Machine Learning, Artificial Intelligence, Neural Networks.
[1], which we denote as Brendel & Bethge attacks, works in a substantially different way than current gradient-based techniques, see Figure 2, and is similar in spirit to our purely decision-based boundary attack [4]. In essence, rather than starting close to the clean image we start far away from