Machine Learning, Artificial Intelligence, Neural Networks.
six different models (five of which are defended) on different datasets (MNIST, CIFAR-10, ImageNet) on four different metrics (L0, L1, L2, Linfinity) in two settings (targeted and untargeted). To be as fair as possible we performed a large-scale hyperparameter search for all attacks on all models