@inproceedings{darts,
  author    = {Hanxiao Liu and
               Karen Simonyan and
               Yiming Yang},
  title     = {{DARTS: Differentiable} Architecture Search},
  booktitle = {Proc. ICLR},
  year      = {2019}
}

@inproceedings{ntk,
  author    = {Arthur Jacot and
               Cl{\'{e}}ment Hongler and
               Franck Gabriel},
  title     = {{Neural Tangent Kernel: Convergence} and Generalization in Neural Networks},
  booktitle = {Proc. NeurIPS},
  pages     = {8580--8589},
  year      = {2018}
}

@inproceedings{ntk-linear,
  author    = {Jaehoon Lee and
               Lechao Xiao and
               Samuel S. Schoenholz and
               Yasaman Bahri and
               Roman Novak and
               Jascha Sohl{-}Dickstein and
               Jeffrey Pennington},
  title     = {Wide Neural Networks of Any Depth Evolve as Linear Models Under Gradient Descent},
  booktitle = {Proc. NeurIPS},
  pages     = {8570--8581},
  year      = {2019}
}


@inproceedings{robustify,
  author    = {Arber Zela and
               Thomas Elsken and
               Tonmoy Saikia and
               Yassine Marrakchi and
               Thomas Brox and
               Frank Hutter},
  title     = {Understanding and Robustifying Differentiable Architecture Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}



@inproceedings{ntt,
  author    = {Tianlin Liu and
              Friedemann Zenke},
  title     = {Finding trainable sparse networks through Neural Tangent Transfer},
  booktitle = {Proc. ICML},
  pages     = {6336--6347},
  year      = {2020}
}


@inproceedings{simplify-oneshot,
  author    = {Gabriel Bender and
               Pieter{-}Jan Kindermans and
               Barret Zoph and
               Vijay Vasudevan and
               Quoc V. Le},
  title     = {Understanding and Simplifying One-Shot Architecture Search},
  booktitle = {Proc. ICML},
  pages     = {549--558},
  year      = {2018}
}

@inproceedings{wide-resnet,
  author    = {Sergey Zagoruyko and
               Nikos Komodakis},
  title     = {Wide Residual Networks},
  booktitle = {Proc. BMVC},
  year      = {2016}
}

%----------------------------------------------------

@inproceedings{nas,
  author    = {Barret Zoph and
               Quoc V. Le},
  title     = {Neural Architecture Search with Reinforcement Learning},
  booktitle = {Proc. ICLR},
  year      = {2017}
}

@inproceedings{nasnet,
  author    = {Barret Zoph and
               Vijay Vasudevan and
               Jonathon Shlens and
               Quoc V. Le},
  title     = {Learning Transferable Architectures for Scalable Image Recognition},
  booktitle = {Proc. CVPR},
  pages     = {8697--8710},
  year      = {2018}
}

@inproceedings{amoebanet,
  author    = {Esteban Real and
               Alok Aggarwal and
               Yanping Huang and
               Quoc V. Le},
  title     = {Regularized Evolution for Image Classifier Architecture Search},
  booktitle = {Proc. AAAI},
  pages     = {4780--4789},
  year      = {2019}
}

@inproceedings{enas,
  author    = {Hieu Pham and
               Melody Y. Guan and
               Barret Zoph and
               Quoc V. Le and
               Jeff Dean},
  title     = {Efficient Neural Architecture Search via Parameter Sharing},
  booktitle = {Proc. ICML},
  pages     = {4092--4101},
  year      = {2018}
}

@inproceedings{naonet,
  author    = {Renqian Luo and
               Fei Tian and
               Tao Qin and
               Enhong Chen and
               Tie{-}Yan Liu},
  title     = {Neural Architecture Optimization},
  booktitle = {Proc. NeurIPS},
  pages     = {7827--7838},
  year      = {2018}
}

@inproceedings{proxyless-nas,
  author    = {Han Cai and
               Ligeng Zhu and
               Song Han},
  title     = {{ProxylessNAS: Direct} Neural Architecture Search on Target Task and
               Hardware},
  booktitle = {Proc. ICLR},
  year      = {2019}
}

@inproceedings{resnet,
  author    = {Kaiming He and
               Xiangyu Zhang and
               Shaoqing Ren and
               Jian Sun},
  title     = {Deep Residual Learning for Image Recognition},
  booktitle = {Proc. CVPR},
  pages     = {770--778},
  year      = {2016}
}

