<bibliography>
 <citation type="article" key="AlDo14">
  <author>M. <surname>Althoff</surname></author>
  <author>J. <surname>Dolan</surname></author>
  <year>2014</year>
  <title>Online Verification of Automated Road Vehicles using Reachability Analysis</title>
  <journal>IEEE Transactions on Robotics</journal>
  <volume>30</volume>
  <pages>903&#8211;918</pages>
  <doi>10.1109/TRO.2014.2312453</doi>
 </citation>
 <citation type="inproceedings" key="BaIoLaVyNoCr16">
  <author>O <surname>Bastani</surname></author>
  <author>Y. <surname>Ioannou</surname></author>
  <author>L. <surname>Lampropoulos</surname></author>
  <author>D. <surname>Vytiniotis</surname></author>
  <author>A. <surname>Nori</surname></author>
  <author>A. <surname>Criminisi</surname></author>
  <year>2016</year>
  <title>Measuring Neural Net Robustness with Constraints</title>
  <booktitle>Proc. 30th Conf. on Neural Information Processing Systems (NIPS)</booktitle>
 </citation>
 <citation type="misc" key="BoDeDwFiFlGoJaMoMuZhZhZhZi16">
  <author>M. <surname>Bojarski</surname></author>
  <author>D. <surname>Del Testa</surname></author>
  <author>D. <surname>Dworakowski</surname></author>
  <author>B. <surname>Firner</surname></author>
  <author>B. <surname>Flepp</surname></author>
  <author>P. <surname>Goyal</surname></author>
  <author>L. <surname>Jackel</surname></author>
  <author>M. <surname>Monfort</surname></author>
  <author>U. <surname>Muller</surname></author>
  <author>J. <surname>Zhang</surname></author>
  <author>X. <surname>Zhang</surname></author>
  <author>J. <surname>Zhao</surname></author>
  <author>K. <surname>Zieba</surname></author>
  <year>2016</year>
  <title>End to End Learning for Self-Driving Cars</title>
  <note>Technical Report. http://arxiv.org/abs/1604.07316</note>
 </citation>
 <citation type="inproceedings" key="CaWa17">
  <author>N. <surname>Carlini</surname></author>
  <author>D. <surname>Wagner</surname></author>
  <year>2017</year>
  <title>Towards Evaluating the Robustness of Neural Networks</title>
  <booktitle>Proc. 38th Symposium on Security and Privacy (SP)</booktitle>
  <doi>10.1109/SP.2017.49</doi>
 </citation>
 <citation type="inproceedings" key="GlBoBe11">
  <author>X. <surname>Glorot</surname></author>
  <author>A. <surname>Bordes</surname></author>
  <author>Y. <surname>Bengio</surname></author>
  <year>2011</year>
  <title>Deep Sparse Rectifier Neural Networks</title>
  <booktitle>Proc. 14th Int. Conf. on Artificial Intelligence and Statistics (AISTATS)</booktitle>
  <pages>315&#8211;323</pages>
 </citation>
 <citation type="book" key="FoBeCu16">
  <author>I. <surname>Goodfellow</surname></author>
  <author>Y. <surname>Bengio</surname></author>
  <author>A. <surname>Courville</surname></author>
  <year>2016</year>
  <title>Deep Learning</title>
  <publisher>MIT Press</publisher>
 </citation>
 <citation type="misc" key="GoShSz14">
  <author>I. <surname>Goodfellow</surname></author>
  <author>J. <surname>Shlens</surname></author>
  <author>C. <surname>Szegedy</surname></author>
  <year>2014</year>
  <title>Explaining and Harnessing Adversarial Examples</title>
  <note>Technical Report. http://arxiv.org/abs/1412.6572</note>
 </citation>
 <citation type="article" key="HiDeYuDaMoJaSeVaNgSaKi12">
  <author>G. <surname>Hinton</surname></author>
  <author>L. <surname>Deng</surname></author>
  <author>D. <surname>Yu</surname></author>
  <author>G. <surname>Dahl</surname></author>
  <author>A. <surname>Mohamed</surname></author>
