1. Intriguing properties of neural networks;Szegedy;arXiv preprint arXiv:1312.6199,2013
2. Explaining and harnessing adversarial examples;Goodfellow;arXiv preprint arXiv:1412.6572,2014
3. Deep fool: a simple and accurate method to fool deep neural networks;Moosavi-Dezfooli,2016
4. G-cap: Generic universal adversarial perturbation that fools rpn-based detectors;Wu,2019
5. Synthesizing robust adversarial examples;Athalye,2018