Scratch that! An Evolution-based Adversarial Attack against Neural Networks

Malhar Jere, Loris Rossi, Briland Hitaj +3

We study black-box adversarial attacks for image classifiers in a constrained threat model, where adversaries can only modify a small fraction of pixels in the form of scratches on…