Devin Willmott

Black-box Adversarial Attacks with Bayesian Optimization

2019 · arXiv (Cornell University)

We focus on the problem of black-box adversarial attacks, where the aim is to generate adversarial examples using information limited to loss function evaluations of input-output pairs. We use Bayesian optimization~(BO) to specifically cater to …