@inproceedings(akintunde2018reachability,
 author       = {Michael Akintunde and Alessio Lomuscio and Lalit Maganti and Edoardo Pirovano},
 year         = {2018},
 title        = {Reachability analysis for neural agent-environment systems},
 booktitle    = {Sixteenth International Conference on Principles of Knowledge Representation and Reasoning},
)
@inproceedings(akintunde2019verification,
 author       = {Michael E Akintunde and Andreea Kevorchian and Alessio Lomuscio and Edoardo Pirovano},
 year         = {2019},
 title        = {Verification of RNN-Based Neural Agent-Environment Systems},
 booktitle    = {Proceedings of the 33th AAAI Conference on Artificial Intelligence (AAAI19). Honolulu, HI, USA. AAAI Press},
 doi          = {10.1609/aaai.v33i01.33016006},
)
@inproceedings(anderson2019optimization,
 author       = {Greg Anderson and Shankara Pailoor and Isil Dillig and Swarat Chaudhuri},
 year         = {2019},
 title        = {Optimization and abstraction: a synergistic approach for analyzing neural network robustness},
 booktitle    = {Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation},
 pages        = {731--744},
 doi          = {10.1145/3314221.3314614},
)
@inproceedings(arnab2018robustness,
 author       = {Anurag Arnab and Ondrej Miksik and Philip HS Torr},
 year         = {2018},
 title        = {On the robustness of semantic segmentation models to adversarial attacks},
 booktitle    = {Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition},
 pages        = {888--897},
 doi          = {10.1109/CVPR.2018.00099},
)
@article(7954012,
 author       = {M. {Chen} and X. {Shi} and Y. {Zhang} and D. {Wu} and M. {Guizani}},
 year         = {2017},
 title        = {Deep Features Learning for Medical Image Analysis with Convolutional Autoencoder Neural Network},
 journal      = {IEEE Transactions on Big Data},
 pages        = {1--1},
 doi          = {10.1109/TBDATA.2017.2717439},
)
@inproceedings(8363930,
 author       = {Z. {Chen} and C. K. {Yeo} and B. S. {Lee} and C. T. {Lau}},
 year         = {2018},
 title        = {Autoencoder-based network anomaly detection},
 booktitle    = {2018 Wireless Telecommunications Symposium (WTS)},
 pages        = {1--5},
 doi          = {10.1109/WTS.2018.8363930},
)
@article(dutta2018learning,
 author       = {Souradeep Dutta and Susmit Jha and Sriram Sankaranarayanan and Ashish Tiwari},
 year         = {2018},
 title        = {Learning and verification of feedback control systems using feedforward neural networks},
 journal      = {IFAC-PapersOnLine},
 volume       = {51},
 number       = {16},
 pages        = {151--156},
 doi          = {10.1016/j.ifacol.2018.08.026},
)
@inproceedings(dutta2018output,
 author       = {Souradeep Dutta and Susmit Jha and Sriram Sankaranarayanan and Ashish Tiwari},
 year         = {2018},
 title        = {Output range analysis for deep feedforward neural networks},
 booktitle    = {NASA Formal Methods Symposium},
 organization = {Springer},
 pages        = {121--138},
 doi          = {10.1007/978-3-319-77935-5\_9},
)
@inproceedings(dvijotham2020efficient,
 author       = {Krishnamurthy Dj Dvijotham and Robert Stanforth and Sven Gowal and Chongli Qin and Soham De and Pushmeet Kohli},
 year         = {2020},
 title        = {Efficient neural network verification with exactness characterization},
 booktitle    = {Uncertainty in Artificial Intelligence},
 organization = {PMLR},
 pages        = {497--507},
)
@inproceedings(ehlers2017formal,
 author       = {Ruediger Ehlers},
 year         = {2017},
 title        = {Formal verification of piece-wise linear feed-forward neural networks},
 booktitle    = {International Symposium on Automated Technology for Verification and Analysis},
 organization = {Springer},
 pages        = {269--286},
 doi          = {10.1007/978-3-319-68167-2\_19},
)
