Adversarial Logit Pairing
Provable defenses against adversarial examples via the convex outer adversarial polytope
A Direct Approach to Robust Deep Learning Using Adversarial Networks
Feature Denoising for Improving Adversarial Robustness
Improving Transferability of Adversarial Examples with Input Diversity
Unsupervised learning of object semantic parts from internal states of CNNs by population encoding