Mitigating Black-Box Adversarial Attacks via Output Noise Perturbation

Manjushree B. Aithal, Xiaohua Li

In black-box adversarial attacks, adversaries query the deep neural network (DNN), use the output to reconstruct gradients, and then optimize the adversarial inputs iteratively. In…