@article(elattar2019conception,
 author       = {Hatem M Elattar and Hamdy K Elminir and Alaa Mohamed Riad},
 year         = {2019},
 title        = {Conception and implementation of a data-driven prognostics algorithm for safety--critical systems},
 journal      = {Soft Computing},
 volume       = {23},
 number       = {10},
 pages        = {3365--3382},
 doi          = {10.1007/s00500-017-2995-7},
)
@misc(full2020studying,
 author       = {Peter M. Full and Fabian Isensee and J\IeC{\"a}ger, Paul F. and Maier-Hein, Klaus},
 year         = {2020},
 title        = {Studying Robustness of Semantic Segmentation under Domain Shift in cardiac MRI},
 doi          = {10.1007/978-3-030-68107-4\_24},
 eprint       = {2011.07592},
)
@inproceedings(gehr2018ai,
 author       = {Timon Gehr and Matthew Mirman and Drachsler-Cohen, Dana and Petar Tsankov and Swarat Chaudhuri and Martin Vechev},
 year         = {2018},
 title        = {Ai 2: Safety and robustness certification of neural networks with abstract interpretation},
 booktitle    = {Security and Privacy (SP), 2018 IEEE Symposium on},
 doi          = {10.1109/SP.2018.00058},
)
@article(goodfellow2014explaining,
 author       = {Ian J Goodfellow and Jonathon Shlens and Christian Szegedy},
 year         = {2014},
 title        = {Explaining and harnessing adversarial examples},
 journal      = {arXiv preprint arXiv:1412.6572},
 doi          = {10.48550/arXiv.1412.6572},
)
@inproceedings(huang2017safety,
 author       = {Xiaowei Huang and Marta Kwiatkowska and Sen Wang and Min Wu},
 year         = {2017},
 title        = {Safety verification of deep neural networks},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {3--29},
 doi          = {10.1007/978-3-319-63387-9\_1},
)
@inproceedings(katz2017reluplex,
 author       = {Guy Katz and Clark Barrett and David L Dill and Kyle Julian and Mykel J Kochenderfer},
 year         = {2017},
 title        = {Reluplex: An efficient SMT solver for verifying deep neural networks},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {97--117},
 doi          = {10.1007/978-3-319-63387-9\_5},
)
@inproceedings(katz2019marabou,
 author       = {Guy Katz and Derek A Huang and Duligur Ibeling and Kyle Julian and Christopher Lazarus and Rachel Lim and Parth Shah and Shantanu Thakoor and Haoze Wu and Aleksandar Zelji{\'c}},
 year         = {2019},
 title        = {The marabou framework for verification and analysis of deep neural networks},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {443--452},
 doi          = {10.1007/978-3-030-25540-4\_26},
)
@article(khmelnitsky2020property,
 author       = {Igor Khmelnitsky and Daniel Neider and Rajarshi Roy and Beno{\^\i}t Barbot and Benedikt Bollig and Alain Finkel and Serge Haddad and Martin Leucker and Lina Ye},
 year         = {2020},
 title        = {Property-Directed Verification of Recurrent Neural Networks},
 journal      = {arXiv preprint arXiv:2009.10610},
 doi          = {10.48550/arXiv.2009.10610},
)
@inproceedings(Klingner,
 author       = {Marvin Klingner and Andreas Bar and Tim Fingscheidt},
 year         = {2020},
 title        = {Improved Noise and Attack Robustness for Semantic Segmentation by Using Multi-Task Training With Self-Supervised Depth Estimation},
 booktitle    = {Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition (CVPR) Workshops},
 doi          = {10.1109/CVPRW50498.2020.00168},
)
@article(kouvaros2018formal,
 author       = {Panagiotis Kouvaros and Alessio Lomuscio},
 year         = {2018},
 title        = {Formal verification of cnn-based perception systems},
 journal      = {arXiv preprint arXiv:1811.11373},
 doi          = {10.48550/arXiv.1811.11373},
)
@article(lomuscio2017approach,
 author       = {Alessio Lomuscio and Lalit Maganti},
 year         = {2017},
 title        = {An approach to reachability analysis for feed-forward relu neural networks},
