@misc{xie2021symmetric,
      title={On Symmetric Invertible Binary Pairing Functions}, 
      author={Jianrui Xie},
      year={2021},
      volume={2105.10752},
      journal={arXiv},
      primaryClass={math.CO}
}

@misc{moosavidezfooli2016deepfool,
      title={DeepFool: a simple and accurate method to fool deep neural networks}, 
      author={Seyed-Mohsen Moosavi-Dezfooli and Alhussein Fawzi and Pascal Frossard},
      year={2016},
      volume={1511.04599},
      journal={arXiv},
      primaryClass={cs.LG}
}

@misc{goodfellow2015explaining,
      title={Explaining and Harnessing Adversarial Examples}, 
      author={Ian J. Goodfellow and Jonathon Shlens and Christian Szegedy},
      year={2015},
      volume={1412.6572},
      journal={arXiv},
      primaryClass={stat.ML}
}

@article{bartyzel2015signal,
    author = {Bartyzel, Krzysztof},
    year = {2015},
    month = {07},
    pages = {1-8},
    title = {Adaptive Kuwahara filter},
    volume = {10},
    journal = {Signal, Image and Video Processing},
    doi = {10.1007/s11760-015-0791-3}
}

@misc{carlini2017evaluating,
      title={Towards Evaluating the Robustness of Neural Networks}, 
      author={Nicholas Carlini and David Wagner},
      year={2017},
      volume={1608.04644},
      journal={arXiv},
      primaryClass={cs.CR}
}

@misc{xie2019feature,
      title={Feature Denoising for Improving Adversarial Robustness}, 
      author={Cihang Xie and Yuxin Wu and Laurens van der Maaten and Alan Yuille and Kaiming He},
      year={2019},
      volume={1812.03411},
      journal={arXiv},
      primaryClass={cs.CV}
}

@article{nair2019robust,
  title={A robust anisotropic diffusion filter with low arithmetic complexity for images},
  author={Nair, Resmi R and David, Ebenezer and Rajagopal, Sivakumar},
  journal={EURASIP Journal on Image and Video Processing},
  volume={2019},
  pages={1--14},
  year={2019},
  publisher={Springer}
}