Machine Learning, Artificial Intelligence, Neural Networks.
state-of-the-art attacks. We performed a large-scale hyperparameter search to make the comparison as fair as possible. As an additional benefit, the attack has only one hyperparameter (the maximum step length or trust region radius), and if one simply sets this parameter to its default value one