Before revision:  Finally, we complement our theoretical results by conducting a systematic suite of experiments on MNIST and CIFAR-10 with both vanilla and robust classifiers, revealing that, by leveraging online secretary algorithms , like , we can get an online attack success rate close to the one achieved by the optimal offline solution .
After revision:  Finally, we complement our theoretical results by conducting a systematic suite of experiments on MNIST and CIFAR-10 with both vanilla and robust classifiers, revealing  , we can get an online attack success rate close to the one achieved by the optimal offline solution .