Machine Learning, Artificial Intelligence, Neural Networks.
gradient-based optimisation techniques to follow the boundary towards the minimal adversarial (see Footnote 1 for a short technical description). The resulting attack surpasses the current state-of-the-art both in terms of query-efficiency as well as perturbation size. We tested the new attack on