@inproceedings{pytorch,
  title={{PyTorch}: An imperative style, high-performance deep learning library},
  author={Paszke, Adam and Gross, Sam and Massa, Francisco and Lerer, Adam and Bradbury, James and Chanan, Gregory and Killeen, Trevor and Lin, Zeming and Gimelshein, Natalia and Antiga, Luca and others},
  booktitle={Advances in neural information processing systems},
  pages={8026--8037},
  year={2019}
}

@inproceedings{tensorflow,
  title={{TensorFlow}: A system for large-scale machine learning},
  author={Abadi, Mart{\'\i}n and Barham, Paul and Chen, Jianmin and Chen, Zhifeng and Davis, Andy and Dean, Jeffrey and Devin, Matthieu and Ghemawat, Sanjay and Irving, Geoffrey and Isard, Michael and others},
  booktitle={12th {USENIX} symposium on operating systems design and implementation ({OSDI} 16)},
  pages={265--283},
  year={2016}
}

@misc{jax,
  author = {James Bradbury and Roy Frostig and Peter Hawkins and Matthew James Johnson and Chris Leary and Dougal Maclaurin and Skye Wanderman-Milne},
  title = {{JAX}: composable transformations of {P}ython+{N}um{P}y programs},
  url = {http://github.com/google/jax},
  year = {2018},
}

@inproceedings{rauber2017foolbox,
  title={Foolbox: A {Python} toolbox to benchmark the robustness of machine learning models},
  author={Rauber, Jonas and Brendel, Wieland and Bethge, Matthias},
  booktitle={Reliable Machine Learning in the Wild Workshop, 34th International Conference on Machine Learning},
  year={2017},
  url={https://arxiv.org/abs/1707.04131},
}

@article{rauber2020eagerpy,
  title={{EagerPy}: Writing Code That Works Natively with {PyTorch}, {TensorFlow}, {JAX}, and {NumPy}},
  author={Rauber, Jonas and Bethge, Matthias and Brendel, Wieland},
  journal={arXiv preprint arXiv:2008.04175},
  year={2020},
  url={https://eagerpy.jonasrauber.de},
}

@misc{numpy,
  author = {Travis Oliphant},
  title = {{NumPy}: A guide to {NumPy}},
  year = {2006},
  howpublished = {USA: Trelgol Publishing},
  url = "http://www.numpy.org/",
 }

@techreport{pep484,
  author  = {Guido van Rossum and Jukka Lehtosalo and Łukasz Langa},
  title   = {Type Hints},
  year    = {2015},
  type    = {PEP},
  number  = {484},
  institution = {Python Software Foundation},
  url     = {https://www.python.org/dev/peps/pep-0484/},
}

@inproceedings{brendel2018decisionbased,
  title={Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models},
  author={Wieland Brendel and Jonas Rauber and Matthias Bethge},
  booktitle={International Conference on Learning Representations},
  year={2018},
  url={https://openreview.net/forum?id=SyZI0GWCZ},
}

@inproceedings{schott2018towards,
  title={Towards the first adversarially robust neural network model on {MNIST}},
  author={Lukas Schott and Jonas Rauber and Matthias Bethge and Wieland Brendel},
  booktitle={International Conference on Learning Representations},
  year={2019},
  url={https://openreview.net/forum?id=S1EHOsC9tX},
}

@article{rauber2020fast,
  title={Fast Differentiable Clipping-Aware Normalization and Rescaling},
  author={Rauber, Jonas and Bethge, Matthias},
  journal={arXiv preprint arXiv:2007.07677},
  year={2020},
  url={https://github.com/jonasrauber/clipping-aware-rescaling},
}

@inproceedings{brendel2019accurate,
  title={Accurate, reliable and fast robustness evaluation},
  author={Wieland Brendel and Jonas Rauber and Matthias K{\"u}mmerer and Ivan Ustyuzhaninov and Matthias Bethge},
  booktitle={Advances in Neural Information Processing Systems 32},
  year={2019},
}

@inproceedings{chen2020hopskipjumpattack,
  title={{HopSkipJumpAttack}: A query-efficient decision-based attack},
  author={Chen, Jianbo and Jordan, Michael I and Wainwright, Martin J},
  booktitle={2020 IEEE Symposium on Security and Privacy (SP)},
  pages={1277--1294},
  year={2020},
  organization={IEEE},
  doi={10.1109/SP40000.2020.00045},
  url={http://dx.doi.org/10.1109/SP40000.2020.00045}
}

