1. N. Dalvi, P. Domingos, Mausam, S. Sumit, D. Verma, Adversarial classification, in: KDD-2004 – Proceedings of the Tenth ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, 2004, pp. 99–108.
2. C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, R. Fergus, Intriguing properties of neural networks, in: International Conference on Learning Representations, (ICLR), 2014.
3. I.J. Goodfellow, J. Shlens, C. Szegedy, Explaining and harnessing adversarial examples, in: 3rd International Conference on Learning Representations, (ICLR), 2015.
4. The Security of Machine Learning Systems;Muñoz-González,2018
5. The security of machine learning;Barreno;Mach. Learn.,2010