An Adaptive View of Adversarial Robustness from Test-time Smoothing Defense

P. Perona and J. Malik, “Scale-space and edge detection using anisotropic diffusion,”

1990

Earlier work this paper cites.

C. Tomasi and R. Manduchi, “Bilateral filtering for gray and color images.,” in

1998

Earlier work this paper cites.

A. Yezzi, “Modified curvature motion for image smoothing and enhancement.,”

1998

Earlier work this paper cites.

A. Buades, B. Coll, and J.-M. Morel, “A non-local algorithm for image denoising,” in

2005

Earlier work this paper cites.

S. Paris, P. Kornprobst, J. Tumblin, and F. Durand, “A gentle introduction to bilateral filtering and its applications,” in

2007

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,”

Original

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,”

Original

2014

Earlier work this paper cites.

I. Lenz, H. Lee, and A. Saxena, “Deep learning for detecting robotic grasps,”

2015

Earlier work this paper cites.

O. Russakovsky, J. Deng, H. Su, J. Krause, S. Satheesh, S. Ma, Z. Huang, A. Karpathy, A. Khosla, M. Bernstein, A. C. Berg, and L. Fei-Fei, “ImageNet Large Scale Visual Recognition Challenge,”

2015

Earlier work this paper cites.

M. Bojarski, D. Del Testa, D. Dworakowski, B. Firner, B. Flepp, P. Goyal, L. D. Jackel, M. Monfort, U. Muller, J. Zhang,

Original

2016

Earlier work this paper cites.

N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z. B. Celik, and A. Swami, “The limitations of deep learning in adversarial settings,” in

2016

Cited alongside, same era.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” in

2016

Cited alongside, same era.

S.-M. Moosavi-Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” in

2016

Cited alongside, same era.

S. Kumra and C. Kanan, “Robotic grasp detection using deep convolutional neural networks,” in

2017

Cited alongside, same era.

J. Mahler, J. Liang, S. Niyaz, M. Laskey, R. Doan, X. Liu, J. A. Ojea, and K. Goldberg, “Dex-net 2.0: Deep learning to plan robust grasps with synthetic point clouds and analytic grasp metrics,”

Original

2017

Cited alongside, same era.

U. Jang, X. Wu, and S. Jha, “Objective metrics and gradient descent algorithms for adversarial examples in machine learning,” in

Original

2017

Later among the works it cites.

C. Xie, Y. Wu, L. van der Maaten, A. Yuille, and K. He, “Feature denoising for improving adversarial robustness,”

Original

2018

Later among the works it cites.

J. Gomes, “Adversarial attacks and defences for convolutional neural networks,” 2018

2018

Later among the works it cites.

X. Huang, D. Kroening, M. Kwiatkowska, W. Ruan, Y. Sun, E. Thamo, M. Wu, and X. Yi, “Safety and trustworthiness of deep neural networks: A survey,”

Original

2018

Later among the works it cites.

M.-I. Nicolae, M. Sinn, M. N. Tran, A. Rawat, M. Wistuba, V. Zantedeschi, N. Baracaldo, B. Chen, H. Ludwig, I. Molloy, and B. Edwards, “Adversarial robustness toolbox v0.8.0,”