| Title | Journal | Journal Categories | Citations | Publication Date |
|---|---|---|---|---|
| Quality aware generative adversarial networks | 2019 | |||
| Semidefinite relaxations for certifying robustness to adversarial examples | 2018 | |||
| Adversarial examples are not bugs, they are features | 2019 | |||
| Perceptually constrained adversarial attacks | 2021 | |||
| Perceptual adversarial robustness: Defense against unseen threat models | 2020 |