Adversarial training and robustness for multiple perturbations
Original
Florian Tramèr and Dan Boneh · 1904
Earlier work this paper cites.
Transfer of adversarial robustness between perturbation types
Original
Daniel Kang, Yi Sun, Tom Brown, Dan Hendrycks, and Jacob Steinhardt · 1905
Earlier work this paper cites.
Improving robustness without sacrificing accuracy with patch gaussian augmentation
Original
Raphael Gontijo Lopes, Dong Yin, Ben Poole, Justin Gilmer, and Ekin D. Cubuk · 1906
Earlier work this paper cites.
Self-training with noisy student improves imagenet classification
Original
Qizhe Xie, Eduard Hovy, Minh-Thang Luong, and Quoc V. Le · 1911
Earlier work this paper cites.
Deep blue
Murray Campbell, A. Joseph Hoane, Jr., and Feng-hsiung Hsu · 2002
Earlier work this paper cites.
Intriguing properties of neural networks
Original
Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus · 2013
Earlier work this paper cites.
Imagenet large scale visual recognition challenge
Original
Olga Russakovsky, Jia Deng, Hao Su, Jonathan Krause, Sanjeev Satheesh, Sean Ma, Zhiheng Huang, Andrej Karpathy, Aditya Khosla, Michael S. Bernstein, Alexander C. Berg, and Fei-Fei Li · 2014
Earlier work this paper cites.
Adam: A method for stochastic optimization
Original
Diederik P Kingma and Jimmy Ba · 2014
Earlier work this paper cites.
Human-level control through deep reinforcement learning
Volodymyr Mnih, Koray Kavukcuoglu, David Silver, Andrei A Rusu, Joel Veness, Marc G Bellemare, Alex Graves, Martin Riedmiller, Andreas K Fidjeland, Georg Ostrovski, et al · 2015
Earlier work this paper cites.
Deep residual learning for image recognition
Kaiming He, Xiangyu Zhang, Shaoqing Ren, and Jian Sun · 2016
Earlier work this paper cites.
Achieving human parity in conversational speech recognition
Wayne Xiong, Jasha Droppo, Xuedong Huang, Frank Seide, Mike Seltzer, Andreas Stolcke, Dong Yu, and Geoffrey Zweig · 2016
Earlier work this paper cites.
Understanding how image quality affects deep neural networks
Samuel Fuller Dodge and Lina J. Karam · 2016
Earlier work this paper cites.
Robustness of classifiers: from adversarial to random noise
Alhussein Fawzi, Seyed-Mohsen Moosavi-Dezfooli, and Pascal Frossard · 2016
Earlier work this paper cites.
Mastering the game of go without human knowledge
David Silver, Julian Schrittwieser, Karen Simonyan, Ioannis Antonoglou, Aja Huang, Arthur Guez, Thomas Hubert, L Robert Baker, Matthew Lai, Adrian Bolton, Yutian Chen, Timothy P. Lillicrap, Fan Fong Celine Hui, Laurent Sifre, George van den Driessche, Thore Graepel, and Demis Hassabis · 2017
Earlier work this paper cites.
Universal adversarial perturbations
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard · 2017
Earlier work this paper cites.
Machine learning as an adversarial service: Learning black-box adversarial examples
Original
Jamie Hayes and George Danezis · 2017
Earlier work this paper cites.