1. Characterizing adversarial subspaces using local intrinsic dimensionality;xingjun;arXiv preprint arXiv 1801 02613 (2018),0
2. Hausdorff's Grundzuge der Mengenlehre;henry,1920
3. Delving into transferable adversarial examples and black-box attacks;yanpei;arXiv preprint arXiv 1611 02770,0
4. Hierarchical clustering schemes
5. On the limitation of local intrinsic dimensionality for characterizing the subspaces of adversarial examples;pei-hsuan;arXiv preprint arXiv 1803 09638,2018