Machine Learning, Artificial Intelligence, Neural Networks.
can already reach very good results. I believe that this attack should be part of the standard toolbox of anyone trying to evaluate model robustness. It works sufficiently different from other gradient-based attacks to have a chance of escaping some gradient masking issues that affect other