Luring of transferable adversarial perturbations in the black-box paradigm

Rémi Bernhard, Pierre-Alain Moellic, Jean-Max Dutertre

The growing interest for adversarial examples, i.e. maliciously modified examples which fool a classifier, has resulted in many defenses intended to detect them, render them inoffe…