The DOI matches its DataCite record; 12 of the 14 references it cites were found in a registry or an index.
Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach
Open accessAbstract
We study the problem of attacking a machine learning model in the hard-label black-box setting, where no model information is revealed except that the attacker can make queries to probe the corresponding hard-label decisions. This is a very challenging problem since the direct extension of state-of-the-art white-box attacks (e.g., CW or PGD) to the hard-label black-box setting will require minimizing a non-continuous step function, which is combinatorial and cannot be solved by a gradient-based optimizer. The only current approach is based on random walk on the boundary, which requires lots of queries and lacks convergence guarantees. We propose a novel way to formulate the hard-label black-box attack as a real-valued optimization problem which is usually continuous and can be solved by any zeroth order optimization algorithm. For example, using the Randomized Gradient-Free method, we are able to bound the number of iterations needed for our algorithm to achieve stationary points. We demonstrate that our proposed method outperforms the previous random walk approach to attacking convolutional neural networks on MNIST, CIFAR, and ImageNet datasets. More interestingly, we show that the proposed algorithm can also be used to attack other discrete and non-continuous machine learning models, such as Gradient Boosting Decision Trees (GBDT).
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Natural evolutionary strategies (NES) for gradient estimation is one of the state-of-the-art methods in black-box adversarial ML [10, 25, 38].”
From Adversarial Detection Avoidance Attacks: Evaluating the robustness of perceptual hashing-based client-side scanning (2021) · cites this paper as [10]
Experimental — accuracy not yet measured
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Deep Residual Learning for Image Recognition
He, K., Zhang, X., Ren, S., & Sun, J. (2016) · 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) · doi:10.1109/cvpr.2016.90 · Cited by 235,474
ImageNet: A large-scale hierarchical image database
Deng, J., Dong, W., Socher, R., Li, L.-J., Li, K., & Fei-Fei, L. (2009) · 2009 IEEE Conference on Computer Vision and Pattern Recognition · doi:10.1109/cvpr.2009.5206848 · Cited by 65,333
Gradient-based learning applied to document recognition
Lecun, Y., Bottou, L., Bengio, Y., & Haffner, P. (1998) · Proceedings of the IEEE · doi:10.1109/5.726791 · Cited by 58,805
Learning Multiple Layers of Features from Tiny Images
Krizhevsky, A. (2024) · doi:10.57702/zp44cu3g · Cited by 23,889
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
Chen, P., Zhang, H., Sharma, Y., Yi, J., & Hsieh, C. (2017) · ACM Workshop on Artificial Intelligence and Security (AISec) · doi:10.1145/3128572.3140448 · Cited by 1,864
Self-citationSearching for exotic particles in high-energy physics with deep learning
Baldi, P., Sadowski, P., & Whiteson, D. (2014) · Nature Communications · doi:10.1038/ncomms5308 · Cited by 1,261
Decision-based adversarial attacks: Reliable attacks against black-box machine learning models
Brendel, W., Rauber, J., & Bethge, M. (2017) · arXiv · doi:10.48550/arxiv.1712.04248 · Cited by 1,018
Seq2Sick: Evaluating the Robustness of Sequence-to-Sequence Models with Adversarial Examples
Cheng, M., Yi, J., Chen, P., Zhang, H., & Hsieh, C. (2020) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v34i04.5767 · Cited by 218
Self-citationExploring the Space of Black-box Attacks on Deep Neural NetworksPreprint
Bhagoji, A. N., He, W., Li, B., & Song, D. X. (2017) · arXiv (Cornell University) · doi:10.48550/arxiv.1712.09491 · Cited by 92
Research works printed but not linked: 11
- [2][2] Yurii Nesterov and Vladimir Spokoiny. Random gradient-free minimization of convex functions. Foundations of Computational Mathematics , 17(2):527-566, 2017. -
- [3][3] Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 , 2014. - · arXiv
