Researchers have investigated the impact of restricting large coordinate changes within $\ell_1$ attacks on image models. By adding a per-coordinate cap to the budget, they found that even with significant reductions in peak magnitude and effective support, a substantial portion of attack success is retained. This suggests that perturbation concentration is a critical, yet often overlooked, factor in evaluating the robustness of models against adversarial attacks. AI
IMPACT Highlights perturbation concentration as a key factor in adversarial attack evaluation, potentially influencing future model robustness research.
RANK_REASON The cluster contains an academic paper detailing novel research findings on adversarial attacks.
Read on Hugging Face Daily Papers →
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →