On the Suitability of $L_p$-norms for Creating and Preventing Adversarial Examples

Mahmood Sharif, Lujo Bauer, Michael K. Reiter

Much research effort has been devoted to better understanding adversarial examples, which are specially crafted inputs to machine-learning models that are perceptually similar to b…