Meta Adversarial Training. - Jan Hendrik Metzen; Nicole Finnie; Robin Hutmacher (CoRR, 2021)

Give Me Your Attention: Dot-Product Attention Considered Harmful for Adversarial Patch Robustness. - Giulio Lovisotto; Nicole Finnie; Mauricio Munoz; Chaithanya Kumar Mummadi; Jan Hendrik Metzen (CVPR, 2022)