 journal      = {arXiv preprint arXiv:1706.07351},
 doi          = {10.48550/arXiv.1706.07351},
)
@misc(2020Segmentation,
 author       = {Shervin Minaee and Yuri Boykov and Fatih Porikli and Antonio Plaza and Nasser Kehtarnavaz and Demetri Terzopoulos},
 year         = {2020},
 title        = {Image Segmentation Using Deep Learning: A Survey},
 doi          = {10.48550/arXiv.2001.05566},
 eprint       = {2001.05566},
)
@inproceedings(moosavi2016deepfool,
 author       = {Moosavi-Dezfooli, Seyed-Mohsen and Alhussein Fawzi and Pascal Frossard},
 year         = {2016},
 title        = {Deepfool: a simple and accurate method to fool deep neural networks},
 booktitle    = {Proceedings of the IEEE conference on computer vision and pattern recognition},
 pages        = {2574--2582},
 doi          = {10.1109/CVPR.2016.282},
)
@article(munir2020performance,
 author       = {Nauman Munir and Jinhyun Park and Hak-Joon Kim and Sung-Jin Song and Sung-Sik Kang},
 year         = {2020},
 title        = {Performance enhancement of convolutional neural network for ultrasonic flaw classification by adopting autoencoder},
 journal      = {NDT \& E International},
 volume       = {111},
 pages        = {102218},
 doi          = {10.1016/j.ndteint.2020.102218},
)
@article(Oliveira2017,
 author       = {Gabriel Oliveira and Claas Bollen and Wolfram Burgard and Thomas Brox},
 year         = {2017},
 title        = {Efficient and robust deep networks for semantic segmentation},
 journal      = {The International Journal of Robotics Research},
 volume       = {37},
 pages        = {027836491771054},
 doi          = {10.1177/0278364917710542},
)
@inproceedings(pulina2010abstraction,
 author       = {Luca Pulina and Armando Tacchella},
 year         = {2010},
 title        = {An abstraction-refinement approach to verification of artificial neural networks},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {243--257},
 doi          = {10.1007/978-3-642-14295-6\_24},
)
@article(ringner2008principal,
 author       = {Markus Ringn{\'e}r},
 year         = {2008},
 title        = {What is principal component analysis?},
 journal      = {Nature biotechnology},
 volume       = {26},
 number       = {3},
 pages        = {303--304},
 doi          = {10.1038/nbt0308-303},
)
@inproceedings(sakurada2014anomaly,
 author       = {Mayu Sakurada and Takehisa Yairi},
 year         = {2014},
 title        = {Anomaly detection using autoencoders with nonlinear dimensionality reduction},
 booktitle    = {Proceedings of the MLSDA 2014 2nd Workshop on Machine Learning for Sensory Data Analysis},
 pages        = {4--11},
 doi          = {10.1145/2689746.2689747},
)
@article(saxena2017design,
 author       = {Divya Saxena and Vaskar Raychoudhury},
 year         = {2017},
 title        = {Design and verification of an NDN-based safety-critical application: A case study with smart healthcare},
 journal      = {ieee transactions on systems, man, and cybernetics: systems},
 volume       = {49},
 number       = {5},
 pages        = {991--1005},
 doi          = {10.1109/TSMC.2017.2723843},
)
@inproceedings(singh2018fast,
 author       = {Gagandeep Singh and Timon Gehr and Matthew Mirman and Markus P{\"u}schel and Martin Vechev},
 year         = {2018},
 title        = {Fast and effective robustness certification},
 booktitle    = {Advances in Neural Information Processing Systems},
 pages        = {10825--10836},
)
@article(singh2019abstract,
 author       = {Gagandeep Singh and Timon Gehr and Markus P{\"u}schel and Martin Vechev},
 year         = {2019},
 title        = {An abstract domain for certifying neural networks},
 journal      = {Proceedings of the ACM on Programming Languages},
 volume       = {3},
 number       = {POPL},
 pages        = {41},
 doi          = {10.1145/3290354},
)
@article(sun2016sparse,
