SentiNet: Detecting Localized Universal Attacks Against Deep Learning Systems

Y. LeCun, Y. Bengio et al. , “Convolutional networks for images, speech, and time series,” The handbook of brain theory and neural networks , 1995

1995

Earlier work this paper cites.

G. B. Huang, M. Ramesh, T. Berg, and E. Learned-Miller, “Labeled faces in the wild: A database for studying face recognition in unconstrained environments,” University of Massachusetts, Amherst, Tech. Rep. 07-49, October 2007

2007

Earlier work this paper cites.

A. R. C. K. S. P. L. Toint, “On the convergence of derivative-free methods for unconstrained optimization,” in Approximation theory and optimization: tributes to MJD Powell. , 2007, pp. 83–108

2007

Earlier work this paper cites.

J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei, “ImageNet: A Large-Scale Hierarchical Image Database,” in CVPR09 , 2009

2009

Earlier work this paper cites.

X. Glorot, A. Bordes, and Y. Bengio, “Deep sparse rectifier neural networks,” in AISTATS , 2011

2011

Earlier work this paper cites.

Y. Bengio, “Deep learning of representations for unsupervised and transfer learning,” in Proceedings of ICML Workshop on Unsupervised and Transfer Learning , 2012, pp. 17–36

2012

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. J. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” CoRR , vol. abs/1312.6199, 2013. [Online]. Available: http://arxiv.org/abs/1312.6199

Original

2013

Earlier work this paper cites.

J. R. Uijlings, K. E. Sande, T. Gevers, and A. W. Smeulders, “Selective search for object recognition,” Int. J. Comput. Vision , vol. 104, no. 2, pp. 154–171, Sep. 2013. [Online]. Available: http://dx.doi.org/10.1007/s11263-013-0620-5

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and Harnessing Adversarial Examples,” ArXiv e-prints , Dec. 2014

2014

Earlier work this paper cites.

A. Møgelmose, D. Liu, and M. M. Trivedi, “Traffic sign detection for u.s. roads: Remaining challenges and a case for tracking,” in 17th International IEEE Conference on Intelligent Transportation Systems (ITSC) , Oct 2014, pp. 1394–1399

2014

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” CoRR , vol. abs/1409.1556, 2014. [Online]. Available: http://arxiv.org/abs/1409.1556

Original

2014

Earlier work this paper cites.

C. Szegedy, W. Liu, Y. Jia, P. Sermanet, S. E. Reed, D. Anguelov, D. Erhan, V. Vanhoucke, and A. Rabinovich, “Going deeper with convolutions,” CoRR , vol. abs/1409.4842, 2014. [Online]. Available: http://arxiv.org/abs/1409.4842

Original

2014

Earlier work this paper cites.

R. B. Girshick, “Fast R-CNN,” CoRR , vol. abs/1504.08083, 2015. [Online]. Available: http://arxiv.org/abs/1504.08083

Original

2015

Earlier work this paper cites.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” CoRR , vol. abs/1512.03385, 2015. [Online]. Available: http://arxiv.org/abs/1512.03385

Original

2015

Earlier work this paper cites.

Y. LeCun, Y. Bengio, and G. Hinton, “Deep learning,” Nature , 2015

2015

Earlier work this paper cites.

S. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” CoRR , vol. abs/1511.04599, 2015. [Online]. Available: http://arxiv.org/abs/1511.04599

Original

2015

Earlier work this paper cites.

O. M. Parkhi, A. Vedaldi, and A. Zisserman, “Deep face recognition,” in British Machine Vision Conference , 2015

2015

Earlier work this paper cites.

J. Redmon, S. K. Divvala, R. B. Girshick, and A. Farhadi, “You only look once: Unified, real-time object detection,” CoRR , vol. abs/1506.02640, 2015. [Online]. Available: http://arxiv.org/abs/1506.02640

Original

2015

Earlier work this paper cites.

S. Ren, K. He, R. B. Girshick, and J. Sun, “Faster R-CNN: towards real-time object detection with region proposal networks,” CoRR , vol. abs/1506.01497, 2015. [Online]. Available: http://arxiv.org/abs/1506.01497

Original

2015

Earlier work this paper cites.

M. Goldstein and S. Uchida, “A comparative evaluation of unsupervised anomaly detection algorithms for multivariate data,” PLOS ONE , vol. 11, no. 4, pp. 1–31, 04 2016. [Online]. Available: https://doi.org/10.1371/journal.pone.0152173

2016

Cited alongside, same era.

D. Hendrycks and K. Gimpel, “Early Methods for Detecting Adversarial Images,” ArXiv e-prints , Aug. 2016

2016

Cited alongside, same era.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial examples in the physical world,” arXiv preprint arXiv:1607.02533 , 2016

Original

2016

Cited alongside, same era.

S. Moosavi-Dezfooli, A. Fawzi, O. Fawzi, and P. Frossard, “Universal adversarial perturbations,” CoRR , vol. abs/1610.08401, 2016. [Online]. Available: http://arxiv.org/abs/1610.08401

Original

2016

Cited alongside, same era.

J. Redmon and A. Farhadi, “YOLO9000: better, faster, stronger,” CoRR , vol. abs/1612.08242, 2016. [Online]. Available: http://arxiv.org/abs/1612.08242

D. Meng and H. Chen, “Magnet: a two-pronged defense against adversarial examples,” CoRR , vol. abs/1705.09064, 2017. [Online]. Available: http://arxiv.org/abs/1705.09064

Original

2017

Later among the works it cites.

X. Yuan, P. He, Q. Zhu, R. R. Bhat, and X. Li, “Adversarial examples: Attacks and defenses for deep learning,” CoRR , vol. abs/1712.07107, 2017. [Online]. Available: http://arxiv.org/abs/1712.07107

Original

2017

Later among the works it cites.

N. Akhtar and A. Mian, “Threat of adversarial attacks on deep learning in computer vision: A survey,” CoRR , vol. abs/1801.00553, 2018. [Online]. Available: http://arxiv.org/abs/1801.00553

Original

2018

Closest in time.

A. Athalye, N. Carlini, and D. Wagner, “Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples,” arXiv preprint arXiv:1802.00420 , 2018

Original

2018

Closest in time.