Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks.

Francesco Croce Matthias Hein

Published in: CoRR (2020)

Keyphrases

parameter free
categorical data
outlier detection
fully automatic

learning algorithm
neural network
digital image watermarking

real world
video sequences
feature space

high dimensional
maximum likelihood
countermeasures