@mastersthesis{cifar,
  title={Learning multiple layers of features from tiny images},
  author={Krizhevsky, Alex},
  year={2009},
  school="Department of Computer Science, University of Toronto"
}

@article{nas-survey,
  author    = {Thomas Elsken and
               Jan Hendrik Metzen and
               Frank Hutter},
  title     = {Neural Architecture Search: {A} Survey},
  journal   = {Journal of Machine Learning Research},
  volume    = {20},
  pages     = {55:1--55:21},
  year      = {2019}
}


@techreport{mobilenet,
  author    = {Andrew G. Howard and
               Menglong Zhu and
               Bo Chen and
               Dmitry Kalenichenko and
               Weijun Wang and
               Tobias Weyand and
               Marco Andreetto and
               Hartwig Adam},
  title     = {{MobileNets: Efficient} Convolutional Neural Networks for Mobile Vision Applications},
  type      = "{arXiv:1704.04861}",
  year      = {2017}
}

@inproceedings{vgg,
  author    = {Karen Simonyan and
               Andrew Zisserman},
  title     = {Very Deep Convolutional Networks for Large-Scale Image Recognition},
  booktitle = {Proc. ICLR},
  year      = {2015}
}

@inproceedings{understand-nas,
  author    = {Yao Shu and
               Wei Wang and
               Shaofeng Cai},
  title     = {Understanding Architectures Learnt by Cell-based Neural Architecture Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}

@inproceedings{he-init,
  author    = {Kaiming He and
               Xiangyu Zhang and
               Shaoqing Ren and
               Jian Sun},
  title     = {Delving Deep into Rectifiers: {Surpassing} Human-Level Performance on {ImageNet} Classification},
  booktitle = {Proc. ICCV},
  pages     = {1026--1034},
  year      = {2015}
}

@inproceedings{xnas,
  author    = {Niv Nayman and
               Asaf Noy and
               Tal Ridnik and
               Itamar Friedman and
               Rong Jin and
               Lihi Zelnik{-}Manor},
  title     = {{XNAS: Neural} Architecture Search with Expert Advice},
  booktitle = {Proc. NeurIPS},
  pages     = {1975--1985},
  year      = {2019}
}

@inproceedings{snas,
  author    = {Sirui Xie and
               Hehui Zheng and
               Chunxiao Liu and
               Liang Lin},
  title     = {{SNAS:} {Stochastic} neural architecture search},
  booktitle = {Proc. ICLR},
  year      = {2019}
}

@inproceedings{bn,
  author    = {Sergey Ioffe and
               Christian Szegedy},
  title     = {{Batch Normalization: Accelerating} Deep Network Training by Reducing Internal Covariate Shift},
  booktitle = {Proc. ICML},
  pages     = {448--456},
  year      = {2015}
}


@inproceedings{gdas,
  author    = {Xuanyi Dong and
               Yi Yang},
  title     = {Searching for a Robust Neural Architecture in Four {GPU} Hours},
  booktitle = {Proc. CVPR},
  pages     = {1761--1770},
  year      = {2019}
}

@techreport{cutout,
  author    = {Terrance Devries and
               Graham W. Taylor},
  title     = {Improved Regularization of Convolutional Neural Networks with Cutout},
  type      = "{arXiv:1708.04552}",
  year      = {2017}
}

@techreport{fairnas,
  title     = {{FairNAS}: Rethinking evaluation fairness of weight sharing neural architecture search},
  author    = {Chu, Xiangxiang and Zhang, Bo and Xu, Ruijun and Li, Jixiang},
  type      = "{arXiv:1907.01845}",
  year      = {2019}
}


@inproceedings{nes,
  title={Neural ensemble search for uncertainty estimation and dataset shift},
  author={Zaidi, Sheheryar and Zela, Arber and Elsken, Thomas and Holmes, Chris C. and Hutter, Frank and Teh, Yee Whye},
  booktitle = {Proc. NeurIPS},
  year={2021}
}

@inproceedings{densenet,
  author    = {Gao Huang and
               Zhuang Liu and
               Laurens van der Maaten and
               Kilian Q. Weinberger},
  title     = {Densely Connected Convolutional Networks},
  booktitle = {Proc. CVPR},
  pages     = {2261--2269},
  year      = {2017}
}


