How the Softmax Output is Misleading for Evaluating the Strength of Adversarial Examples

Probabilistic interpretation of feedforward classification network outputs, with relationships to statistical pattern recognition

J. S. Bridle · 1990

Earlier work this paper cites.

Gradient-based learning applied to document recognition

Y. LeCun, L. Bottou, Y. Bengio, and P. Haffner · 1998

Earlier work this paper cites.

Pattern Recognition and Machine Learning

C. M. Bishop · 2006

Earlier work this paper cites.

Imagenet classification with deep convolutional neural networks

A. Krizhevsky, I. Sutskever, and G. E. Hinton · 2012

Earlier work this paper cites.

Intriguing properties of neural networks

Original

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus · 2013

Earlier work this paper cites.

Very deep convolutional networks for large-scale image recognition

Original

K. Simonyan and A. Zisserman · 2014

Earlier work this paper cites.

Deep neural networks are easily fooled: High confidence predictions for unrecognizable images

A. Nguyen, J. Yosinski, and J. Clune · 2015

Cited alongside, same era.

The limitations of deep learning in adversarial settings

Original

N. Papernot, P. D. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami · 2015

Cited alongside, same era.

You only look once: Unified, real-time object detection

Original

J. Redmon, S. K. Divvala, R. B. Girshick, and A. Farhadi · 2015

Cited alongside, same era.

U-net: Convolutional networks for biomedical image segmentation

O. Ronneberger, P. Fischer, and T. Brox · 2015

Cited alongside, same era.

ImageNet Large Scale Visual Recognition Challenge

O. Russakovsky, J. Deng, H. Su, J. Krause, S. Satheesh, S. Ma, Z. Huang, A. Karpathy, A. Khosla, M. Bernstein, A. C. Berg, and L. Fei-Fei · 2015

Cited alongside, same era.

Deep Learning

I. Goodfellow, Y. Bengio, and A. Courville · 2016

Later among the works it cites.

Deep residual learning for image recognition

K. He, X. Zhang, S. Ren, and J. Sun · 2016

Later among the works it cites.

Adversarial examples in the physical world

Original

A. Kurakin, I. Goodfellow, and S. Bengio · 2016

Later among the works it cites.

Adversarial examples are not easily detected: Bypassing ten detection methods

Original

N. Carlini and D. A. Wagner · 2017

Later among the works it cites.

On the properties of the softmax function with application in game theory and reinforcement learning

Original

B. Gao and L. Pavel · 2017

Later among the works it cites.