Reverse Engineering ${\ell }_p$ attacks: A block-sparse optimization approach with recovery guarantees

Darshan Thaker, Paris Giampouras, René Vidal

Deep neural network-based classifiers have been shown to be vulnerable to imperceptible perturbations to their input, such as ${\ell }_p$-bounded norm adversarial attacks. This has mo…