Keep on Swimming: Real Attackers Only Need Partial Knowledge of a Multi-Model System

Julian Collado, Kevin Stangl

Recent approaches in machine learning often solve a task using a composition of multiple models or agentic architectures. When targeting a composed system with adversarial attacks,…