1. Polsf: Polsar image dataset on san francisco;liu;arXiv Image and Video Processing,2019
2. Practical black-box attacks against machine learning;papernot;arXiv Cryptography and Security,2016
3. On the robustness of semantic segmentation models to adversarial attacks;arnab;IEEE Transactions on Pattern Analysis and Machine Intelligence,2017