EDP Sciences logo
Subscriber Authentication Point
Search
Menu
All issues Volume 32 (2026) ESAIM: COCV, 32 (2026) 56 References
Open Access
Issue
ESAIM: COCV
Volume 32, 2026
Article Number 56
Number of page(s) 46
DOI https://doi.org/10.1051/cocv/2026040
Published online 07 July 2026
  1. H.Q. Cai, Y. Lou, D. McKenzie and W. Yin, A zeroth-order block coordinate descent algorithm for huge-scale black-box optimization, in International Conference on Machine Learning. PMLR (2021) 1193–1203. [Google Scholar]
  2. P.-Y. Chen, H. Zhang, Y. Sharma, J. Yi and C.-J. Hsieh, ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models, in Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security (2017) 15–26. [Google Scholar]
  3. I.J. Goodfellow, J. Shlens and C. Szegedy, Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014). [Google Scholar]
  4. Y. Qin, N. Carlini, G. Cottrell, I. Goodfellow and C. Raffel, Imperceptible, robust, and targeted adversarial examples for automatic speech recognition, in International Conference on Machine Learning. PMLR (2019) 5231–5240. [Google Scholar]
  5. D. Hendrycks, S. Basart, N. Mu, S. Kadavath, F. Wang, E. Dorundo, R. Desai, T. Zhu, S. Parajuli, M. Guo, et al., The many faces of robustness: A critical analysis of out-of-distribution generalization, in Proceedings of the IEEE/CVF International Conference on Computer Vision (2021) 8340–8349. [Google Scholar]
  6. J. Quinonero Candela, M. Sugiyama, A. Schwaighofer and N.D. Lawrence, Dataset Shift in Machine Learning. MIT Press (2008). [Google Scholar]
  7. V. Vapnik, The Nature of Statistical Learning Theory. Springer Science & Business Media (1999). [Google Scholar]
  8. A. Madry, A. Makelov, L. Schmidt, D. Tsipras and A. Vladu, Towards deep learning models resistant to adversarial attacks. arXiv preprint arXiv:1706.06083 (2017). [Google Scholar]
  9. D. Tsipras, S. Santurkar, L. Engstrom, A. Turner and A. Madry, Robustness may be at odds with accuracy, in International Conference on Learning Representations (2019). [Google Scholar]
  10. A. Robey, L. Chamon, G.J. Pappas and H. Hassani, Probabilistically robust learning: Balancing average and worst-case performance, in International Conference on Machine Learning. PMLR (2022) 18667–18686. [Google Scholar]
  11. B. Wang, B. Yuan, Z. Shi and S.J. Osher, EnResNet: ResNets ensemble via the Feynman-Kac formalism for adversarial defense and beyond. SIAM J. Math. Data Sci. 2 (2020) 559–582. [Google Scholar]
  12. H. Zhang, Y. Yu, J. Jiao, E. Xing, L. El Ghaoui and M. Jordan, Theoretically principled trade-off between robustness and accuracy, in International Conference on Machine Learning. PMLR (2019) 7472–7482. [Google Scholar]
  13. L. Bungert, N. Garcia Trillos and R. Murray, The geometry of adversarial training in binary classification. Inform. Inference 12 (2023) 921–968. [Google Scholar]
  14. A. Shafahi, M. Najibi, M.Am. Ghiasi, Z. Xu, J. Dickerson, C. Studer, L.S. Davis, G. Taylor and T. Goldstein, Adversarial training for free! Adv. Neural Inform. Process. Syst. 32 (2019) 1–12. [Google Scholar]
  15. E. Wong, L. Rice and J. Zico Kolter, Fast is better than free: Revisiting adversarial training, in International Conference on Learning Representations (2020). [Google Scholar]
  16. M. Andriushchenko and N. Flammarion, Understanding and improving fast adversarial training. Adv. Neural Inform. Process. Syst. 33 (2020) 16048–16059. [Google Scholar]
  17. J. Cohen, E. Rosenfeld and Z. Kolter, Certified adversarial robustness via randomized smoothing, in International Conference on Machine Learning. PMLR (2019) 1310–1320. [Google Scholar]
  18. L. Schwinn, L. Bungert, A. Nguyen, R. Raab, F. Pulsmeyer, D. Precup, B. Eskofier and D. Zanca, Improving robustness against real-world and worst-case distribution shifts through decision region quantification, in International Conference on Machine Learning. PMLR (2022) 19434–19449. [Google Scholar]
