@article{einstein,
author =       "Albert Einstein",
title =        "{Zur Elektrodynamik bewegter Körper}",
journal =      "Annalen der Physik",
volume =       "322",
number =       "10",
pages =        "891--921",
year =         "1905"}

@book{latexcompanion,
author    = "Michel Goossens and Frank Mittelbach and Alexander Samarin",
title     = "The \LaTeX\ Companion",
year      = "1993",
publisher = "Addison-Wesley"}

@inproceedings{balle2020hypothesis,
	title={Hypothesis testing interpretations and renyi differential privacy},
	author={Balle, Borja and Barthe, Gilles and Gaboardi, Marco and Hsu, Justin and Sato, Tetsuya},
	booktitle={International Conference on Artificial Intelligence and Statistics},
	pages={2496--2506},
	year={2020},
	organization={PMLR}
}

@inproceedings{abadi2016deep,
	title={Deep learning with differential privacy},
	author={Abadi, Martin and Chu, Andy and Goodfellow, Ian and McMahan, H Brendan and Mironov, Ilya and Talwar, Kunal and Zhang, Li},
	booktitle={Proceedings of the 2016 ACM SIGSAC conference on computer and communications security},
	pages={308--318},
	year={2016}
}

@article{mironov2019r,
	title={R\'enyi differential privacy of the sampled gaussian mechanism},
	author={Mironov, Ilya and Talwar, Kunal and Zhang, Li},
	journal={arXiv preprint arXiv:1908.10530},
	year={2019}
}

@inproceedings{mironov2017renyi,
	title={R{\'e}nyi differential privacy},
	author={Mironov, Ilya},
	booktitle={2017 IEEE 30th computer security foundations symposium (CSF)},
	pages={263--275},
	year={2017},
	organization={IEEE}
}

@article{dong2019quantum,
	title={Quantum entropy scoring for fast robust mean estimation and improved outlier detection},
	author={Dong, Yihe and Hopkins, Samuel and Li, Jerry},
	journal={Advances in Neural Information Processing Systems},
	volume={32},
	year={2019}
}

@article{wang2018dataset,
	title={Dataset distillation},
	author={Wang, Tongzhou and Zhu, Jun-Yan and Torralba, Antonio and Efros, Alexei A},
	journal={arXiv preprint arXiv:1811.10959},
	year={2018}
} 

@article{zhao2021dataset,
	title={Dataset Condensation with Gradient Matching.},
	author={Zhao, Bo and Mopuri, Konda Reddy and Bilen, Hakan},
	journal={ICLR},
	volume={1},
	number={2},
	pages={3},
	year={2021}
}

@inproceedings{zhao2021dataset2,
	title={Dataset condensation with differentiable siamese augmentation},
	author={Zhao, Bo and Bilen, Hakan},
	booktitle={International Conference on Machine Learning},
	pages={12674--12685},
	year={2021},
	organization={PMLR}
}

@article{zhao2021DM,
	author={Zhao, Bo and Bilen, Hakan},
	title     = {Dataset Condensation with Distribution Matching},
	journal   = {CoRR},
	volume    = {abs/2110.04181},
	year      = {2021}
}

@inproceedings{nguyen2020dataset,
	title={Dataset Meta-Learning from Kernel Ridge-Regression},
	author={Nguyen, Timothy and Chen, Zhourong and Lee, Jaehoon},
	booktitle={International Conference on Learning Representations},
	year={2020}
}

@inproceedings{geiping2020witches,
	title={Witches' Brew: Industrial Scale Data Poisoning via Gradient Matching},
	author={Geiping, Jonas and Fowl, Liam H and Huang, W Ronny and Czaja, Wojciech and Taylor, Gavin and Moeller, Michael and Goldstein, Tom},
	booktitle={International Conference on Learning Representations},
	year={2021}
}

@inproceedings{cazenavette2022dataset,
	title={Dataset distillation by matching training trajectories},
	author={Cazenavette, George and Wang, Tongzhou and Torralba, Antonio and Efros, Alexei A and Zhu, Jun-Yan},
	booktitle={Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition},
	pages={4750--4759},
	year={2022}
}

@inproceedings{liudataset,
	title={Dataset Distillation via Factorization},
	author={Liu, Songhua and Wang, Kai and Yang, Xingyi and Ye, Jingwen and Wang, Xinchao},
	booktitle={Advances in Neural Information Processing Systems},
	year={2022}
}

@inproceedings{cuidc,
	title={DC-BENCH: Dataset Condensation Benchmark},
	author={Cui, Justin and Wang, Ruochen and Si, Si and Hsieh, Cho-Jui},
	booktitle={Thirty-sixth Conference on Neural Information Processing Systems Datasets and Benchmarks Track},
	year={2022}
}

