[1] A. Krizhevsky, I. Sutskever, and G. E. Hinton, "Imagenet classification with deep convolutional neural networks," Communications of the ACM, vol. 60, no. 6, pp. 84-90, 2017.
[2] S. Ren, K. He, R. Girshick, and J. Sun, "Faster r-cnn: Towards real-time object detection with region proposal networks," Advances in neural information processing systems, vol. 28, 2015.
[3] O. Ronneberger, P. Fischer, and T. Brox, "U-net: Convolutional networks for biomedical image segmentation," in Medical Image Computing and Computer-Assisted Intervention-MICCAI 2015: 18th International Conference, Munich, Germany, October 5-9, 2015, Proceedings, Part III 18. Springer, 2015, pp. 234-241.
[4] C. Dong, C. C. Loy, K. He, and X. Tang, "Image super-resolution using deep convolutional networks," IEEE transactions on pattern analysis and machine intelligence, vol. 38, no. 2, pp. 295-307, 2015.
[5] W. Hu, Y. Huang, L. Wei, F. Zhang, and H. Li, "Deep convolutional neural networks for hyperspectral image classification," Journal of Sensors, vol. 2015, pp. 1-12, 2015.
[6] I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” arXiv preprint arXiv:1412.6572, 2014.
[7] A. Chakraborty, M. Alam, V. Dey, A. Chattopadhyay, and D. Mukhopadhyay, "A survey on adversarial attacks and defences," CAAI Transactions on Intelligence Technology, vol. 6, no. 1, pp. 25-45, 2021.
[8] C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, "Intriguing properties of neural networks," arXiv preprint arXiv:1312.6199, 2013.
[9] A. Madry, A. Makelov, L. Schmidt, D. Tsipras, and A. Vladu, "Towards deep learning models resistant to adversarial attacks," arXiv preprint arXiv:1706.06083, 2017.
[10] F. Croce and M. Hein, "Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks," in International conference on machine learning. PMLR, 2020, pp. 2206-2216.
[11] H. Zhang, Y. Yu, J. Jiao, E. Xing, L. El Ghaoui, and M. Jordan, "Theoretically principled trade-off between robustness and accuracy," in International conference on machine learning. PMLR, 2019, pp. 7472-7482.
[12] Y. Wang, T. Sun, S. Li, X. Yuan, W. Ni, E. Hossain, and H. V. Poor, "Adversarial attacks and defenses in machine learning-powered networks: A contemporary survey," arXiv preprint arXiv:2303.06302, 2023.
[13] G. Carbone, G. Sanguinetti, and L. Bortolussi, "Random projections for improved adversarial robustness," in 2021 International Joint Conference on Neural Networks (IJCNN), 2021, pp. 1-7.
[14] M. Dong, X. Chen, Y. Wang, and C. Xu, "Random normalization aggregation for adversarial defense," Advances in Neural Information Processing Systems, vol. 35, pp. 33676-33688, 2022.
[15] B. Li, C. Chen, W. Wang, and L. Carin, "Certified adversarial robustness with additive noise," Advances in neural information processing systems, vol. 32, 2019.
[16] K. P. Panousis, S. Chatzis, and S. Theodoridis, "Stochastic local winner-takes-all networks enable profound adversarial robustness," arXiv preprint arXiv:2112.02671, 2021.
[17] S. Park, C.-H. Yoo, and Y.-G. Shin, "Effective shortcut technique for generative adversarial networks," Applied Intelligence, vol. 53, no. 2, pp. 2055-2067, may 2022. [Online]. Available: https://doi.org/10.1007%2Fs10489-022-03666-2
[18] S. Zagoruyko and N. Komodakis, "Wide residual networks," arXiv preprint arXiv:1605.07146, 2016.
[19] Y. Fu, Q. Yu, M. Li, V. Chandra, and Y. Lin, "Double-win quant: Aggressively winning robustness of quantized deep neural networks via random precision training and inference," in International Conference on Machine Learning. PMLR, 2021, pp. 3492-3504.