1. Yuanhao Ban and Yinpeng Dong . 2022 . Pre-trained Adversarial Perturbations . In Proceedings of the 36th International Conference on Neural Information Processing Systems (NeurIPS'22) . Yuanhao Ban and Yinpeng Dong. 2022. Pre-trained Adversarial Perturbations. In Proceedings of the 36th International Conference on Neural Information Processing Systems (NeurIPS'22).
2. Universal Adversarial Attacks on Text Classifiers
3. Tom B. Brown , Dandelion Mané , Aurko Roy , Martín Abadi , and Justin Gilmer . 2017. Adversarial patch. arXiv preprint arXiv:1712.09665 ( 2017 ). Tom B. Brown, Dandelion Mané, Aurko Roy, Martín Abadi, and Justin Gilmer. 2017. Adversarial patch. arXiv preprint arXiv:1712.09665 (2017).
4. Nicholas Carlini and David Wagner . 2016. Defensive distillation is not robust to adversarial examples. arXiv preprint arXiv:1607.04311 ( 2016 ). Nicholas Carlini and David Wagner. 2016. Defensive distillation is not robust to adversarial examples. arXiv preprint arXiv:1607.04311 (2016).