Machine Learning, Artificial Intelligence, Neural Networks.
evaluation procedure was severely overestimating the robustness of the model [2]. This can happen quite easily: a bit of noise or some saturating elements can subtly alter the backpropagated gradients and prevent gradient-based adversarial attacks from properly finding small adversarial