[Re] Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box AttacksDownload PDF

29 Dec 2019 (modified: 05 May 2023)NeurIPS 2019 Reproducibility Challenge Blind ReportReaders: Everyone
Abstract: As part of the NeurIPS 2019 Reproducibility Challenge, we chose to attempt reproduce the attack algorithm proposed in ``Subspace Attack: Exploiting Promising Subspaces for Query-Efficient Black-box Attacks''. Our reported results are better than the original paper in terms of the median number of queries per attack, but worse in terms of failure rate. A concise assessment of our implementation is also included.
Track: Replicability
NeurIPS Paper Id: https://openreview.net/forum?id=S1g-OVBl8r
5 Replies

Loading