Assessing Robustness via Score-Based Adversarial Image Generation

Marcel Kollovieh, Lukas Gosch, Marten Lienen +3

Most adversarial attacks and defenses focus on perturbations within small ${\ell }_p$-norm constraints. However, ${\ell }_p$ threat models cannot capture all relevant semantics-preservin…