 author       = {Wenjun Sun and Siyu Shao and Rui Zhao and Ruqiang Yan and Xingwu Zhang and Xuefeng Chen},
 year         = {2016},
 title        = {A sparse auto-encoder-based deep neural network approach for induction motor faults classification},
 journal      = {Measurement},
 volume       = {89},
 pages        = {171--178},
 doi          = {10.1016/j.measurement.2016.04.007},
)
@article(LBFGS,
 author       = {Christian Szegedy and Wojciech Zaremba and Ilya Sutskever and Joan Bruna and Dumitru Erhan and Ian Goodfellow and Rob Fergus},
 year         = {2013},
 title        = {Intriguing properties of neural networks},
 journal      = {arXiv preprint arXiv:1312.6199},
 doi          = {10.48550/arXiv.1312.6199},
)
@inproceedings(tran2020verification,
 author       = {Hoang-Dung Tran and Stanley Bak and Weiming Xiang and Taylor T Johnson},
 year         = {2020},
 title        = {Verification of deep convolutional neural networks using imagestars},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {18--42},
 doi          = {10.1007/978-3-030-53288-8\_2},
)
@inproceedings(tran2019parallel,
 author       = {Hoang-Dung Tran and Patrick Musau and Diego Manzanas Lopez and Xiaodong Yang and Luan Viet Nguyen and Weiming Xiang and Taylor T. Johnson},
 year         = {2019},
 title        = {Parallelizable Reachability Analysis Algorithms for Feed-Forward Neural Networks},
 booktitle    = {7th International Conference on Formal Methods in Software Engineering (FormaliSE2019), Montreal, Canada},
 doi          = {10.1109/FormaliSE.2019.00012},
)
@inproceedings(tran2019fm,
 author       = {Hoang-Dung Tran and Patrick Musau and Diego Manzanas Lopez and Xiaodong Yang and Luan Viet Nguyen and Weiming Xiang and Taylor T. Johnson},
 year         = {2019},
 title        = {Star-Based Reachability Analysis for Deep Neural Networks},
 booktitle    = {23rd International Symposisum on Formal Methods (FM'19)},
 publisher    = {Springer International Publishing},
 doi          = {10.1007/978-3-030-30942-8_39},
)
@inproceedings(tran2021cav,
 author       = {Hoang-Dung Tran and Neelanjana Pal and Patrick Musau and Xiaodong Yang and Nathaniel P Hamilton and Diego Manzanas Lopez and Stanley Bak and Taylor T Johnson},
 year         = {2021},
 title        = {Robustness Verification of Semantic Segmentation Neural Networks using Relaxed Reachability},
 booktitle    = {Proceedings of the 33rd International Conference on Computer-Aided Verification},
 publisher    = {Springer},
 doi          = {10.1007/978-3-030-81685-8\_12},
)
@inproceedings(tran2020nnv,
 author       = {Hoang-Dung Tran and Xiaodong Yang and Diego Manzanas Lopez and Patrick Musau and Luan Viet Nguyen and Weiming Xiang and Stanley Bak and Taylor T Johnson},
 year         = {2020},
 title        = {NNV: The neural network verification tool for deep neural networks and learning-enabled cyber-physical systems},
 booktitle    = {International Conference on Computer Aided Verification},
 organization = {Springer},
 pages        = {3--17},
 doi          = {10.1007/978-3-030-53288-8\_1},
)
@inproceedings(vincent2008extracting,
 author       = {Pascal Vincent and Hugo Larochelle and Yoshua Bengio and Pierre-Antoine Manzagol},
 year         = {2008},
 title        = {Extracting and composing robust features with denoising autoencoders},
 booktitle    = {Proceedings of the 25th international conference on Machine learning},
 pages        = {1096--1103},
 doi          = {10.1145/1390156.1390294},
)
@article(vincent2010stacked,
 author       = {Pascal Vincent and Hugo Larochelle and Isabelle Lajoie and Yoshua Bengio and Pierre-Antoine Manzagol and L{\'e}on Bottou},
 year         = {2010},
 title        = {Stacked denoising autoencoders: Learning useful representations in a deep network with a local denoising criterion.},
