Allen Yan

Forensics for Adversarial Machine Learning Through Attack Mapping Identification

This paper considers the problem of performing post-attack forensic analysis for a test-time attack on a machine learning model. A test-time attack can be represented as a mapping that receives a benign test example as the input and outputs a falsified version of it. Given a set of attacked examples…