Beware the Black-Box: on the Robustness of Recent Defenses to Adversarial Examples

Kaleel Mahmood, Deniz Gurevin, Marten van Dijk +1

Many defenses have recently been proposed at venues like NIPS, ICML, ICLR and CVPR. These defenses are mainly focused on mitigating white-box attacks. They do not properly examine…