391 citations · 1.1k across the 24 of their papers we have counts for
1 paper · 1 filter
Stanislav Fort
This note documents an implementation issue in recent adaptive attacks (Zhang et al. [2024]) against the multi-resolution self-ensemble defense (Fort and Lakshminarayanan [2024]).…