Starting black-box optimization attacks from local-model adversarial candidates reduces query cost by up to 81 percent, and seed prioritization lets batch attacks succeed with a few queries.
The shat- tered gradients problem: If resnets are the answer, then what is the question? In International Conference on Machine Learning, 2017
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries
Starting black-box optimization attacks from local-model adversarial candidates reduces query cost by up to 81 percent, and seed prioritization lets batch attacks succeed with a few queries.