Hard-label Manifolds: Unexpected Advantages of Query Efficiency for Finding On-manifold Adversarial Examples
Designing deep networks robust to adversarial examples remains an open problem. Likewise, recent zeroth order hard-label attacks on image classification models have shown comparable performance to their first-order, gradient-level alternatives. It was recently shown in the gradient-level setting tha...
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Published: |
2021
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2103.03325 http://arxiv.org/abs/2103.03325 |
| Tags: |
No Tags, Be the first to tag this record!
|