Training robust neural networks using Lipschitz bounds

A. Krogh and J. A. Hertz, “A simple weight decay can improve generalization,” in Advances in Neural Information Processing Systems , 1992, pp. 950–957

1992

Earlier work this paper cites.

J. Löfberg, “Yalmip : A toolbox for modeling and optimization in matlab,” in In Proc. of the CACSD Conference , Taipei, Taiwan, 2004

2004

Earlier work this paper cites.

R. Collobert, J. Weston, L. Bottou, M. Karlen, K. Kavukcuoglu, and P. Kuksa, “Natural language processing (almost) from scratch,” Journal of machine learning research , vol. 12, no. Aug, pp. 2493–2537, 2011

2011

Earlier work this paper cites.

S. Boyd, N. Parikh, E. Chu, B. Peleato, J. Eckstein et al. , “Distributed optimization and statistical learning via the alternating direction method of multipliers,” Foundations and Trends® in Machine learning , vol. 3, no. 1, pp. 1–122, 2011

2011

Earlier work this paper cites.

A. Krizhevsky, I. Sutskever, and G. E. Hinton, “Imagenet classification with deep convolutional neural networks,” in Advances in Neural Information Processing Systems , 2012, pp. 1097–1105

2012

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” arXiv preprint arXiv:1312.6199 , 2013

Original

2013

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

Y. LeCun, Y. Bengio, and G. Hinton, “Deep learning,” Nature , vol. 521, no. 7553, pp. 436–444, 2015

2015

Earlier work this paper cites.

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, “Distillation as a defense to adversarial perturbations against deep neural networks,” in 2016 IEEE Symposium on Security and Privacy (SP) . IEEE, 2016, pp. 582–597

2016

Cited alongside, same era.

J.-P. Calliess, “Lazily adapted constant kinky inference for nonparametric regression and model-reference adaptive control,” arXiv preprint arXiv:1701.00178 , 2016

Original

2016

Cited alongside, same era.

J. D. Lee, M. Simchowitz, M. I. Jordan, and B. Recht, “Gradient descent only converges to minimizers,” in Conference on learning theory , 2016, pp. 1246–1257

2016

Cited alongside, same era.

A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu, “Towards deep learning models resistant to adversarial attacks,” arXiv preprint arXiv:1706.06083 , 2017

Original

2017

Cited alongside, same era.

Y. Tsuzuku, I. Sato, and M. Sugiyama, “Lipschitz-margin training: Scalable certification of perturbation invariance for deep neural networks,” in Advances in neural information processing systems , 2018, pp. 6541–6550

2018

Later among the works it cites.

H. Gouk, E. Frank, B. Pfahringer, and M. Cree, “Regularisation of neural networks by enforcing Lipschitz continuity,” arXiv preprint arXiv:1804.04368 , 2018

Original

2018

Later among the works it cites.

E. Maddalena and C. Jones, “Learning non-parametric models with guarantees: A smooth Lipschitz interpolation approach,” Tech. Rep., 2019

2019

Later among the works it cites.

M. Fazlyab, A. Robey, H. Hassani, M. Morari, and G. Pappas, “Efficient and accurate estimation of Lipschitz constants for deep neural networks,” in Advances in Neural Information Processing Systems , 2019, pp. 11 423–11 434

2019

Later among the works it cites.