WITCHcraft: Efficient PGD attacks with random step size

Ping-Yeh Chiang, Jonas Geiping, Micah Goldblum +4

State-of-the-art adversarial attacks on neural networks use expensive iterative methods and numerous random restarts from different initial points. Iterative FGSM-based methods wit…