Margin-Drop Coordinates for Cross-Budget Robustness Evaluation

Yanliang Huang, Zhen Zhang, Peng Xie +4

Fixed-budget robustness evaluation can select the wrong frozen vision encoder. An encoder that survives a shallow attack may lose most of that robustness when the same evaluation i…