 journal      = {Journal of machine learning research},
 volume       = {11},
 number       = {12},
)
@inproceedings(wang2018efficient,
 author       = {Shiqi Wang and Kexin Pei and Justin Whitehouse and Junfeng Yang and Suman Jana},
 year         = {2018},
 title        = {Efficient formal safety analysis of neural networks},
 booktitle    = {Advances in Neural Information Processing Systems},
 pages        = {6369--6379},
 doi          = {10.48550/arXiv.1809.08098},
)
@article(wang2018formal,
 author       = {Shiqi Wang and Kexin Pei and Justin Whitehouse and Junfeng Yang and Suman Jana},
 year         = {2018},
 title        = {Formal Security Analysis of Neural Networks using Symbolic Intervals},
 journal      = {arXiv preprint arXiv:1804.10829},
 doi          = {10.48550/arXiv.1804.10829},
)
@article(weng2018towards,
 author       = {Tsui-Wei Weng and Huan Zhang and Hongge Chen and Zhao Song and Cho-Jui Hsieh and Duane Boning and Inderjit S Dhillon and Luca Daniel},
 year         = {2018},
 title        = {Towards Fast Computation of Certified Robustness for ReLU Networks},
 journal      = {arXiv preprint arXiv:1804.09699},
 doi          = {10.48550/arXiv.1804.09699},
)
@article(xiang2017reachable,
 author       = {Weiming Xiang and Hoang-Dung Tran and Taylor T Johnson},
 year         = {2017},
 title        = {Reachable set computation and safety verification for neural networks with ReLU activations},
 journal      = {arXiv preprint arXiv:1712.08163},
 doi          = {10.48550/arXiv.1712.08163},
)
@article(xiang2018output,
 author       = {Weiming Xiang and Hoang-Dung Tran and Taylor T Johnson},
 year         = {2018},
 title        = {Output reachable set estimation and verification for multilayer neural networks},
 journal      = {IEEE transactions on neural networks and learning systems},
 volume       = {29},
 number       = {11},
 pages        = {5777--5783},
 doi          = {10.1109/TNNLS.2018.2808470},
)
@article(xiang2018specification,
 author       = {Weiming Xiang and Hoang-Dung Tran and Taylor T Johnson},
 year         = {2019},
 title        = {Specification-Guided Safety Verification for Feedforward Neural Networks},
 journal      = {AAAI Spring Symposium on Verification of Neural Networks},
 doi          = {10.48550/arXiv.1812.06161},
)
@inproceedings(7449810,
 author       = {C. {Zhang} and W. {Gao} and J. {Song} and J. {Jiang}},
 year         = {2016},
 title        = {An imbalanced data classification algorithm of improved autoencoder neural network},
 booktitle    = {2016 Eighth International Conference on Advanced Computational Intelligence (ICACI)},
 pages        = {95--99},
 doi          = {10.1109/ICACI.2016.7449810},
)
@inproceedings(zhang2018efficient,
 author       = {Huan Zhang and Tsui-Wei Weng and Pin-Yu Chen and Cho-Jui Hsieh and Luca Daniel},
 year         = {2018},
 title        = {Efficient neural network robustness certification with general activation functions},
 booktitle    = {Advances in Neural Information Processing Systems},
 pages        = {4944--4953},
 doi          = {10.48550/arXiv.1811.00866},
)
@inproceedings(zhou2017anomaly,
 author       = {Chong Zhou and Randy C Paffenroth},
 year         = {2017},
 title        = {Anomaly detection with robust deep autoencoders},
 booktitle    = {Proceedings of the 23rd ACM SIGKDD international conference on knowledge discovery and data mining},
 pages        = {665--674},
 doi          = {10.1145/3097983.3098052},
)
@article(Zhou2020AutomatedEO,
 author       = {W. Zhou and J. Berrio and S. Worrall and Eduardo M. Nebot},
 year         = {2020},
 title        = {Automated Evaluation of Semantic Segmentation Robustness for Autonomous Driving},
 journal      = {IEEE Transactions on Intelligent Transportation Systems},
 volume       = {21},
 pages        = {1951--1963},
 doi          = {10.1109/TITS.2019.2909066},
)