Efficient and Transferable Adversarial Examples from Bayesian Neural Networks

Martin Gubri, Maxime Cordy, Mike Papadakis +2

An established way to improve the transferability of black-box evasion attacks is to craft the adversarial examples on an ensemble-based surrogate to increase diversity. We argue t…