1. Boosting adversarial training with hypersphere embedding;pang;Advances in neural information processing systems,2020
2. Towards deep learning models resistant to adversarial attacks;madry,2017
3. There is no free lunch in adversarial robustness (but there are unexpected benefits);tsipras,2018
4. Audio Adversarial Examples: Targeted Attacks on Speech-to-Text
5. Adversarial machine learning at scale;kurakin,2016