Machine Learning, Artificial Intelligence, Neural Networks.
which the model is certain, hence in particular around the clean image. Our attack, however, always stays close to the decision-boundary of the model where it is uncertain almost by definition. At the decision-boundary you have the highest chance of retrieving high-quality gradients that allow