@inproceedings{pnas,
  author    = {Chenxi Liu and
               Barret Zoph and
               Maxim Neumann and
               Jonathon Shlens and
               Wei Hua and
               Li{-}Jia Li and
               Li Fei{-}Fei and
               Alan L. Yuille and
               Jonathan Huang and
               Kevin Murphy},
  title     = {Progressive Neural Architecture Search},
  booktitle = {Proc. ECCV},
  pages     = {19--35},
  year      = {2018}
}

@inproceedings{nasp,
  author    = {Quanming Yao and
               Ju Xu and
               Wei{-}Wei Tu and
               Zhanxing Zhu},
  title     = {Efficient Neural Architecture Search via Proximal Iterations},
  booktitle = {Proc. AAAI},
  pages     = {6664--6671},
  year      = {2020}
}

@inproceedings{p-darts,
  author    = {Xin Chen and
               Lingxi Xie and
               Jun Wu and
               Qi Tian},
  title     = {Progressive Differentiable Architecture Search: {Bridging} the Depth Gap Between Search and Evaluation},
  booktitle = {Proc. ICCV},
  pages     = {1294--1303},
  year      = {2019}
}

@techreport{darts-,
  author    = {Xiangxiang Chu and
               Xiaoxing Wang and
               Bo Zhang and
               Shun Lu and
               Xiaolin Wei and
               Junchi Yan},
  title     = {{DARTS-: Robustly} Stepping out of Performance Collapse Without Indicators},
  type      = "{arXiv:2009.01027}",
  year      = {2020}
}


@inproceedings{sdarts,
  author    = {Xiangning Chen and
               Cho{-}Jui Hsieh},
  title     = {Stabilizing Differentiable Architecture Search via Perturbation-based Regularization},
  booktitle = {Proc. ICML},
  pages     = {1554--1565},
  year      = {2020}
}


@inproceedings{r-darts,
  author    = {Arber Zela and
               Thomas Elsken and
               Tonmoy Saikia and
               Yassine Marrakchi and
               Thomas Brox and
               Frank Hutter},
  title     = {Understanding and Robustifying Differentiable Architecture Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}

@inproceedings{inception,
  author    = {Christian Szegedy and
               Wei Liu and
               Yangqing Jia and
               Pierre Sermanet and
               Scott E. Reed and
               Dragomir Anguelov and
               Dumitru Erhan and
               Vincent Vanhoucke and
               Andrew Rabinovich},
  title     = {Going deeper with convolutions},
  booktitle = {Proc. CVPR},
  pages     = {1--9},
  year      = {2015}
}

@inproceedings{shufflenetv1,
  author    = {Xiangyu Zhang and
               Xinyu Zhou and
               Mengxiao Lin and
               Jian Sun},
  title     = {{ShuffleNet: An} Extremely Efficient Convolutional Neural Network for Mobile Devices},
  booktitle = {Proc. CVPR},
  pages     = {6848--6856},
  year      = {2018}
}

@inproceedings{shufflenetv2,
  author    = {Ningning Ma and
               Xiangyu Zhang and
               Hai{-}Tao Zheng and
               Jian Sun},
  title     = {{ShuffleNet V2:} {Practical} Guidelines for Efficient {CNN} Architecture Design},
  booktitle = {Proc. ECCV},
  pages     = {122--138},
  year      = {2018}
}

@inproceedings{mnasnet,
  author    = {Mingxing Tan and
               Bo Chen and
               Ruoming Pang and
               Vijay Vasudevan and
               Mark Sandler and
               Andrew Howard and
               Quoc V. Le},
  title     = {{MnasNet: Platform-aware} Neural Architecture Search for Mobile},
  booktitle = {Proc. CVPR},
  pages     = {2820--2828},
  year      = {2019}
}

@inproceedings{nasbench1shot1,
  author    = {Arber Zela and
               Julien Siems and
               Frank Hutter},
  title     = {{NAS-Bench-1Shot1: Benchmarking} and Dissecting One-shot Neural Architecture
               Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}


@inproceedings{imagenet,
  author    = {Deng, J. and Dong, W. and Socher, R. and Li, L.-J. and Li, K. and Fei-Fei, L.},
  title     = {{ImageNet: A} Large-Scale Hierarchical Image Database},
  booktitle = {Proc. CVPR},
  year      = {2009},
}