- [4][4] Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 , 2013. - · arXiv
- [6][6] Seyed Mohsen Moosavi Dezfooli, Alhussein Fawzi, and Pascal Frossard. Deepfool: a simple and accurate method to fool deep neural networks. In Proceedings of 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR) , number EPFL-CONF-218057, 2016. -
- [7][7] Hongge Chen, Huan Zhang, Pin-Yu Chen, Jinfeng Yi, and Cho-Jui Hsieh. Attacking visual language grounding with adversarial examples: A case study on neural image captioning. In ACL , 2018. -
- [10][10] Pin-Yu Chen, Huan Zhang, Yash Sharma, Jinfeng Yi, and Cho-Jui Hsieh. Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security , pages 15-26. ACM, 2017. -
- [11][11] Aleksander Madry, Aleksandar Makelov, Ludwig Schmidt, Dimitris Tsipras, and Adrian Vladu. Towards deep learning models resistant to adversarial attacks. In ICLR , 2018. -
- [12][12] Pin-Yu Chen, Yash Sharma, Huan Zhang, Jinfeng Yi, and Cho-Jui Hsieh. Ead: elastic-net attacks to deep neural networks via adversarial examples. In AAAI , 2018. -
- [14][14] Nicolas Papernot, Patrick McDaniel, Ian Goodfellow, Somesh Jha, Z Berkay Celik, and Ananthram Swami. Practical black-box attacks against machine learning. In Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security , pages 506-519. ACM, 2017. -
- [16][16] Chun-Chen Tu, Pai-Shun Ting, Pin-Yu Chen, Sijia Liu, Huan Zhang, Jinfeng Yi, Cho-Jui Hsieh, and Shin-Ming Cheng. Autozoom: Autoencoder-based zeroth order optimization method for attacking black-box neural networks. CoRR , abs/1805.11770, 2018. - · arXiv
- [18][18] Saeed Ghadimi and Guanghui Lan. Stochastic first-and zeroth-order methods for nonconvex stochastic programming. SIAM Journal on Optimization , 23(4):2341-2368, 2013. -
Cited by
Sorted by citations
Items 201–268 of 268
Chengru, S., Xu, C., Yang, S., Zhou, Z., & Gong, C. (2019) · IEEE International Conference on Data Science in Cyberspace · doi:10.1109/dsc.2019.00078 · Cited by 2
AMEBA: An Adaptive Approach to the Black-Box Evasion of Machine Learning Models
Calzavara, S., Cazzaro, L., & Lucchese, C. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3453114 · Cited by 2
A Geometrical Approach to Evaluate the Adversarial Robustness of Deep Neural Networks
Wang, Y., Dong, B., Xu, K., Piao, H., Ding, Y., Yin, B., & Yang, X. S. (2023) · ACM Transactions on Multimedia Computing Communications and Applications · doi:10.1145/3587936 · Cited by 5
Less is More: Dimension Reduction Finds On-Manifold Adversarial Examples in Hard-Label Attacks
García, W., Chen, P., Clouse, H. S., Jha, S., & Butler, K. R. B. (2023) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml54575.2023.00025 · Cited by 3
Self-citationAdapting Zeroth Order Algorithms for Comparison-Based Optimization
Slavin, I. (2023) · SIAM Undergraduate Research Online · doi:10.1137/22s1530951 · Cited by 3
Towards Unified, Practical Evaluation of Model Poisoning Attacks and Defence in Federated Learning
Yang, H., Gu, D., & He, J. (2023) · IEEE Globecom Workshops (GC Wkshps) · doi:10.1109/gcwkshps58843.2023.10464739 · Cited by 2
Improving query efficiency of black-box attacks via the preference of deep learning models
Yang, X., Lin, J., Zhang, H., & Zhao, P. F. (2024) · Information Sciences · doi:10.1016/j.ins.2024.121013 · Cited by 2
Self-citationEnhancing Transformation-based Defenses using a Distribution ClassifierPreprint
Kou, C. K. L., Lee, H. K., Chang, E., & Ng, T. K. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1906.00258 · Cited by 5
The Human Visual System and Adversarial AIPreprint
Ho, Y., & Wookey, S. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2001.01172 · Cited by 3
QAIR: Practical Query-efficient Black-Box Attacks for Image RetrievalPreprint
Li, X., Li, J., Chen, Y., Ye, S., He, Y., Wang, S., Su, H., & Xue, H. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.02927 · Cited by 2
A Hard Label Black-box Adversarial Attack Against Graph Neural NetworksPreprint
