Adversarial Perturbations Prevail in the Y-Channel of the YCbCr Color Space

W. T. Freeman, T. R. Jones, and E. C. Pasztor, “Example-based super-resolution,” IEEE Computer graphics and Applications , no. 2, pp. 56–65, 2002

2002

Earlier work this paper cites.

C. Poynton, “Chroma subsampling notation,” Retrieved June , vol. 19, p. 2004, 2002

2002

Earlier work this paper cites.

S. C. Park, M. K. Park, and M. G. Kang, “Super-resolution image reconstruction: a technical overview,” IEEE signal processing magazine , vol. 20, no. 3, pp. 21–36, 2003

2003

Earlier work this paper cites.

E. Hamilton, “Jpeg file interchange format version 1.02, sep. 1, 1992,” C-Cube Microsystem, Milpitas, CA , 2004

2004

Earlier work this paper cites.

A. Buades, B. Coll, and J.-M. Morel, “A non-local algorithm for image denoising,” in 2005 IEEE Computer Society Conference on Computer Vision and Pattern Recognition (CVPR’05) , vol. 2. IEEE, 2005, pp. 60–65

2005

Earlier work this paper cites.

H. Greenspan, “Super-resolution in medical imaging,” The Computer Journal , vol. 52, no. 1, pp. 43–63, 2008

2008

Earlier work this paper cites.

J. Deng, W. Dong, R. Socher, L.-J. Li, K. Li, and L. Fei-Fei, “ImageNet: A Large-Scale Hierarchical Image Database,” in CVPR09 , 2009

2009

Earlier work this paper cites.

L. Zhang, H. Zhang, H. Shen, and P. Li, “A super-resolution reconstruction algorithm for surveillance images,” Signal Processing , vol. 90, no. 3, pp. 848–859, 2010

2010

Earlier work this paper cites.

A. Krizhevsky, I. Sutskever, and G. E. Hinton, “Imagenet classification with deep convolutional neural networks,” in Advances in neural information processing systems , 2012, pp. 1097–1105

2012

Earlier work this paper cites.

C. Szegedy et al. , “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

I. J. Goodfellow et al. , “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” arXiv preprint arXiv:1409.1556 , 2014

Original

2014

Earlier work this paper cites.

S. Gu and L. Rigazio, “Towards deep neural network architectures robust to adversarial examples. 2014,” arXiv preprint arXiv:1412.5068 , 2014

Original

2014

Earlier work this paper cites.

C. Lyu, K. Huang, and H.-N. Liang, “A unified gradient regularization family for adversarial examples,” in 2015 IEEE International Conference on Data Mining . IEEE, 2015, pp. 301–309

2015

Earlier work this paper cites.

S. Schulter, C. Leistner, and H. Bischof, “Fast and accurate image upscaling with super-resolution forests,” in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , 2015, pp. 3791–3799

2015

Earlier work this paper cites.

O. Ronneberger, P. Fischer, and T. Brox, “U-net: Convolutional networks for biomedical image segmentation,” in International Conference on Medical image computing and computer-assisted intervention . Springer, 2015, pp. 234–241

2015

Earlier work this paper cites.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial machine learning at scale,” arXiv preprint arXiv:1611.01236 , 2016

Original

2016

Earlier work this paper cites.

N. Narodytska and S. P. Kasiviswanathan, “Simple black-box adversarial perturbations for deep networks,” arXiv preprint arXiv:1612.06299 , 2016

Original

2016

Earlier work this paper cites.

G. K. Dziugaite, Z. Ghahramani, and D. M. Roy, “A study of the effect of jpg compression on adversarial images,” arXiv preprint arXiv:1608.00853 , 2016

Original

2016

Earlier work this paper cites.

W. Shi, J. Caballero, F. Huszár, J. Totz, A. P. Aitken, R. Bishop, D. Rueckert, and Z. Wang, “Real-time single image and video super-resolution using an efficient sub-pixel convolutional neural network,” in Proceedings of the IEEE conference on computer vision and pattern recognition , 2016, pp. 1874–1883

2016

Earlier work this paper cites.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” in Proceedings of the IEEE conference on computer vision and pattern recognition , 2016, pp. 770–778

2016

Cited alongside, same era.

F. Tramèr, A. Kurakin, N. Papernot, I. Goodfellow, D. Boneh, and P. McDaniel, “Ensemble adversarial training: Attacks and defenses,” arXiv preprint arXiv:1705.07204 , 2017

Original

2017

Cited alongside, same era.

C. Guo, M. Rana, M. Cisse, and L. Van Der Maaten, “Countering adversarial images using input transformations,” arXiv preprint arXiv:1711.00117 , 2017

Original

2017

Cited alongside, same era.

C. Xie, J. Wang, Z. Zhang, Y. Zhou, L. Xie, and A. Yuille, “Adversarial examples for semantic segmentation and object detection,” in Proceedings of the IEEE International Conference on Computer Vision , 2017, pp. 1369–1378

2017

Cited alongside, same era.

J. Rony, L. G. Hafemann, L. S. Oliveira, I. B. Ayed, R. Sabourin, and E. Granger, “Decoupling direction and norm for efficient gradient-based l2 adversarial attacks and defenses,” in The IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , June 2019

2019

Later among the works it cites.

N. B. Erichson, Z. Yao, and M. W. Mahoney, “Jumprelu: A retrofit defense strategy for adversarial attacks,” arXiv preprint arXiv:1904.03750 , 2019

Original

2019

Later among the works it cites.

C. Xie, Y. Wu, L. v. d. Maaten, A. L. Yuille, and K. He, “Feature denoising for improving adversarial robustness,” in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition , 2019, pp. 501–509

2019

Later among the works it cites.

E. Raff, J. Sylvester, S. Forsyth, and M. McLean, “Barrage of random transforms for adversarially robust defense,” in The IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , June 2019

2019

Later among the works it cites.