Thwarting finite difference adversarial attacks with output randomization. - Haidar Khan; Daniel Park; Azer Khan; Bülent Yener (CoRR, 2019)

Output Randomization: A Novel Defense for both White-box and Black-box Adversarial Models. - Daniel Park; Haidar Khan; Azer Khan; Alex Gittens; Bülent Yener (CoRR, 2021)