HO-FMN: Hyperparameter optimization for fast minimum-norm attacks

Raffaele Mura, Giuseppe Floris, Luca Scionis, Giorgio Piras, Maura Pintor, Ambra Demontis, Giorgio Giacinto, Battista Biggio, Fabio Roli

Abstract: Highlights•We improve minimum-norm attacks using different losses, optimizers, and schedulers.•We leverage hyperparameter optimization to improve the attack performance.•We compute full robustness-perturbation curves with a single, effective attack.