1. A fast and elitist multiobjective genetic algorithm: NSGA-II
2. Do adversarially robust imagenet models transfer better?;salman;Advances in Neural Information Processing Systems 33 Annual Conference on Neural Information Processing Systems 2020 NeurIPS 2020,2020
3. Bayesopt adversarial attack;ru;8th International Conference on Learning Representations ICLR 2020,2020
4. Greedyfool: Distortion-aware sparse adversarial attack;dong;Advances in Neural Information Processing Systems 33 Annual Conference on Neural Information Processing Systems 2020 NeurIPS 2020,2020