[66] Joern-Henrik Jacobsen, Jens Behrmann, Richard Zemel, and Matthias Bethge. Excessive invariance causes adversarial vulnerability. In International Conference on Learning Representations, 2019.
[67] Jorn-Henrik Jacobsen, Jens Behrmann, Nicholas Carlini, Florian Tramér, and Nicolas Papernot. Exploiting excessive invariance caused by norm-bounded adversarial robustness. CoRR, abs/1903.10484, 2019.
[68] Justin Gilmer, Ryan P Adams, Ian Goodfellow, David Andersen, and George E Dahl. Motivating the rules of the game for adversarial example research. arXiv preprint arXiv:1807.06732, 2018.
[69] Arun Sai Suggala, Adarsh Prasad, Vaishnavh Nagarajan, and Pradeep Ravikumar. Revisiting adversarial risk. In International Conference on Artificial Intelligence and Statistics, 2019.
[70] Sadia Chowdhury and Ruth Urner. Robustness should not be at odds with accuracy. In 3rd Symposium on Foundations of Responsible Computing (FORC 2022), 2022.
[71] Marcel Kollovieh, Lukas Gosch, Yan Scholten, Marten Lienen, and Stephan Gunnemann. Assessing robustness via score-based adversarial image generation. arXiv preprint arXiv:2310.04285, 2023.
[72] Simon Geisler, Johanna Sommer, Jan Schuchardt, Aleksandar Bojchevski, and Stephan Gunnemann. Generalization of neural combinatorial solvers through the lens of adversarial robustness. In International Conference on Learning Representations, 2022.
[73] Chen Wang, Jian Chen, Yang Yang, Xiaoqiang Ma, and Jiangchuan Liu. Poisoning attacks and countermeasures in intelligent networks: Status quo and prospects. Digital Communications and Networks, 8(2):225-234, 2022.
[74] Zhiyi Tian, Lei Cui, Jie Liang, and Shui Yu. A comprehensive survey on poisoning attacks and countermeasures in machine learning. ACM Computing Surveys, 55(8):1-35, 2022.
[75] Aounon Kumar, Alexander Levine, Soheil Feizi, and Tom Goldstein. Certifying confidence via randomized smoothing. Advances in Neural Information Processing Systems, 2020.
[76] Mikhail Pautov, Olesya Kuznetsova, Nurislam Tursynbek, Aleksandr Petiushko, and Ivan Osledets. Smoothed embeddings for certified few-shot learning. Advances in Neural Information Processing Systems, 2022.
[77] Ping-yeh Chiang, Michael Curry, Ahmed Abdelkader, Aounon Kumar, John Dickerson, and Tom Goldstein. Detection as regression: Certified object detection with median smoothing. Advances in Neural Information Processing Systems, 2020.
[78] Yihan Wu, Aleksandar Bojchevski, Aleksei Kuvshinov, and Stephan Gunnemann. Completing the picture: Randomized smoothing suffers from curse of dimensionality for a large family of distributions. In International Conference on Artificial Intelligence and Statistics, 2021.
[79] Marc Fischer, Maximilian Baader, and Martin Vechev. Scalable certified segmentation via randomized smoothing. In International Conference on Machine Learning, 2021.
[80] Peter Súkeník, Aleksei Kuvshinov, and Stephan Gümnnemann. Intriguing properties of input-dependent randomized smoothing. In International conference on machine learning, 2022.
[81] Aman Saxena, Tom Wollschlager, Nicola Franco, Jeanette Miriam Lorenz, and Stephan Gunnenemann. Randomized smoothing-inspired quantum encoding schemes with formal robustness guarantees. In Quantum Techniques in Machine Learning, 2023.
[82] Xiaoshui Huang, Guofeng Mei, Jian Zhang, and Rana Abbas. A comprehensive survey on point cloud registration. arXiv preprint arXiv:2103.02690, 2021.
[83] HA Almohamad and Salih O Duffuaa. A linear programming approach for the weighted graph matching problem. IEEE Transactions on pattern analysis and machine intelligence, 15(5): 522-525, 1993.