SCOOTER: A Human Evaluation Framework for Unrestricted Adversarial Examples

Dren Fazlija, Monty-Maximilian Zühlke, Johanna Schrader +4

Unrestricted adversarial attacks aim to fool computer vision models without being constrained by ${\ell }_p$-norm bounds to remain imperceptible to humans, for example, by changing an…