Defensive Distillation is Not Robust to Adversarial Examples

We show that defensive distillation is not secure: it is no more resistant to targeted misclassification attacks than unprotected neural networks.

Code

Add Remove Mark official

Submit results from this paper to get state-of-the-art GitHub badges and help the community compare results to other papers.

No methods listed for this paper. Add relevant methods here