Artificial Intelligence, Technology, Conference, Iclr 2020, Neural Networks.
descent (PGD) attacks, which gave attackers access to the model weights and consequently gradients on trained CIFAR10 models. Three JEMs were tested, with 0, 1, and 10 steps of sampling seeded at the input. Figure: Histograms for OOD detection. Green corresponds to the score on in-distribution data