[40] Stephen Boyd and Lieven Vandenberghe. Convex optimization. Cambridge university press, 2004.
[41] Francesco Croce and Matthias Hein. "Minimally distorted adversarial examples with a fast adaptive boundary attack". In: International Conference on Machine Learning. PMLR. 2020, pp. 2196-2205.
[42] Mahyar Fazlyab, Manfred Morari, and George J Pappas. "Safety verification and robustness analysis of neural networks via quadratic constraints and semidefinite programming". In: IEEE Transactions on Automatic Control 67.1 (2020), pp. 1-15.
[43] Anton Xue, Lars Lindemann, Alexander Robey, Hamed Hassani, George J Pappas, and Rajeev Alur. "Chordal Sparsity for Lipschitz Constant Estimation of Deep Neural Networks". In: 2022 IEEE 61st Conference on Decision and Control (CDC). IEEE. 2022, pp. 3389-3396.
[44] Stephen Boyd, Laurent El Ghaoui, Eric Feron, and Venkataramanan Balakrishnan. Linear matrix inequalities in system and control theory. Vol. 15. Siam, 1994.
[45] Charles A Desoer and Mathukumalli Vidyasagar. Feedback systems: input-output properties. SIAM, 2009.
[46] Yann LeCun. "The MNIST database of handwritten digits". In: http://yann.lecun.com/exdb/mnist/ (1998).
[47] Alex Krizhevsky, Geoffrey Hinton, et al. "Learning multiple layers of features from tiny images". In: (2009).
[48] Jia Deng, Wei Dong, Richard Socher, Li-Jia Li, Kai Li, and Li Fei-Fei. "Imagenet: A large-scale hierarchical image database". In: 2009 IEEE conference on computer vision and pattern recognition. IEEE. 2009, pp. 248-255.
[49] Tsui-Wei Weng, Huan Zhang, Hongge Chen, Zhao Song, Cho-Jui Hsieh, Duane Boning, Inderjit S Dhillon, and Luca Daniel. "Towards Fast Computation of Certified Robustness for ReLU Networks". In: arXiv preprint arXiv:1804.09699 (2018).
[50] Trevor Avant and Kristi A Morgansen. "Analytical bounds on the local Lipschitz constants of affine-ReLU functions". In: arXiv preprint arXiv:2008.06141 (2020).
[51] Tsui-Wei Weng, Huan Zhang, Pin-Yu Chen, Jinfeng Yi, Dong Su, Yupeng Gao, Cho-Jui Hsieh, and Luca Daniel. "Evaluating the robustness of neural networks: An extreme value theory approach". In: arXiv preprint arXiv:1801.10578 (2018).
[52] Aladin Virmaux and Kevin Scaman. "Lipschitz regularity of deep neural networks: analysis and efficient estimation". In: Advances in Neural Information Processing Systems. 2018, pp. 3835-3844.
[53] Fabian Latorre, Paul Rolland, and Volkan Cevher. "Lipschitz constant estimation of Neural Networks via sparse polynomial optimization". In: International Conference on Learning Representations. 2020.
[54] Tong Chen, Jean B Lasserre, Victor Magron, and Edouard Pauwels. "Semialgebraic optimization for lipschitz constants of relu networks". In: Advances in Neural Information Processing Systems 33 (2020), pp. 19189-19200.
[55] Matt Jordan and Alexandros G Dimakis. "Exactly computing the local lipschitz constant of relu networks". In: Advances in Neural Information Processing Systems 33 (2020), pp. 7344-7353.
[56] Patrick L Combettes and Jean-Christophe Pesquet. "Lipschitz certificates for layered network structures driven by averaged activation operators". In: SIAM Journal on Mathematics of Data Science 2.2 (2020), pp. 529-557.
[57] Gal Chechik, Geremy Heitz, Gal Elidan, Pieter Abbeel, and Daphne Koller. "Max-margin Classification of Data with Absent Features." In: Journal of Machine Learning Research 9.1 (2008).
[58] Johan AK Suykens and Joos Vandewalle. "Least squares support vector machine classifiers". In: Neural processing letters 9 (1999), pp. 293-300.
[59] Gamaleldin Elsayed, Dilip Krishnan, Hossein Mobahi, Kevin Regan, and Samy Bengio. "Large margin deep networks for classification". In: Advances in neural information processing systems 31 (2018).
[60] Ziang Yan, Yiwen Guo, and Changshui Zhang. "Deep defense: Training dnns with improved adversarial robustness". In: Advances in Neural Information Processing Systems 31 (2018).
[61] Yiwen Guo and Changshui Zhang. "Recent advances in large margin learning". In: IEEE Transactions on Pattern Analysis and Machine Intelligence (2021).