RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit. (arXiv:2112.05282v2 [cs.LG] UPDATED)

Machine learning models are critically susceptible to evasion attacks from
adversarial examples. Generally, adversarial examples, modified inputs
deceptively similar to the original input, are constructed under whitebox
settings by adversaries with full access to the model. However, recent attacks
have shown a remarkable reduction in query numbers to craft adversarial
examples using blackbox attacks. Particularly, alarming is the ability to
exploit the classification decision from the access interface of a trained
model provided by a growing number of Machine Learning …

decision exploit network neural network