Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks.

Nicolas Papernot Patrick D. McDaniel Xi Wu 0001 Somesh Jha Ananthram Swami Distillation as a Defense to Adversarial Perturbations Against Deep Neural Networks. 582-597 2016 IEEE Symposium on Security and Privacy https://doi.org/10.1109/SP.2016.41 https://doi.ieeecomputersociety.org/10.1109/SP.2016.41 conf/sp/2016 db/conf/sp/sp2016.html#PapernotM0JS16