Search Results for author: Maksym Yatsura

Found 2 papers, 1 papers with code

Meta-Learning the Search Distribution of Black-Box Random Search Based Adversarial Attacks

1 code implementation NeurIPS 2021 Maksym Yatsura, Jan Hendrik Metzen, Matthias Hein

We demonstrate that plugging the learned controller into the attack consistently improves its black-box robustness estimate in different query regimes by up to 20% for a wide range of different models with black-box access.


Efficient Certified Defenses Against Patch Attacks on Image Classifiers

no code implementations ICLR 2021 Jan Hendrik Metzen, Maksym Yatsura

Adversarial patches pose a realistic threat model for physical world attacks on autonomous systems via their perception component.

Cannot find the paper you are looking for? You can Submit a new open access paper.