  <author>N. <surname>Jaitly</surname></author>
  <author>A. <surname>Senior</surname></author>
  <author>V. <surname>Vanhoucke</surname></author>
  <author>P. <surname>Nguyen</surname></author>
  <author>T. <surname>Sainath</surname></author>
  <author>B. <surname>Kingsbury</surname></author>
  <year>2012</year>
  <title>Deep Neural Networks for Acoustic Modeling in Speech Recognition: The Shared Views of Four Research Groups</title>
  <journal>IEEE Signal Processing Magazine</journal>
  <volume>29</volume>
  <number>6</number>
  <pages>82&#8211;97</pages>
  <doi>10.1109/MSP.2012.2205597</doi>
 </citation>
 <citation type="misc" key="HuKwWaWu16">
  <author>X. <surname>Huang</surname></author>
  <author>M. <surname>Kwiatkowska</surname></author>
  <author>S. <surname>Wang</surname></author>
  <author>M. <surname>Wu</surname></author>
  <year>2016</year>
  <title>Safety Verification of Deep Neural Networks</title>
  <note>Technical Report. http://arxiv.org/abs/1610.06940</note>
 </citation>
 <citation type="inproceedings" key="JaKaLe09">
  <author>K. <surname>Jarrett</surname></author>
  <author>K. <surname>Kavukcuoglu</surname></author>
  <author>Y. <surname>LeCun</surname></author>
  <year>2009</year>
  <title>What is the Best Multi-Stage Architecture for Object Recognition?</title>
  <booktitle>Proc. 12th IEEE Int. Conf. on Computer Vision (ICCV)</booktitle>
  <pages>2146&#8211;2153</pages>
  <doi>10.1109/ICCV.2009.5459469</doi>
 </citation>
 <citation type="inproceedings" key="JaGhKoGaScZaPl15">
  <author>J.-B. <surname>Jeannin</surname></author>
  <author>K <surname>Ghorbal</surname></author>
  <author>Y. <surname>Kouskoulas</surname></author>
  <author>R. <surname>Gardner</surname></author>
  <author>A. <surname>Schmidt</surname></author>
  <author>E. <surname>Zawadzki</surname></author>
  <author>A. <surname>Platzer</surname></author>
  <year>2015</year>
  <title>A Formally Verified Hybrid System for the Next-Generation Airborne Collision Avoidance System</title>
  <booktitle>Proc. 21st Int. Conf. on Tools and Algorithms for the Construction and Analysis of Systems (TACAS)</booktitle>
  <pages>21&#8211;36</pages>
  <doi>10.1007/978-3-662-46681-0_2</doi>
 </citation>
 <citation type="inproceedings" key="JuLoBrOwKo16">
  <author>K. <surname>Julian</surname></author>
  <author>J. <surname>Lopez</surname></author>
  <author>J. <surname>Brush</surname></author>
  <author>M. <surname>Owen</surname></author>
  <author>M. <surname>Kochenderfer</surname></author>
  <year>2016</year>
  <title>Policy Compression for Aircraft Collision Avoidance Systems</title>
  <booktitle>Proc. 35th Digital Avionics Systems Conf. (DASC)</booktitle>
  <pages>1&#8211;10</pages>
  <doi>10.1109/DASC.2016.7778091</doi>
 </citation>
 <citation type="inproceedings" key="KaBaDiJuKo17">
  <author>G. <surname>Katz</surname></author>
  <author>C. <surname>Barrett</surname></author>
  <author>D. <surname>Dill</surname></author>
  <author>K. <surname>Julian</surname></author>
  <author>M. <surname>Kochenderfer</surname></author>
  <year>2017</year>
  <title>Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networks</title>
  <booktitle>Proc. 29th Int. Conf. on Computer Aided Verification (CAV)</booktitle>
  <pages>97&#8211;117</pages>
  <doi>10.1007/978-3-319-63387-9_5</doi>
 </citation>
 <citation type="article" key="KrSuHi12">
  <author>A. <surname>Krizhevsky</surname></author>
  <author>I. <surname>Sutskever</surname></author>
  <author>G. <surname>Hinton</surname></author>
  <year>2012</year>