@inproceedings{pytorch,
  author    = {Adam Paszke and
               Sam Gross and
               Francisco Massa and
               Adam Lerer and
               James Bradbury and
               Gregory Chanan and
               Trevor Killeen and
               Zeming Lin and
               Natalia Gimelshein and
               Luca Antiga and
               Alban Desmaison and
               Andreas K{\"{o}}pf and
               Edward Yang and
               Zachary DeVito and
               Martin Raison and
               Alykhan Tejani and
               Sasank Chilamkurthy and
               Benoit Steiner and
               Lu Fang and
               Junjie Bai and
               Soumith Chintala},
  title     = {PyTorch: {An} Imperative Style, High-Performance Deep Learning Library},
  booktitle = {Proc. NeurIPS},
  pages     = {8024--8035},
  year      = {2019}
}


@inproceedings{concrete,
  author    = {Chris J. Maddison and
               Andriy Mnih and
               Yee Whye Teh},
  title     = {The {Concrete} Distribution: {A} Continuous Relaxation of Discrete Random
               Variables},
  booktitle = {Proc. ICLR},
  year      = {2017}
}



@techreport{nas-notrain,
  author    = {Joseph Mellor and
               Jack Turner and
               Amos J. Storkey and
               Elliot J. Crowley},
  title     = {Neural Architecture Search without Training},
  type      = "{arXiv:2006.04647}",
  year      = {2020}
}


@techreport{zero-cost-nas,
  title={Zero-Cost Proxies for Lightweight NAS},
  author={Abdelfattah, Mohamed S and Mehrotra, Abhinav and Dudziak, {\L}ukasz and Lane, Nicholas D},
  type="{arXiv:2101.08134}",
  year={2021}
}

@inproceedings{nas-four,
  title={Neural architecture search on imagenet in four gpu hours: A theoretically inspired perspective},
  author={Chen, Wuyang and Gong, Xinyu and Wang, Zhangyang},
  booktitle={Proc. ICLR},
  year={2021}
}

@inproceedings{adanet,
  author    = {Corinna Cortes and
               Xavier Gonzalvo and
               Vitaly Kuznetsov and
               Mehryar Mohri and
               Scott Yang},
  title     = {AdaNet: {A}daptive Structural Learning of Artificial Neural Networks},
  booktitle = {Proc. ICML},
  pages     = {874--883},
  year      = {2017}
}

@techreport{adanas,
  title={Improving neural architecture search image classifiers via ensemble learning},
  author={Macko, Vladimir and Weill, Charles and Mazzawi, Hanna and Gonzalvo, Javier},
  type="{arXiv:1903.06236}",
  year={2019}
}


@techreport{sub-arch-ensemble,
  title={Sub-Architecture Ensemble Pruning in Neural Architecture Search},
  author={Bian, Yijun and Song, Qingquan and Du, Mengnan and Yao, Jun and Chen, Huanhuan and Hu, Xia},
  type="{arXiv:1910.00370}",
  year={2019}
}

@techreport{nngp-nas,
  author    = {Daniel S. Park and
               Jaehoon Lee and
               Daiyi Peng and
               Yuan Cao and
               Jascha Sohl{-}Dickstein},
  title     = {Towards {NNGP}-guided Neural Architecture Search},
  type      = "{arXiv:2011.06006}",
  year      = {2020}
}



@inproceedings{leakyrelu,
  title={Rectifier nonlinearities improve neural network acoustic models},
  author={Maas, Andrew L and Hannun, Awni Y and Ng, Andrew Y},
  booktitle = {Proc. ICML},
  pages={3},
  year={2013}
}

@inproceedings{prelu,
  author    = {Kaiming He and
               Xiangyu Zhang and
               Shaoqing Ren and
               Jian Sun},
  title     = {Delving Deep into Rectifiers: {Surpassing} Human-Level Performance on {ImageNet} Classification},
  booktitle = {Proc. ICCV},
  pages     = {1026--1034},
  year      = {2015}
}

@inproceedings{amsgrad,
  author    = {Sashank J. Reddi and
               Satyen Kale and
               Sanjiv Kumar},
  title     = {On the Convergence of {Adam} and Beyond},
  booktitle = {Proc. ICLR},
  year      = {2018}
}


@inproceedings{gumbel-softmax,
  author    = {Eric Jang and
               Shixiang Gu and
               Ben Poole},
  title     = {Categorical Reparameterization with {Gumbel-Softmax}},
  booktitle = {Proc. ICLR},
  year      = {2017}
}


