Breaking certified defenses: Semantic adversarial examples with spoofed robustness certificates
To deflect adversarial attacks, a range of "certified" classifiers have been proposed. In addition to labeling an image, certified classifiers produce (when possible) a certificate guaranteeing that the input image is not an $\ell_p$-bounded adversarial example. We present a new attack that exploits...
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Article |
| Published: |
2020
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2003.08937 http://arxiv.org/abs/2003.08937 |
| Tags: |
No Tags, Be the first to tag this record!
|