1. Huang, L., Joseph, A. D., Nelson, B., Rubinstein, B. I. & Tygar, J. D. Adversarial Machine Learning. Proceedings of the 4th ACM Workshop on Security and Artificial Intelligence, 43-58 (2011).
2. Biggio, B. & Roli, F. Wild patterns: Ten years after the rise of adversarial machine learning. Pattern Recognition, 317-331 (2018).
3. Chen, X., Liu, C., Li, B., Lu, K. & Song, D. Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning. Preprint, ArXiv:1712.05526 (2017).
4. Gu, T., Liu, K., Dolan-Gavitt, B. & Garg, S. BadNets: Evaluating Backdooring Attacks on Deep Neural Networks. IEEE Access, 47230-47244 (2019).
5. Goldblum, M. et al. Dataset Security for Machine Learning: Data Poisoning, Backdoor Attacks, and Defenses. IEEE Transactions on Pattern Analysis and Machine Intelligence, 1563-1580 (2023).
6. Zhang, X., Zhu, X. & Lessard, L. Online Data Poisoning Attacks. Proceedings of the 2nd Conference on Learning for Dynamics and Control, 201-210 (2020).
7. Gardner, E. & Derrida, B. Three unfinished works on the optimal storage capacity of networks. Journal of Physics A: Mathematical and General, 1983 (1989).
8. Seung, H. S., Sompolinsky, H. & Tishby, N. Statistical mechanics of learning from examples. Physical review A (1992).
9. Engel, A. & Van den Broeck, C. Statistical mechanics of learning (2001).
10. Carleo, G. et al. Machine learning and the physical sciences. Reviews of Modern Physics (2019).
11. Biggio, B., Nelson, B. & Laskov, P. Poisoning Attacks against Support Vector Machines. Proceedings of the 29th International Coference on Machine Learning, 1467-1474 (2012).
12. Xiao, H. et al. Support vector machines under adversarial label contamination. Neurocomputing, 53-62 (2015).
13. Muñoz-González, L. et al. Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization. 10th ACM Workshop on Artificial Intelligence and Security, 27-38 (2017).
14. Ma, Y., Zhang, X., Sun, W. & Zhu, X. Policy Poisoning in Batch Reinforcement Learning and Control. Proceedings of the 33rd International Conference on Neural Information Processing Systems (2019).
15. Mei, S. & Zhu, X. Using Machine Teaching to Identify Optimal Training-Set Attacks on Machine Learners. Proceedings of the Twenty-Ninth AAAI Conference on Artificial Intelligence, 2871-2877 (2015).
16. Wang, Y. & Chaudhuri, K. Data Poisoning Attacks against Online Learning. Preprint, ArXiv:1808.08994 (2018).
17. Pang, T., Yang, X., Dong, Y., Su, H. & Zhu, J. Accumulative Poisoning Attacks on Real-time Data. Advances in Neural Information Processing Systems, 2899-2912 (2021).
18. Liu, W. et al. Iterative Machine Teaching. Proceedings of the 34th International Conference on Machine Learning, 2149-2158 (2017).
19. Lessard, L., Zhang, X. & Zhu, X. An Optimal Control Approach to Sequential Machine Teaching. Proceedings of the Twenty-Second International Conference on Artificial Intelligence and Statistics, 2495-2503 (2019).
20. Lee, S., Goldt, S. & Saxe, A. Continual Learning in the Teacher-Student Setup: Impact of Task Similarity. Proceedings of the 38th International Conference on Machine Learning, 6109-6119 (2021).
21. Yang, Z. et al. Understanding Robustness in Teacher-Student Setting: A New Perspective. Preprint, ArXiv:2102.13170 (2021).
22. Fujimoto, S., van Hoof, H. & Meger, D. Addressing Function Approximation Error in Actor-Critic Methods. Preprint, ArXiv:1802.09477 (2018).