1. Imagenet classification with deep convolutional neural networks;Krizhevsky,2012
2. Intriguing properties of neural networks;Szegedy,2014
3. Explaining and harnessing adversarial examples;Goodfellow,2015
4. A. Kurakin, I. Goodfellow, S. Bengio, Adversarial examples in the physical world, arXiv preprint arXiv:1607.02533 (2016).
5. Towards evaluating the robustness of neural networks;Carlini,2017