Evading Adversarial Example Detection Defenses with Orthogonal Projected Gradient Descent. - Oliver Bryniarski; Nabeel Hingun; Pedro Pachuca; Vincent Wang 002; Nicholas Carlini (ICLR, 2022)

REAP: A Large-Scale Realistic Adversarial Patch Benchmark. - Nabeel Hingun; Chawin Sitawarin; Jerry Li; David A. Wagner 001 (ICCV, 2023)