Decision-based adversarial attacks: Reliable attacks against black-box machine learning models

Brendel, Wieland, Rauber, Jonas, Bethge, Matthias · arXiv · 2017