  <title>Imagenet Classification with Deep Convolutional Neural Networks</title>
  <journal>Advances in Neural Information Processing Systems</journal>
  <pages>1097&#8211;1105</pages>
 </citation>
 <citation type="misc" key="KuGoBe16">
  <author>A. <surname>Kurakin</surname></author>
  <author>I. <surname>Goodfellow</surname></author>
  <author>S. <surname>Bengio</surname></author>
  <year>2016</year>
  <title>Adversarial Examples in the Physical World</title>
  <note>Technical Report. http://arxiv.org/abs/1607.02533</note>
 </citation>
 <citation type="inproceedings" key="MaHaNg13">
  <author>A. <surname>Maas</surname></author>
  <author>A. <surname>Hannun</surname></author>
  <author>A. <surname>Ng</surname></author>
  <year>2013</year>
  <title>Rectifier Nonlinearities improve Neural Network Acoustic Models</title>
  <booktitle>Proc. 30th Int. Conf. on Machine Learning (ICML)</booktitle>
 </citation>
 <citation type="inproceedings" key="NaHi10">
  <author>V. <surname>Nair</surname></author>
  <author>G. <surname>Hinton</surname></author>
  <year>2010</year>
  <title>Rectified Linear Units Improve Restricted Boltzmann Machines</title>
  <booktitle>Proc. 27th Int. Conf. on Machine Learning (ICML)</booktitle>
  <pages>807&#8211;814</pages>
 </citation>
 <citation type="inproceedings" key="PuTa10">
  <author>L. <surname>Pulina</surname></author>
  <author>A. <surname>Tacchella</surname></author>
  <year>2010</year>
  <title>An Abstraction-Refinement Approach to Verification of Artificial Neural Networks</title>
  <booktitle>Proc. 22nd Int. Conf. on Computer Aided Verification (CAV)</booktitle>
  <pages>243&#8211;257</pages>
  <doi>10.1007/978-3-642-14295-6_24</doi>
 </citation>
 <citation type="article" key="PuTa12">
  <author>L. <surname>Pulina</surname></author>
  <author>A. <surname>Tacchella</surname></author>
  <year>2012</year>
  <title>Challenging SMT Solvers to Verify Neural Networks</title>
  <journal>AI Communications</journal>
  <volume>25(2)</volume>
  <pages>117&#8211;135</pages>
  <doi>10.3233/AIC-2012-0525</doi>
 </citation>
 <citation type="article" key="SiHuMaGuSiVaScAnPaLaDi16">
  <author>D. <surname>Silver</surname></author>
  <author>A. <surname>Huang</surname></author>
  <author>C. <surname>Maddison</surname></author>
  <author>A. <surname>Guez</surname></author>
  <author>L. <surname>Sifre</surname></author>
  <author>G. <surname>Van Den Driessche</surname></author>
  <author>J. <surname>Schrittwieser</surname></author>
  <author>I. <surname>Antonoglou</surname></author>
  <author>V. <surname>Panneershelvam</surname></author>
  <author>M. <surname>Lanctot</surname></author>
  <author>S. <surname>Dieleman</surname></author>
  <year>2016</year>
  <title>Mastering the Game of Go with Deep Neural Networks and Tree Search</title>
  <journal>Nature</journal>
  <volume>529</volume>
  <number>7587</number>
  <pages>484&#8211;489</pages>
  <doi>10.1038/nature16961</doi>
 </citation>
 <citation type="misc" key="SzZaSuBrErGoFe13">
  <author>C. <surname>Szegedy</surname></author>
  <author>W. <surname>Zaremba</surname></author>
  <author>I. <surname>Sutskever</surname></author>
  <author>J. <surname>Bruna</surname></author>
  <author>D. <surname>Erhan</surname></author>
  <author>I. <surname>Goodfellow</surname></author>
  <author>R. <surname>Fergus</surname></author>
  <year>2013</year>
  <title>Intriguing Properties of Neural Networks</title>
  <note>Technical Report. http://arxiv.org/abs/1312.6199</note>
 </citation>
</bibliography>
