Rethinking Empirical Evaluation of Adversarial Robustness Using First-Order Attack Methods

Kyungmi Lee, Anantha P. Chandrakasan

We identify three common cases that lead to overestimation of adversarial accuracy against bounded first-order attack methods, which is popularly used as a proxy for adversarial ro…