@article{ml-ad,
  author    = {Atilim Gunes Baydin and
               Barak A. Pearlmutter and
               Alexey Andreyevich Radul and
               Jeffrey Mark Siskind},
  title     = {Automatic Differentiation in Machine Learning: {A} Survey},
  journal   = {Journal of Machine Learning Research},
  volume    = {18},
  pages     = {153:1--153:43},
  year      = {2017}
}

@inproceedings{coco,
  author    = {Tsung{-}Yi Lin and
               Michael Maire and
               Serge J. Belongie and
               James Hays and
               Pietro Perona and
               Deva Ramanan and
               Piotr Doll{\'{a}}r and
               C. Lawrence Zitnick},
  title     = {Microsoft {COCO: Common} Objects in Context},
  booktitle = {Proc. ECCV},
  pages     = {740--755},
  year      = {2014}
}


@inproceedings{fgsm,
  author    = {Ian J. Goodfellow and
               Jonathon Shlens and
               Christian Szegedy},
  title     = {Explaining and Harnessing Adversarial Examples},
  booktitle = {Proc. ICLR},
  year      = {2015}
}

@inproceedings{two-layer-analysis,
  author    = {Simon S. Du and
               Xiyu Zhai and
               Barnab{\'{a}}s P{\'{o}}czos and
               Aarti Singh},
  title     = {Gradient Descent Provably Optimizes Over-parameterized Neural Networks},
  booktitle = {Proc. ICLR},
  year      = {2019}
}

@article{nne,
  author    = {Lars Kai Hansen and
               Peter Salamon},
  title     = {Neural Network Ensembles},
  journal   = {{IEEE} Trans. Pattern Anal. Mach. Intell.},
  volume    = {12},
  pages     = {993--1001},
  year      = {1990}
}


@inproceedings{nne-cv-al,
  author    = {Anders Krogh and
               Jesper Vedelsby},
  title     = {Neural Network Ensembles, Cross Validation, and Active Learning},
  booktitle = {Proc. NIPS},
  pages     = {231--238},
  year      = {1994}
}


@inproceedings{eml,
  author    = {Thomas G. Dietterich},
  title     = {Ensemble Methods in Machine Learning},
  booktitle = {Multiple Classifier Systems},
  pages     = {1--15},
  year      = {2000}
}

@inproceedings{deepens,
  author    = {Balaji Lakshminarayanan and
               Alexander Pritzel and
               Charles Blundell},
  title     = {Simple and Scalable Predictive Uncertainty Estimation using Deep Ensembles},
  booktitle = {Proc. NIPS},
  pages     = {6402--6413},
  year      = {2017}
}

@inproceedings{mc-dropout,
  author    = {Yarin Gal and
               Zoubin Ghahramani},
  title     = {Dropout as a {Bayesian} Approximation: Representing Model Uncertainty
               in Deep Learning},
  booktitle = {Proc. ICML},
  pages     = {1050--1059},
  year      = {2016}
}

@inproceedings{deepens-ntk,
  author    = {Bobby He and
               Balaji Lakshminarayanan and
               Yee Whye Teh},
  title     = {Bayesian Deep Ensembles via the Neural Tangent Kernel},
  booktitle = {Proc. NeurIPS},
  year      = {2020}
}

@inproceedings{snapshot,
  author    = {Gao Huang and
               Yixuan Li and
               Geoff Pleiss and
               Zhuang Liu and
               John E. Hopcroft and
               Kilian Q. Weinberger},
  title     = {Snapshot Ensembles: {T}rain 1, Get {M} for Free},
  booktitle = {Proc. ICLR},
  year      = {2017}
}

@inproceedings{csg-bayesdl,
  author    = {Ruqi Zhang and
               Chunyuan Li and
               Jianyi Zhang and
               Changyou Chen and
               Andrew Gordon Wilson},
  title     = {Cyclical Stochastic Gradient {MCMC} for Bayesian Deep Learning},
  booktitle = {Proc. ICLR},
  year      = {2020}
}

@inproceedings{hyperens,
  author    = {Florian Wenzel and
               Jasper Snoek and
               Dustin Tran and
               Rodolphe Jenatton},
  title     = {Hyperparameter Ensembles for Robustness and Uncertainty Quantification},
  booktitle = {Proc. NeurIPS},
  year      = {2020}
}

@book{zhou-ensemble,
  title={Ensemble Methods: {F}oundations and Algorithms},
  author={Zhou, Zhi-Hua},
  year={2012},
  publisher={CRC Press}
}

