Discretization based Solutions for Secure Machine Learning against Adversarial Attacks

Y. LeCun, “The mnist database of handwritten digits,” http://yann. lecun. com/exdb/mnist/ , 1998

1998

Earlier work this paper cites.

A. Krizhevsky, V. Nair, and G. Hinton, “Cifar-10 and cifar-100 datasets,” URl: https://www. cs. toronto. edu/kriz/cifar. html (vi sited on Mar. 1, 2016) , 2009

2009

Earlier work this paper cites.

J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei, “Imagenet: A large-scale hierarchical image database,” in Computer Vision and Pattern Recognition, 2009. CVPR 2009. IEEE Conference on . Ieee, 2009, pp. 248–255

2009

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

Y. LeCun, Y. Bengio, and G. Hinton, “Deep learning,” nature , vol. 521, no. 7553, p. 436, 2015

2015

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples. corr (2015).”

2015

Earlier work this paper cites.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial examples in the physical world,” arXiv preprint arXiv:1607.02533 , 2016

Original

2016

Earlier work this paper cites.

I. Hubara, M. Courbariaux, D. Soudry, R. El-Yaniv, and Y. Bengio, “Binarized neural networks,” in Advances in neural information processing systems , 2016, pp. 4107–4115

2016

Cited alongside, same era.

M. Rastegari, V. Ordonez, J. Redmon, and A. Farhadi, “Xnor-net: Imagenet classification using binary convolutional neural networks,” in European Conference on Computer Vision . Springer, 2016, pp. 525–542

2016

Cited alongside, same era.

A. Kurakin, I. J. Goodfellow, and S. Bengio, “Adversarial machine learning at scale,” ICLR , 2016

2016

Cited alongside, same era.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” in Proceedings of the IEEE conference on computer vision and pattern recognition , 2016, pp. 770–778

2016

Cited alongside, same era.

W. Xu, D. Evans, and Y. Qi, “Feature squeezing: Detecting adversarial examples in deep neural networks,” arXiv preprint arXiv:1704.01155 , 2017

C. Guo, M. Rana, M. Cisse, and L. van der Maaten, “Countering adversarial images using input transformations,” 2018

2018

Later among the works it cites.

J. Buckman, A. Roy, C. Raffel, and I. Goodfellow, “Thermometer encoding: One hot way to resist adversarial examples,” 2018

2018

Later among the works it cites.

J. Chen, X. Wu, Y. Liang, and S. Jha, “Improving adversarial robustness by data-specific discretization,” arXiv preprint arXiv:1805.07816 , 2018

Original

2018

Later among the works it cites.

A. Galloway, G. W. Taylor, and M. Moussa, “Attacking binarized neural networks,” ICLR , 2018

2018

Later among the works it cites.

F. Tramèr, A. Kurakin, N. Papernot, I. Goodfellow, D. Boneh, and P. McDaniel, “Ensemble adversarial training: Attacks and defenses,” ICLR , 2018

2018

Later among the works it cites.