atlas

Research map / Adversarial robustness and security / Certified and empirical robustness

MALT Powers Up Adversarial Attacks

NeurIPS 2024 · Adversarial robustness and security › Certified and empirical robustness · approach: Regularized defenses against attacks · 0 citations (OpenAlex)

Read the paperCheck your idea against 108,967 papers

AI-extracted summary. Written by AI from the paper's full text. Numbers and claims can be wrong or missing context, so check the paper before you cite or build on it.

Proposes MALT, an adversarial targeting method that selects target classes using local almost-linearity assumptions, and reports it beats AutoAttack on CIFAR-100 and ImageNet.

Problem

Adversarial attacks on multi-class classifiers pick target classes naively from classifier confidence levels, which may be suboptimal.

Approach

Target selection based on local almost-linearity of the classifier at mesoscopic scale (MALT), replacing confidence-based target choice in attacks.

Key results

Limitations

Experimental setup

Datasets: CIFAR-100 ImageNet

Benchmarks: CIFAR-100 ImageNet

Metrics: attack success rate

Baselines: AutoAttack

Builds on: AutoAttack

Closest papers by meaning

Writing a paper in this area? scime draft is a free LaTeX editor with AI included, real-time co-authors and a check of your references and venue rules before you submit. It also imports OpenAI Prism projects.

Open scime draft

Get the next scime Dispatch and a monthly field update

Free. We send a confirmation link first; every email has a one-click unsubscribe. Privacy