Counter-Samples: A Stateless Strategy to Neutralize Black Box Adversarial Attacks

Roey Bokobza, Yisroel Mirsky

Our paper presents a novel defence against black box attacks, where attackers use the victim model as an oracle to craft their adversarial examples. Unlike traditional preprocessin…