PubDef: Defending Against Transfer Attacks From Public Models

Chawin Sitawarin, Jaewon Chang, David Huang +2

Adversarial attacks have been a looming and unaddressed threat in the industry. However, through a decade-long history of the robustness evaluation literature, we have learned that…