Adversarial Vulnerability Bounds for Gaussian Process Classification

Mode-finding for mixtures of Gaussian distributions

Miguel A. Carreira-Perpinan · 2000

Earlier work this paper cites.

Sparse Gaussian processes using pseudo-inputs

Edward Snelson and Zoubin Ghahramani · 2006

Earlier work this paper cites.

Gaussian processes for machine learning

Christopher KI Williams and Carl Edward Rasmussen · 2006

Earlier work this paper cites.

Imagenet classification with deep convolutional neural networks

Alex Krizhevsky, Ilya Sutskever, and Geoffrey E Hinton · 2012

Earlier work this paper cites.

Evasion attacks against machine learning at test time

Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim Srndic, Pavel Laskov, Giorgio Giacinto, and Fabio Roli · 2013

Earlier work this paper cites.

Deep Gaussian processes

Andreas Damianou and Neil Lawrence · 2013

Earlier work this paper cites.

A continuation approach to mode-finding of multivariate Gaussian mixtures and kernel density estimates

Seppo Pulkkinen, Marko Mikael Mäkelä, and Napsu Karmitsa · 2013

Earlier work this paper cites.

Intriguing properties of neural networks

Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2014

Earlier work this paper cites.

The limitations of deep learning in adversarial settings

Nicolas Papernot, Patrick McDaniel, Somesh Jha, Matt Fredrikson, Z Berkay Celik, and Ananthram Swami · 2016

Cited alongside, same era.

Distillation as a defense to adversarial perturbations against deep neural networks

Nicolas Papernot, Patrick McDaniel, Xi Wu, Somesh Jha, and Ananthram Swami · 2016

Cited alongside, same era.

Towards evaluating the robustness of neural networks

Nicholas Carlini and David Wagner · 2017

Cited alongside, same era.

Provably minimally-distorted adversarial examples

Original

Nicholas Carlini, Guy Katz, Clark Barrett, and David L Dill · 2017

Cited alongside, same era.

Yes, machine learning can be more secure! A case study on Android malware detection

Ambra Demontis, Marco Melis, Battista Biggio, Davide Maiorca, Daniel Arp, Konrad Rieck, Igino Corona, Giorgio Giacinto, and Fabio Roli · 2017

Cited alongside, same era.

Lower bounds on the robustness to adversarial perturbations

Jonathan Peck, Joris Roels, Bart Goossens, and Yvan Saeys · 2017

Later among the works it cites.

Towards deep learning models resistant to adversarial attacks

Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu · 2018

Later among the works it cites.

Improving the adversarial robustness and interpretability of deep neural networks by regularizing their input gradients

Andrew Slavin Ross and Finale Doshi-Velez · 2018

Later among the works it cites.

Rogue signs: Deceiving traffic sign recognition with malicious ads and logos

Original

Chawin Sitawarin, Arjun Nitin Bhagoji, Arsalan Mosenia, Prateek Mittal, and Mung Chiang · 2018

Later among the works it cites.

Provable defenses against adversarial examples via the convex outer adversarial polytope

Eric Wong and Zico Kolter · 2018

Later among the works it cites.