Luca Scionis

TransferBench: Benchmarking Ensemble-based Black-box Transfer Attacks

Ensemble-based black-box transfer attacks optimize adversarial examples on a set of surrogate models, claiming to reach high success rates by querying the (unknown) target model only a few times. In this work, we show that prior evaluations are systematically biased, as such methods are tested only…