@inproceedings{svgd,
  author    = {Qiang Liu and
               Dilin Wang},
  title     = {Stein Variational Gradient Descent: {A} General Purpose {Bayesian} Inference
               Algorithm},
  booktitle = {Proc. NIPS},
  pages     = {2370--2378},
  year      = {2016}
}

@inproceedings{mp-svgd,
  author    = {Jingwei Zhuo and
               Chang Liu and
               Jiaxin Shi and
               Jun Zhu and
               Ning Chen and
               Bo Zhang},
  title     = {Message Passing Stein Variational Gradient Descent},
  booktitle = {Proc. ICML},
  pages     = {6013--6022},
  year      = {2018}
}

@inproceedings{svgd-cgm,
  author    = {Dilin Wang and
               Zhe Zeng and
               Qiang Liu},
  title     = {Stein Variational Message Passing for Continuous Graphical Models},
  booktitle = {Proc. ICML},
  pages     = {5206--5214},
  year      = {2018}
}

@article{proximal,
  author    = {Neal Parikh and
               Stephen P. Boyd},
  title     = {Proximal Algorithms},
  journal   = {Foundations and Trends\textregistered\ in Optimization},
  volume    = {1},
  number    = {3},
  pages     = {127--239},
  year      = {2014}
}

@inproceedings{svgd-converge,
  author    = {Qiang Liu},
  title     = {Stein Variational Gradient Descent as Gradient Flow},
  booktitle = {Proc. NIPS},
  pages     = {3115--3123},
  year      = {2017}
}

@article{dropout,
  author    = {Nitish Srivastava and
               Geoffrey E. Hinton and
               Alex Krizhevsky and
               Ilya Sutskever and
               Ruslan Salakhutdinov},
  title     = {Dropout: {A} simple way to prevent neural networks from overfitting},
  journal   = {J. Mach. Learn. Res.},
  volume    = {15},
  number    = {1},
  pages     = {1929--1958},
  year      = {2014}
}

@inproceedings{pc-darts,
  author    = {Yuhui Xu and
               Lingxi Xie and
               Xiaopeng Zhang and
               Xin Chen and
               Guo{-}Jun Qi and
               Qi Tian and
               Hongkai Xiong},
  title     = {{PC-DARTS:} {P}artial Channel Connections for Memory-Efficient Architecture
               Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}

@inproceedings{adam,
  author    = {Diederik P. Kingma and
               Jimmy Ba},
  title     = {Adam: {A} Method for Stochastic Optimization},
  booktitle = {Proc. ICLR},
  year      = {2015}
}

@inproceedings{bo,
  author    = {Jasper Snoek and
               Hugo Larochelle and
               Ryan P. Adams},
  title     = {Practical {Bayesian} Optimization of Machine Learning Algorithms},
  booktitle = {Proc. NIPS},
  pages     = {2960--2968},
  year      = {2012}
}

@inproceedings{dropnas,
  author    = {Weijun Hong and
               Guilin Li and
               Weinan Zhang and
               Ruiming Tang and
               Yunhe Wang and
               Zhenguo Li and
               Yong Yu},
  title     = {{DropNAS}: Grouped Operation Dropout for Differentiable Architecture
               Search},
  booktitle = {Proc. IJCAI},
  pages     = {2326--2332},
  year      = {2020}
}

@article{t-sne,
  title={Visualizing data using t-{SNE}},
  author={van der Maaten, Laurens and Hinton, Geoffrey},
  journal={JMLR},
  volume={9},
  number={86},
  pages = "2579--2605",
  year={2008}
}

@inproceedings{ece-nn,
  author    = {Chuan Guo and
               Geoff Pleiss and
               Yu Sun and
               Kilian Q. Weinberger},
  title     = {On Calibration of Modern Neural Networks},
  booktitle = {Proc. ICML},
  pages     = {1321--1330},
  year      = {2017}
}

@inproceedings{ece-bb,
  author    = {Mahdi Pakdaman Naeini and
               Gregory F. Cooper and
               Milos Hauskrecht},
  title     = {Obtaining Well Calibrated Probabilities Using Bayesian Binning},
  booktitle = {Proc. AAAI},
  pages     = {2901--2907},
  year      = {2015}
}

@inproceedings{rmll,
  author    = {Daniel Hern{\'{a}}ndez{-}Lobato and
               Jos{\'{e}} Miguel Hern{\'{a}}ndez{-}Lobato and
               Pierre Dupont},
  title     = {Robust Multi-Class Gaussian Process Classification},
  booktitle = {Proc. NIPS},
  pages     = {280--288},
  year      = {2011}
}


