1. Defending Against Universal Attacks Through Selective Feature Regeneration
2. Towards deep learning models resistant to adversarial attacks;madry,2017
3. Adversarial training for free!;shafahi;Advances in neural information processing systems,2019
4. Fast is better than free: Revisiting adversarial training;wong,2020
5. Defense against adversarial attacks using feature scattering-based adversarial training;zhang;Advances in neural information processing systems,2019