[KH18] Marc Khoury and Dylan Hadfield-Menell. "On the geometry of adversarial examples". In: Preprint, arXiv:1811.00525 (2018) (Cited on page 3).
[KYS23] Guy Kornowski, Gilad Yehudai, and Ohad Shamir. “From Tempered to Benign Overfitting in ReLU Neural Networks”. In: arXiv preprint arXiv:2305.15141 (2023) (Cited on page 3).
[Kou+23] Yiwen Kou, Zixiang Chen, Yuzhou Chen, and Quanquan Gu. "Benign Overfitting for Two-layer ReLU Networks". In: International Conference on Machine Learning (ICML). 2023 (Cited on page 6).
[Kun+22] Daniel Kunin, Atsushi Yamamura, Chao Ma, and Surya Ganguli. "The Asymmetric Maximum Margin Bias of Quasi-Homogeneous Neural Networks". In: arXiv preprint arXiv:2210.03820 (2022) (Cited on page 3).
[KGB17] Alexey Kurakin, Ian Goodfellow, and Samy Bengio. "Adversarial machine learning at scale". In: International Conference on Learning Representations (ICLR). 2017 (Cited on page 1).
[LM00] Beatrice Laurent and Pascal Massart. "Adaptive estimation of a quadratic functional by model selection". In: Annals of Statistics (2000), pp. 1302-1338 (Cited on page 15).
[Liu+17] Yanpei Liu, Xinyun Chen, Chang Liu, and Dawn Song. “Delving into transferable adversarial examples and black-box attacks”. In: International Conference on Learning Representations (ICLR). 2017 (Cited on pages 2, 9).
[LL20] Kaifeng Lyu and Jian Li. "Gradient descent maximizes the margin of homogeneous neural networks". In: International Conference on Learning Representations (ICLR). 2020 (Cited on pages 2-4).
[Lyu+21] Kaifeng Lyu, Zhiyuan Li, Runzhe Wang, and Sanjeev Arora. "Gradient descent on two-layer nets: Margin maximization and simplicity bias". In: Advances in Neural Information Processing Systems (NeurIPS). 2021 (Cited on page 3).
[Mad+18] Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. "Towards Deep Learning Models Resistant to Adversarial Attacks". In: International Conference on Learning Representations (ICLR). 2018 (Cited on page 1).
[Mon+19] Andrea Montanari, Feng Ruan, Youngtak Sohn, and Jun Yan. "The generalization error of max-margin linear classifiers: Benign overfitting and high dimensional asymptotics in the overparametrized regime". In: Preprint, arXiv:1911.01544 (2019) (Cited on page 5).
[MW22] Andrea Montanari and Yuchen Wu. "Adversarial Examples in Random Neural Networks with General Activations". In: arXiv preprint arXiv:2203.17209 (2022) (Cited on page 3).
[Mo0+17] Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pascal Frossard. "Universal adversarial perturbations". In: Proceedings of the IEEE conference on computer vision and pattern recognition (CVPR). 2017 (Cited on pages 2, 8).
[Ney+17] Behnam Neyshabur, Srinadh Bhojanapalli, David McAllester, and Nati Srebro. "Exploring generalization in deep learning". In: Advances in Neural Information Processing Systems (NeurIPS). 2017 (Cited on page 1).
[Pap+17] Nicolas Papernot, Patrick McDaniel, Ian Goodfellow, Somesh Jha, Z Berkay Celik, and Ananthram Swami. "Practical black-box attacks against machine learning". In: Proceedings of the 2017 ACM on Asia conference on computer and communications security. 2017 (Cited on page 1).
[Pap+16] Nicolas Papernot, Patrick McDaniel, Xi Wu, Somesh Jha, and Ananthram Swami. "Distillation as a defense to adversarial perturbations against deep neural networks". In: IEEE symposium on security and privacy (SP). 2016 (Cited on page 1).
[PL20] Mary Phuong and Christoph H Lampert. “The inductive bias of ReLU networks on orthogonally separable data”. In: International Conference on Learning Representations (ICLR). 2020 (Cited on page 3).
[SVL22] Itay Safran, Gal Vardi, and Jason D Lee. "On the Effective Number of Linear Regions in Shallow Univariate ReLU Networks: Convergence Guarantees and Implicit Bias". In: Advances in Neural Information Processing Systems (NeurIPS) (2022) (Cited on page 3).
[SBG21] Roei Sarussi, Alon Brutzkus, and Amir Globerson. "Towards understanding learning in neural networks with linear teachers". In: International Conference on Machine Learning (ICML). 2021 (Cited on page 3).