  19. L. Schwinn, A. Nguyen, R. Raab, L. Bungert, D. Tenbrinck, D. Zanca, M. Burger and B. Eskofier, Identifying untrustworthy predictions in neural networks by geometric gradient analysis, in Uncertainty in Artificial Intelligence. PMLR (2021) 854–864. [Google Scholar]
  20. V. Raman, U. Subedi and A. Tewari, On proper learnability between average- and worst-case robustness. arXiv preprint arXiv:2211.05656 (2023). [Google Scholar]
  21. N. Garcia Trillos and R. Murray, Adversarial classification: necessary conditions and geometric flows. J. Mach. Learn. Res. 23 (2022) 1–38. [Google Scholar]
  22. L. Bungert, T. Laux and K. Stinson, A mean curvature flow arising in adversarial training. J. Math. Pures Appl. 192 (2024) 103625. [Google Scholar]
  23. L. Bungert and K. Stinson, Gamma-convergence of a nonlocal perimeter arising in adversarial machine learning. Calc. Var. Part. Diff. Equ. 63 (2024) 114,. [Google Scholar]
  24. R. Morris and R. Murray, Uniform convergence of adversarially robust classifiers. Eur. J. Appl. Math. 37 (2026) 43–72. [Google Scholar]
  25. L. Weigand, T. Roith and M. Burger, Adversarial flows: A gradient flow characterization of adversarial attacks. Eur. J. Appl. Math. 37 (2026) 123–179. [Google Scholar]
  26. P. Awasthi, N.S. Frank and M. Mohri, On the existence of the adversarial Bayes classifier. Adv. Neural Inform. Process. Syst. 34 (2021) 2978–2990. [Google Scholar]
  27. P. Awasthi, N.S. Frank and M. Mohri, On the existence of the adversarial Bayes classifier (extended version). arXiv preprint arXiv:2112.01694 (2021). [Google Scholar]
  28. N.S Frank and J. Niles-Weed, Existence and minimax theorems for adversarial surrogate risks in binary classification. J. Mach. Learn. Res. 25 (2024) 1–41. [Google Scholar]
  29. N. Garcia Trillos, M. Jacobs, and J. Kim, On the existence of solutions to adversarial training in multiclass classification. Eur. J. Appl. Math. 37 (2026) 3–23. [Google Scholar]
  30. M.S. Pydi and V. Jog, The many faces of adversarial risk. Adv. Neural Inform. Process. Syst. 34 (2021) 10000–10012. [Google Scholar]
  31. R.T. Rockafellar, S. Uryasev et al., Optimization of conditional value-at-risk. J. Risk 2 (2000) 21–42. [CrossRef] [Google Scholar]
  32. N. Dunford and J.T. Schwartz, Linear Operators: General Theory. Linear Operators. Interscience Publishers (1958). [Google Scholar]
  33. A. Chambolle, A. Giacomini and L. Lussardi, Continuous limits of discrete perimeters. ESAIM Math. Model. Numer. Anal. 44 (2010) 207–230. [Google Scholar]
  34. A. Visintin, Pattern evolution. Ann. Scuola Normale Superiore Pisa-Classe Sci. 17 (1990) 197–225. [Google Scholar]
  35. A. Chambolle, M. Morini and M. Ponsiglione, Nonlocal curvature flows. Arch. Rational Mech. Anal. 218 (2015) 1263–1329. [Google Scholar]
  36. J. M. Mazón, M. Solera and J. Toledo, The total variation flow in metric random walk spaces. Calc. Var. Part. Differ. Equ. 59 (2020) 1–64. [Google Scholar]
  37. A. Braides, Gamma-Convergence for Beginners. Oxford University Press (2002). [Google Scholar]
  38. G. Dal Maso, An Introduction to Γ-Convergence. Birkhäuser, Boston (1993). [Google Scholar]
  39. A. Braides and L. Truskinovsky, Asymptotic expansions by Γ-convergence. Continuum Mech. Thermodyn. 20 (2008) 21–62. [Google Scholar]
  40. M.D. Zeiler, Adadelta: an adaptive learning rate method. arXiv preprint arXiv:1212.5701 (2012). [Google Scholar]
  41. K. He, X. Zhang, S. Ren and J. Sun, Deep residual learning for image recognition, in Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition (2016) 770–778. [Google Scholar]

Current usage metrics show cumulative count of Article Views (full-text article views including HTML views, PDF and ePub downloads, according to the available data) and Abstracts Views on Vision4Press platform.

Data correspond to usage on the plateform after 2015. The current usage metrics is available 48-96 hours after online publication and is updated daily on week days.

Initial download of the metrics may take a while.