Machine Learning, Artificial Intelligence, Neural Networks.
closest image that is classified as a crocodile by the model (see Figure 1, right side). Since basically all gradient-based boundary attacks rely on this principle they tend to be affected by the same gradient-masking issues. Hence, if one gradient-based attack fails, so do usually all others.