Confusing and Detecting ML Adversarial Attacks with Injected Attractors

Jiyi Zhang, Ee-Chien Chang, Hwee Kuan Lee

Many machine learning adversarial attacks find adversarial samples of a victim model $\mathcal{M}$ by following the gradient of some attack objective functions, either explicitly…