AdvMind: Inferring Adversary Intent of Black-Box Attacks

Ren Pang, Xinyang Zhang, Shouling Ji +2

Deep neural networks (DNNs) are inherently susceptible to adversarial attacks even under black-box settings, in which the adversary only has query access to the target models. In p…