Is AmI (Attacks Meet Interpretability) Robust to Adversarial Examples?

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” 2014

2014

Earlier work this paper cites.

N. Carlini and D. Wagner, “Adversarial examples are not easily detected: Bypassing ten detection methods,”

2017

Cited alongside, same era.

G. Tao, S. Ma, Y. Liu, and X. Zhang, “Attacks meet interpretability: Attribute-steered detection of adversarial samples,” in

2018

Later among the works it cites.