Randomness in ML Defenses Helps Persistent Attackers and Hinders Evaluators

Keane Lucas, Matthew Jagielski, Florian Tramèr +2

It is becoming increasingly imperative to design robust ML defenses. However, recent work has found that many defenses that initially resist state-of-the-art attacks can be broken…