bartlett, and Robert C Williamson · 1996
Earlier work this paper cites.
The sample complexity of pattern classification with neural networks: the size of the weights is more important than the size of the network
Peter L Bartlett · 1998
Earlier work this paper cites.
Gradient-based learning applied to document recognition
Yann LeCun, Léon Bottou, Yoshua Bengio, and Patrick Haffner · 1998
Earlier work this paper cites.
Neural network learning: Theoretical foundations
Martin Anthony and Peter L Bartlett · 1999
Earlier work this paper cites.
Rademacher and Gaussian complexities: Risk bounds and structural results
Peter L Bartlett and Shahar Mendelson · 2002
Earlier work this paper cites.
Local rademacher complexities and oracle inequalities in risk minimization
Vladimir Koltchinskii et al · 2006
Earlier work this paper cites.
Robust optimization
Aharon Ben-Tal, Laurent El Ghaoui, and Arkadi Nemirovski · 2009
Earlier work this paper cites.
Foundations of machine learning
Mehryar Mohri, Afshin Rostamizadeh, and Ameet Talwalkar · 2012
Earlier work this paper cites.
Robustness and generalization
Huan Xu and Shie Mannor · 2012
Earlier work this paper cites.
Speech recognition with deep recurrent neural networks
Alex Graves, Abdel-rahman Mohamed, and Geoffrey Hinton · 2013
Earlier work this paper cites.
Probability in Banach Spaces: isoperimetry and processes
Michel Ledoux and Michel Talagrand · 2013
Earlier work this paper cites.
Intriguing properties of neural networks
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2013
Earlier work this paper cites.
Neural machine translation by jointly learning to align and translate
Dzmitry Bahdanau, Kyunghyun Cho, and Yoshua Bengio · 2014
Earlier work this paper cites.
Explaining and harnessing adversarial examples
Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy · 2014
Earlier work this paper cites.
Towards deep neural network architectures robust to adversarial examples
Shixiang Gu and Luca Rigazio · 2014
Earlier work this paper cites.
Learning with a strong adversary
Ruitong Huang, Bing Xu, Dale Schuurmans, and Csaba Szepesvári · 2015
Earlier work this paper cites.
Rademacher complexity margin bounds for learning with a large number of classes
Vitaly Kuznetsov, Mehryar Mohri, and U Syed · 2015
Earlier work this paper cites.
Uri Shaham, Yutaro Yamada, and Sahand Negahban · 2015
Cited alongside, same era.
Tensorflow: a system for large-scale machine learning
Martín Abadi, Paul Barham, Jianmin Chen, Zhifeng Chen, Andy Davis, Jeffrey Dean, Matthieu Devin, Sanjay Ghemawat, Geoffrey Irving, Michael Isard, et al · 2016
Cited alongside, same era.
Defensive distillation is not robust to adversarial examples
Nicholas Carlini and David Wagner · 2016
Cited alongside, same era.
Robustness of classifiers: from adversarial to random noise
Alhussein Fawzi, Seyed-Mohsen Moosavi-Dezfooli, and Pascal Frossard · 2016
Cited alongside, same era.
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun · 2016
Cited alongside, same era.
Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples
Anish Athalye, Nicholas Carlini, and David Wagner · 2018
Closest in time.
Improved generalization bounds for robust learning
Idan Attias, Aryeh Kontorovich, and Yishay Mansour · 2018
Closest in time.
Adversarial examples from computational constraints
Sébastien Bubeck, Eric Price, and Ilya Razenshteyn · 2018
Closest in time.
Audio adversarial examples: Targeted attacks on speech-to-text
Nicholas Carlini and David Wagner · 2018
Closest in time.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Tight risk bounds for multi-class margin classifiers
Yu Maximov and Daria Reshetova · 2016
Cited alongside, same era.
Towards the science of security and privacy in machine learning
Nicolas Papernot, Patrick McDaniel, Arunesh Sinha, and Michael Wellman · 2016
Cited alongside, same era.
Mastering the game of go with deep neural networks and tree search
David Silver, Aja Huang, Chris J Maddison, Arthur Guez, Laurent Sifre, George Van Den Driessche, Julian Schrittwieser, Ioannis Antonoglou, Veda Panneershelvam, Marc Lanctot, et al · 2016
Cited alongside, same era.
Spectrally-normalized margin bounds for neural networks
Peter L Bartlett, Dylan J Foster, and Matus J Telgarsky · 2017
Cited alongside, same era.
Adversarial examples are not easily detected: Bypassing ten detection methods
Nicholas Carlini and David Wagner · 2017
Cited alongside, same era.
A rotation and a translation suffice: Fooling CNNs with simple transformations
Logan Engstrom, Dimitris Tsipras, Ludwig Schmidt, and Aleksander Madry · 2017
Cited alongside, same era.
Size-independent sample complexity of neural networks
Noah Golowich, Alexander Rakhlin, and Ohad Shamir · 2017
Cited alongside, same era.
Daniel Cullina, Arjun Nitin Bhagoji, and Prateek Mittal · 2018
Closest in time.
Limitations of adversarial robustness: strong no free lunch theorem
Elvis Dohmatob · 2018
Closest in time.
Generalizable adversarial training via spectral normalization
Farzan Farnia, Jesse M Zhang, and David Tse · 2018
Closest in time.
Adversarial vulnerability for any classifier
Alhussein Fawzi, Hamza Fawzi, and Omar Fawzi · 2018
Closest in time.
Adversarial risk bounds for binary classification via function transformation
Justin Khim and Po-Ling Loh · 2018
Closest in time.
Adversarial examples for generative models
Jernej Kos, Ian Fischer, and Dawn Song · 2018
Closest in time.
Saeed Mahloujifar, Dimitrios I Diochnos, and Mohammad Mahmoody · 2018
Closest in time.
A mean field view of the landscape of two-layers neural networks
Song Mei, Andrea Montanari, and Phan-Minh Nguyen · 2018
Closest in time.
Adversarially robust generalization requires more data
Ludwig Schmidt, Shibani Santurkar, Dimitris Tsipras, Kunal Talwar, and Aleksander Madry · 2018
Closest in time.
Certifying some distributional robustness with principled adversarial training
Aman Sinha, Hongseok Namkoong, and John Duchi · 2018
Closest in time.
On adversarial risk and training
Arun Sai Suggala, Adarsh Prasad, Vaishnavh Nagarajan, and Pradeep Ravikumar · 2018
Closest in time.
Robustness may be at odds with accuracy
Dimitris Tsipras, Shibani Santurkar, Logan Engstrom, Alexander Turner, and Aleksander Madry · 2018
Closest in time.
Scaling provable adversarial defenses
Eric Wong, Frank Schmidt, Jan Hendrik Metzen, and J Zico Kolter · 2018
Closest in time.