Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks

Quang H. Nguyen, Yingjie Lao, Tung Pham +2

Recent works have shown that deep neural networks are vulnerable to adversarial examples that find samples close to the original image but can make the model misclassify. Even with…