@inproceedings{wallace2021concealed,
	title={Concealed Data Poisoning Attacks on NLP Models},
	author={Wallace, Eric and Zhao, Tony and Feng, Shi and Singh, Sameer},
	booktitle={Proceedings of the 2021 Conference of the North American Chapter of the Association for Computational Linguistics: Human Language Technologies},
	year={2021}
}

@inproceedings{zheng2021first,
	title={First-order efficient general-purpose clean-label data poisoning},
	author={Zheng, Tianhang and Li, Baochun},
	booktitle={IEEE INFOCOM 2021-IEEE Conference on Computer Communications},
	pages={1--10},
	year={2021},
	organization={IEEE}
}

@inproceedings{schuster2021you,
	title={You autocomplete me: Poisoning vulnerabilities in neural code completion},
	author={Schuster, Roei and Song, Congzheng and Tromer, Eran and Shmatikov, Vitaly},
	booktitle={30th USENIX Security Symposium (USENIX Security 21)},
	pages={1559--1575},
	year={2021}
}

@article{huang2020metapoison,
	title={Metapoison: Practical general-purpose clean-label data poisoning},
	author={Huang, W Ronny and Geiping, Jonas and Fowl, Liam and Taylor, Gavin and Goldstein, Tom},
	journal={Advances in Neural Information Processing Systems},
	volume={33},
	pages={12080--12091},
	year={2020}
}

@inproceedings{liufriendly,
	title={Friendly Noise against Adversarial Noise: A Powerful Defense against Data Poisoning Attack},
	author={Liu, Tian Yu and Yang, Yu and Mirzasoleiman, Baharan},
	booktitle={Advances in Neural Information Processing Systems}
}

@inproceedings{yang2022not,
	title={Not all poisons are created equal: Robust training against data poisoning},
	author={Yang, Yu and Liu, Tian Yu and Mirzasoleiman, Baharan},
	booktitle={International Conference on Machine Learning},
	pages={25154--25165},
	year={2022},
	organization={PMLR}
}

@article{krizhevsky2009learning,
	title={Learning multiple layers of features from tiny images},
	author={Krizhevsky, Alex and Hinton, Geoffrey and others},
	year={2009},
	publisher={Toronto, ON, Canada}
}

@inproceedings{yin2018byzantine,
	title={Byzantine-robust distributed learning: Towards optimal statistical rates},
	author={Yin, Dong and Chen, Yudong and Kannan, Ramchandran and Bartlett, Peter},
	booktitle={International Conference on Machine Learning},
	pages={5650--5659},
	year={2018},
	organization={PMLR}
}

@article{portnoy2020towards,
	title={Towards realistic byzantine-robust federated learning},
	author={Portnoy, Amit and Hendler, Danny},
	year={2020}
}

@article{van1996matrix,
	title={Matrix computations (Johns Hopkins studies in mathematical sciences)},
	author={Van Loan, Charles F and Golub, G},
	journal={Matrix Computations},
	volume={53},
	year={1996}
}

@article{shafahi2018poison,
	title={Poison frogs! targeted clean-label poisoning attacks on neural networks},
	author={Shafahi, Ali and Huang, W Ronny and Najibi, Mahyar and Suciu, Octavian and Studer, Christoph and Dumitras, Tudor and Goldstein, Tom},
	journal={Advances in neural information processing systems},
	volume={31},
	year={2018}
}

@inproceedings{zhu2019transferable,
	title={Transferable clean-label poisoning attacks on deep neural nets},
	author={Zhu, Chen and Huang, W Ronny and Li, Hengduo and Taylor, Gavin and Studer, Christoph and Goldstein, Tom},
	booktitle={International Conference on Machine Learning},
	pages={7614--7623},
	year={2019},
	organization={PMLR}
}

@inproceedings{finn2017model,
	title={Model-agnostic meta-learning for fast adaptation of deep networks},
	author={Finn, Chelsea and Abbeel, Pieter and Levine, Sergey},
	booktitle={International conference on machine learning},
	pages={1126--1135},
	year={2017},
	organization={PMLR}
}

@article{tran2018spectral,
	title={Spectral signatures in backdoor attacks},
	author={Tran, Brandon and Li, Jerry and Madry, Aleksander},
	journal={Advances in neural information processing systems},
	volume={31},
	year={2018}
}

@article{le2015tiny,
	title={Tiny imagenet visual recognition challenge},
	author={Le, Ya and Yang, Xuan},
	journal={CS 231N},
	volume={7},
	number={7},
	pages={3},
	year={2015}
}