| Robustness may be at odds with accuracy D Tsipras, S Santurkar, L Engstrom, A Turner, A Madry arXiv preprint arXiv:1805.12152, 2018 | 2056 | 2018 |
| Label-consistent backdoor attacks A Turner, D Tsipras, A Madry arXiv preprint arXiv:1912.02771, 2019 | 624* | 2019 |
| There is no free lunch in adversarial robustness (but there are unexpected benefits) D Tsipras, S Santurkar, L Engstrom, A Turner, A Madry arXiv preprint arXiv:1805.12152 2 (3), 2018 | 98 | 2018 |
| Robustness may be at odds with accuracy. arXiv D Tsipras, S Santurkar, L Engstrom, A Turner, A Madry arXiv preprint arXiv:1805.12152 10, 2018 | 34 | 2018 |
