1. Christian, S. et al.: Intriguing properties of neural networks. In: 2nd International Conference on Learning Representations, ICLR 2014 - Conference Track Proceedings (2014)
2. Goodfellow, I.J.; Shlens, J.; Szegedy, C.: Explaining and harnessing adversarial examples. In: 3rd International Conference on Learning Representations, ICLR 2015 - Conference Track Proceedings (2015)
3. Madry, A., et al.: Towards deep learning models resistant to adversarial attacks (2017) arXiv preprint arXiv:1706.06083
4. Nicholas, C.; David, W.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (sp). IEEE, pp. 39–57 (2017)
5. Moosavi-Dezfooli, S.-M.; Fawzi, A.; Frossard, P.: Deepfool: a simple and accurate method to fool deep neural networks. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 2574–2582 (2016)