Adversarial Profiles: Detecting Out-Distribution & Adversarial Samples in Pre-trained CNNs

Y. LeCun, “The mnist database of handwritten digits,” http://yann. lecun. com/exdb/mnist/ , 1998

1998

Earlier work this paper cites.

A. Krizhevsky and G. Hinton, “Learning multiple layers of features from tiny images,” Citeseer, Tech. Rep., 2009

Original

2009

Earlier work this paper cites.

Y. Netzer, T. Wang, A. Coates, A. Bissacco, B. Wu, and A. Y. Ng, “Reading digits in natural images with unsupervised feature learning,” 2011

2011

Earlier work this paper cites.

A. Krizhevsky, I. Sutskever, and G. E. Hinton, “Imagenet classification with deep convolutional neural networks,” in Advances in neural information processing systems , 2012, pp. 1097–1105

2012

Earlier work this paper cites.

I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572 , 2014

Original

2014

Earlier work this paper cites.

F. Yu, Y. Zhang, S. Song, A. Seff, and J. Xiao, “Lsun: Construction of a large-scale image dataset using deep learning with humans in the loop,” arXiv preprint arXiv:1506.03365 , 2015

Original

2015

Earlier work this paper cites.

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, “Distillation as a defense to adversarial perturbations against deep neural networks,” Proceedings of the 37th IEEE Symposium on Security and Privacy , 2016

2016

Cited alongside, same era.

S. M. Moosavi Dezfooli, A. Fawzi, and P. Frossard, “Deepfool: a simple and accurate method to fool deep neural networks,” in IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , 2016

2016

Cited alongside, same era.

K. Lee, H. Lee, K. Lee, and J. Shin, “Training confidence-calibrated classifiers for detecting out-of-distribution samples,” arXiv preprint arXiv:1711.09325 , 2017

Original

2017

Cited alongside, same era.

D. Meng and H. Chen, “Magnet: a two-pronged defense against adversarial examples,” in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security . ACM, 2017, pp. 135–147

2017

Cited alongside, same era.

N. Carlini and D. Wagner, “Towards evaluating the robustness of neural networks,” in Security and Privacy (SP), 2017 IEEE Symposium on . IEEE, 2017, pp. 39–57

2017

Later among the works it cites.

A. Kurakin, I. Goodfellow, and S. Bengio, “Adversarial examples in the physical world,” International Conference on Learning Representations , 2017

2017

Later among the works it cites.

M. Abbasi, A. Rajabi, C. Gagné, and R. B. Bobba, “Towards dependable deep convolutional neural networks (cnns) with out-distribution learning,” Dependable and Secure Machine Learning(DSML) Workshop , 2018

2018

Later among the works it cites.

W. Xu, D. Evans, and Y. Qi, “Feature squeezing: Detecting adversarial examples in deep neural networks,” Network and Distributed System Security Symposium , 2018

2018

Later among the works it cites.

S. Dathathri, S. Zheng, R. M. Murray, and Y. Yue, “Detecting adversarial examples via neural fingerprinting,” arXiv preprint arXiv:1803.03870 , 2018