1. Audio adversarial examples: Targeted attacks on speech-to-text;Carlini,2018
2. Rethinking and improving robustness of convolutional neural networks: a Shapley value-based approach in frequency domain;Chen,2022
3. Croce, F., & Hein, M. (2020). Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks. In ICML.
4. On the connection between adversarial robustness and saliency map interpretability;Etmann,2019
5. Detecting adversarial samples from artifacts;Feinman,2017