Should Adversarial Attacks Use Pixel p-Norm?

Ayon Sen, Xiaojin Zhu, Liam Marshall +1

Adversarial attacks aim to confound machine learning systems, while remaining virtually imperceptible to humans. Attacks on image classification systems are typically gauged in ter…