Reverse Engineering ℓp attacks: A block-sparse optimization approach with recovery guarantees

Darshan Thaker, Paris Giampouras, René Vidal

Abstract: Deep neural network-based classifiers have been shown to be vulnerable to imperceptible perturbations to their input, such as $\ell_p$-bounded norm adversarial attacks. This has motivated the devel...