1. Explaining and harnessing adversarial examples;Goodfellow;ICLR,2015
2. Intriguing properties of neural networks;Szegedy;ICLR,2014
3. Towards Evaluating the Robustness of Neural Networks
4. Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks;Croce;ICML,2020