Query-limited Black-box Attacks to Classifiers

Fnu Suya, Yuan Tian, David Evans +1

We study black-box attacks on machine learning classifiers where each query to the model incurs some cost or risk of detection to the adversary. We focus explicitly on minimizing t…