Synthesizing Robust Adversarial Examples, Anish Athalye, Logan Engstrom, Andrew Ilyas, Kevin Kwok, 2018Proceedings of the 35th International Conference on Machine Learning (ICML), Vol. 80 (Proceedings of Machine Learning Research (PMLR))DOI: 10.5555/3326943.3327170 - Introduces Expectation Over Transformation (EOT) to create adversarial examples robust to physical transformations, including those affecting traffic signs.