Paper
in
Workshop: Security and Safety in Machine Learning Systems
Mind the box: $l_1$-APGD for sparse adversarial attacks on image classifiers
francesco croce
Abstract: