1. Explaining and harnessing adversarial examples;Goodfellow;arXiv:1412.6572,2014
2. Adversarial machine learning at scale;Kurakin
3. Theoretically principled trade-off between robustness and accuracy;Zhang
4. Unlabeled data improves adversarial robustness;Carmon,2019
5. Encryption Inspired Adversarial Defense For Visual Classification