1. Explaining and harnessing adversarial examples;Goodfellow
2. Intriguing properties of neural networks;Szegedy
3. Adversarial training for free!;Shafahi;Advances in Neural Information Processing Systems (NIPS),2019
4. Bag of Tricks for Adversarial Training;Pang
5. Adversarial robustness against the union of multiple perturbation models;Maini