Machine Learning, Artificial Intelligence, Neural Networks.
adversarial perturbations using optimisation techniques like gradient-decent, leaving us wondering how close we actually are to the “true” minimum. There is a large number of examples in the literature where new defenses have been thought to increase robustness, only to find out later that the