PMA, a probability-margin loss attack, consistently outperforms existing individual white-box attacks, and a one-million-image evaluation shows much lower robust accuracy than small-scale tests.
Imbalanced gradients: a subtle cause of overestimated adversarial robustness,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.LG 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Towards Million-Scale Adversarial Robustness Evaluation With Stronger Individual Attacks
PMA, a probability-margin loss attack, consistently outperforms existing individual white-box attacks, and a one-million-image evaluation shows much lower robust accuracy than small-scale tests.