1 paper
Yizheng Chen, Shiqi Wang, Weifan Jiang +2
There are various costs for attackers to manipulate the features of security classifiers. The costs are asymmetric across features and to the directions of changes, which cannot be…