search

IBM / Autozoom-Attack

Codes for reproducing query-efficient black-box attacks in “AutoZOOM: Autoencoder-based Zeroth Order Optimization Method for Attacking Black-box Neural Networks” ​​​​, published at AAAI 2019
https://arxiv.org/abs/1805.11770
Apache License 2.0
57 stars 22 forks source link

Can I ask you a question about a terminology of adversarial attack? #14

Open machanic opened 4 years ago

machanic commented 4 years ago

When I write paper about untargeted attack or targeted attack under L2 norm or L_inf norm. I am confused. Should I write targeted L2 norm attack or L2 norm targeted attack? In other word, targeted or untargeted should be placed in the beginning or middle? Or should I write targeted attack under L2 norm? Thank you.

pinyuchen commented 4 years ago

Hello @machanic

I think both terms are fine, as long as you clearly define what it means. Targeted attack under L2 norm is also quite precise, but I expect you are looking for a simple term for description.