Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks.

Francesco Croce Matthias Hein

Published in: CoRR (2020)

Keyphrases

parameter free
categorical data
outlier detection
fully automatic
learning algorithm
neural network
digital image watermarking
real world
video sequences
feature space
high dimensional
maximum likelihood
countermeasures