23 citations · 28 across the 3 of their papers we have counts for
Showing cs.LGShow all
2 papers · 1 filter
cs.LG2021★ 2 cited
Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks
Maksym Yatsura, Jan Hendrik Metzen, Matthias Hein
Adversarial attacks based on randomized search schemes have obtained state-of-the-art results in black-box robustness evaluation recently. However, as we demonstrate in this work,…
cs.LG2021★ 23 cited
Efficient Certified Defenses Against Patch Attacks on Image Classifiers
Jan Hendrik Metzen, Maksym Yatsura
Adversarial patches pose a realistic threat model for physical world attacks on autonomous systems via their perception component. Autonomous systems in safety-critical domains suc…