Model Mimic Attack: Knowledge Distillation for Provably Transferable Adversarial Examples

Kirill Lukyanov, Andrew Perminov, Denis Turdakov +1

The vulnerability of artificial neural networks to adversarial perturbations in the black-box setting is widely studied in the literature. The majority of attack methods to constru…