Cross-Entropy Loss and Low-Rank Features Have Responsibility for Adversarial Examples

Signature verification using a ”siamese” time delay neural network

Bromley, J., W. Bentz, J., Bottou, L., Guyon, I., Lecun, Y., Moore, C., Sackinger, E., and Shah, R · 1993

Earlier work this paper cites.

A fast iterative nearest point algorithm for support vector machine classifier design

Keerthi, S., Shevade, S. K., Bhattacharyya, C., and Murthy, K · 1999

Earlier work this paper cites.

Learning a similarity metric discriminatively, with application to face verification

Chopra, S., Hadsell, R., and LeCun, Y · 2005

Earlier work this paper cites.

Online learning of maximum p-norm margin classifiers with bias

Ishibashi, K., Hatano, K., and Takeda, M · 2008

Earlier work this paper cites.

The elements of statistical learning: data mining, inference and prediction

Hastie, T., Tibshirani, R., and Friedman, J · 2009

Earlier work this paper cites.

Imagenet classification with deep convolutional neural networks

Krizhevsky, A., Sutskever, I., and Hinton, G. E · 2012

Earlier work this paper cites.

Intriguing properties of neural networks

Original

Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I. J., and Fergus, R · 2013

Earlier work this paper cites.

Very deep convolutional networks for large-scale image recognition

Original

Simonyan, K. and Zisserman, A · 2014

Earlier work this paper cites.

Explaining and harnessing adversarial examples

Goodfellow, I., Shlens, J., and Szegedy, C · 2015

Earlier work this paper cites.

Delving deep into rectifiers: Surpassing human-level performance on imagenet classification

He, K., Zhang, X., Ren, S., and Sun, J · 2015

Cited alongside, same era.

Siamese neural networks for one-shot image recognition

Koch, G., Zemel, R., and Salakhutdinov, R · 2015

Cited alongside, same era.

Deep residual learning for image recognition

He, K., Zhang, X., Ren, S., and Sun, J · 2016

Cited alongside, same era.

Adversarial machine learning at scale

Original

Kurakin, A., Goodfellow, I., and Bengio, S · 2016

Cited alongside, same era.

Spectrally-normalized margin bounds for neural networks

Bartlett, P. L., Foster, D. J., and Telgarsky, M. J · 2017

Cited alongside, same era.

Towards evaluating the robustness of neural networks

Carlini, N. and Wagner, D · 2017

Understanding deep learning requires rethinking generalization

Zhang, C., Bengio, S., Hardt, M., Recht, B., and Vinyals, O · 2017

Later among the works it cites.

Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples

Athalye, A., Carlini, N., and Wagner, D · 2018

Later among the works it cites.

Towards deep learning models resistant to adversarial attacks

Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A · 2018

Later among the works it cites.

Implicit self-regularization in deep neural networks: Evidence from random matrix theory and implications for learning

Original

Martin, C. H. and Mahoney, M. W · 2018

Later among the works it cites.

Sparsity-based Defense against Adversarial Attacks on Linear Classifiers

Marzi, Z., Gopalakrishnan, S., Madhow, U., and Pedarsani, R · 2018

Later among the works it cites.