Obfuscated gradients give a false sense of security: circumventing defenses to adversarial examples
Authors: Anish Athalye, Nicholas Carlini, David Wagner
Summary: Many defenses against adversarial examples which rely on a technique called obfuscated gradients can be circumvented by three different attack techniques. The authors argue that future work should not rely on this technique anymore.
Read more