• Adversarial Ranking Attack and Defense
  Mo Zhou, Zhenxing Niu, Le Wang, Qilin Zhang, Gang Hua
• Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses (Code)
  Yingwei Li, Song Bai, Cihang Xie, Zhenyu Liao, Xiaohui Shen, Alan Yuille
• Defense Against Adversarial Attacks via Controlling Gradient Leaking on Embedded Manifolds
  Yueru Li, Shuyu Cheng, Hang Su, and Jun Zhu
• Open-set Adversarial Defense (Code )
  Rui Shao, Pramuditha Perera, Pong C. Yuen, Vishal M. Patel
• Reflection Backdoor: A Natural Backdoor Attack on Deep Neural Networks
  Yunfei Liu, Xingjun Ma, James Bailey, Feng Lu
• Improving Query Efficiency of Black-box Adversarial Attack (Code )
  Yang Bai, Yuyuan Zeng, Yong Jiang, Yisen Wang, Shu-Tao Xia, Weiwei Guo
• Square Attack: a query-efficient black-box adversarial attack via random search (Code)
  Maksym Andriushchenko, Francesco Croce, Nicolas Flammarion, Matthias Hein
• Boosting Decision-based Black-box Adversarial Attacks with Random Sign Flip
  Weilun Chen, Zhaoxiang Zhang, Xiaolin Hu, Baoyuan Wu