Towards Deep Learning Models Resistant to Adversarial Attacks (PGD)
Date: 2017-06
Affected: MNIST, CIFAR-10 classifiers and beyond
Attack vector: adversarial-input
Category: research
Severity: High

Madry et al. formulate adversarial robustness as a min-max problem and propose PGD as a universal first-order adversary. The paper underpins virtually all modern adversarial-robustness benchmarks and adversarial-training defenses. ICLR 2018.


Mitigations:

Architectural layers (MAESTRO):