@techreport{neas,
  title     = {One-Shot Neural Ensemble Architecture Search by Diversity-Guided Search Space Shrinking},
  author    = {Chen, Minghao and Peng, Houwen and Fu, Jianlong and Ling, Haibin},
  type      = "{arXiv:2104.00597}",
  year      = {2021}
}

@inproceedings{single-path-uniform,
  author    = {Zichao Guo and
               Xiangyu Zhang and
               Haoyuan Mu and
               Wen Heng and
               Zechun Liu and
               Yichen Wei and
               Jian Sun},
  title     = {Single Path One-Shot Neural Architecture Search with Uniform Sampling},
  booktitle = {Proc. ECCV},
  pages     = {544--560},
  year      = {2020}
}


@inproceedings{vae,
  author    = {Diederik P. Kingma and
               Max Welling},
  title     = {Auto-Encoding Variational {Bayes}},
  booktitle = {Proc. ICLR},
  year      = {2014}
}




@inproceedings{cw,
  title={Towards evaluating the robustness of neural networks},
  author={Carlini, Nicholas and Wagner, David},
  booktitle={Proc. {IEEE S\&P}},
  pages={39-57},
  year={2017}
}


@inproceedings{pgd,
    title={Towards Deep Learning Models Resistant to Adversarial Attacks},
    author={Aleksander Madry and Aleksandar Makelov and Ludwig Schmidt and Dimitris Tsipras and Adrian Vladu},
    booktitle={Proc. ICLR},
    year={2018},
}

@techreport{disagreement,
  title={Deep ensembles: {A} loss landscape perspective},
  author={Fort, Stanislav and Hu, Huiyi and Lakshminarayanan, Balaji},
  type="{arXiv:1912.02757}",
  year={2019}
}


@techreport{ensemble-for-defense,
  title={Ensemble methods as a defense to adversarial perturbations against deep neural networks},
  author={Strauss, Thilo and Hanselmann, Markus and Junginger, Andrej and Ulmer, Holger},
  type="{arXiv:1709.03423}",
  year={2017}
}


@article{nats,
  title={NATS-Bench: Benchmarking NAS Algorithms for Architecture Topology and Size},
  author={Dong, Xuanyi and Liu, Lu and Musial, Katarzyna and Gabrys, Bogdan},
  journal={IEEE transactions on pattern analysis and machine intelligence},
  year={2021},
  publisher={IEEE}
}

@inproceedings{nasbench201,
  author    = {Xuanyi Dong and
               Yi Yang},
  title     = {{NAS-Bench-201}: Extending the Scope of Reproducible Neural Architecture
               Search},
  booktitle = {Proc. ICLR},
  year      = {2020}
}

@inproceedings{rsps,
  author    = {Liam Li and
               Ameet Talwalkar},
  title     = {Random Search and Reproducibility for Neural Architecture Search},
  booktitle = {Proc. {UAI}},
  pages     = {367--377},
  year      = {2019}
}

@inproceedings{setn,
  author    = {Xuanyi Dong and
               Yi Yang},
  title     = {One-Shot Neural Architecture Search via Self-Evaluated Template Network},
  booktitle = {Proc. {ICCV}},
  pages     = {3680--3689},
  year      = {2019}
}

@techreport{imagenet-16-120,
  author    = {Patryk Chrabaszcz and
               Ilya Loshchilov and
               Frank Hutter},
  title     = {A Downsampled Variant of {ImageNet} as an Alternative to the {CIFAR} datasets},
  type      = "{arXiv:1707.08819}",
  year      = {2017}
}

@inproceedings{robnet,
  author    = {Minghao Guo and
               Yuzhe Yang and
               Rui Xu and
               Ziwei Liu and
               Dahua Lin},
  title     = {When {NAS} Meets Robustness: In Search of Robust Architectures Against
               Adversarial Attacks},
  booktitle = {Proc. {CVPR}},
  pages     = {628--637},
  year      = {2020}
}

@inproceedings{autoattack,
  author    = {Francesco Croce and
               Matthias Hein},
  title     = {Reliable evaluation of adversarial robustness with an ensemble of
               diverse parameter-free attacks},
  booktitle = {Proc. {ICML}},
  pages     = {2206--2216},
  year      = {2020}
}