Our IEEE ACCESS paper has been published. It is an open access paper. We analyzed what would happen if the training data (NOT test data) are maliciously contaminated by artificial noise.

Adversarial Training Time Attack against Discriminative and Generative Convolutional Models
Subhajit Chaudhury; Hiya Roy; Sourav Mishra; Toshihiko Yamasaki