1. Patchguard: Provable defense against adversarial patches using masks on small receptive fields;xiang;CoRR,2020
2. Making an invisibility cloak: Real world adversarial attacks on object detectors;wu;Computer Vision - ECCV 2020 – 16th European Conference,2020
3. Intriguing properties of neural networks;szegedy;2nd International Conference on Learning Representations ICLR 2014,2014
4. ImageNet Large Scale Visual Recognition Challenge