Mu, J., Wang, B., Li, Q., Sun, K., Xu, M., & Liu, Z. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2108.09513 · Cited by 2
Towards robust image classification with deep learning and real-time DNN inference on mobile
Zhao, P. (2020) · doi:10.17760/d20416558 · Cited by 2
Adaptive Verifiable Training Using Pairwise Class Similarity
Wang, S., Eykholt, K., Lee, T., Jang, J., & Molloy, I. (2021) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v35i11.17223 · Cited by 1
Defenses for Adversarial attacks in Network Intrusion Detection System – A Survey
Dhinakaran, N., & Anto, S. (2023) · International Journal of Computing and Digital Systems · doi:10.12785/ijcds/1301105 · Cited by 1
QE-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian Optimization
Zhang, Z., Ahmed, N., & Yu, S. (2024) · 2012 International Conference on Computing, Networking and Communications (ICNC) · doi:10.1109/icnc59896.2024.10555954 · Cited by 1
Ye, M., Xu, X., Zhang, Q., & Wu, J. (2024) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw63382.2024.00299 · Cited by 1
Sparse and Transferable Universal Singular Vectors Attack
Kuvshinova, K., Tsymboi, O., & Oseledets, I. V. (2025) · Computational Mathematics and Mathematical Physics · doi:10.1134/s096554252470221x · Cited by 1
Mitigating Surrogate Bias in Black-Box Pedestrian Attacks via Mask-Based Gradient Backpropagation
Su, B., Li, D., Zhang, H., Chen, H., Li, Y., & Zhou, Z. (2025) · IEEE Transactions on Instrumentation and Measurement · doi:10.1109/tim.2025.3565056 · Cited by 1
Self-citationImproving the Transferability of Adversarial Examples with Advanced Diversity-Ensemble Method
Xu, Y., Chu, Q., & Yu, N. (2021) · IEEE International Conference on Data Science in Cyberspace · doi:10.1109/dsc53577.2021.00037 · Cited by 1
Attacking Random Forest Classifiers based on Shortest Path Algorithm
Wang, T., & Zhang, F. (2022) · Asia Conference on Algorithms, Computing and Machine Learning (CACML) · doi:10.1109/cacml55074.2022.00039 · Cited by 1
Zhang, Y., Song, Y., Bai, K., & Yang, Q. (2022) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3511808.3557276 · Cited by 2
Sign-OPT+: An Improved Sign Optimization Adversarial Attack
Yu, R., & Wang, Y. (2022) · Proceedings - International Conference on Image Processing · doi:10.1109/icip46576.2022.9897879 · Cited by 1
Exploring the Impact of Adding Adversarial Perturbation onto Different Image Regions
Yang, R., Guo, Y., Wang, R., Zhao, X., & Wang, Y. (2022) · IEEE International Symposium on Circuits and Systems proceedings · doi:10.1109/iscas48785.2022.9937628 · Cited by 1
Comprehensive Review on Advanced Adversarial Attack and Defense Strategies in Deep Neural Network
Smith, O., & Brown, A. (2023) · International Journal of Research and Innovation in Applied Science · doi:10.51584/ijrias.2023.8418 · Cited by 1
Enhanced Example Diffusion Model via Style Perturbation
Zhang, H., & Feng, G. (2023) · Symmetry · doi:10.3390/sym15051074 · Cited by 1
Self-citationQuery-Efficient and Imperceptible Attacks on Multivariate Time Series DNN Models
Shen, H., Yao, F., Sen, T., Moreira, G., & Sarker, A. (2022) · IFIP Networking Conference (IFIP Networking) · doi:10.23919/ifipnetworking55013.2022.9829803 · Cited by 1
A Universal Adversarial Attack on Time-Series DNNs for Connected Autonomous Vehicles
Liu, Q., Sen, T., Shen, H., & Dinakarrao, S. M. P. (2022) · IEEE International Conference on Mobile Ad-Hoc and Sensor Systems (MASS) · doi:10.1109/mass56207.2022.00050 · Cited by 1
BOSH: An Efficient Meta Algorithm for Decision-based AttacksPreprint
Xiao, Z., Yang, P., Jiang, Y., Chang, K.-W., & Hsieh, C. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1909.04288 · Cited by 1
Self-citationDeep Neural Mobile NetworkingPreprint
Zhang, C. (2020) · arXiv (Cornell University) · doi:10.7488/era/356 · Cited by 3
Generating Adversarial Inputs Using A Black-box Differential TechniquePreprint
Matos, J. B. P., Cordeiro, L. C., d’Amorim, M., & Huang, X. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.05315 · Cited by 1
On $\ell_p$-norm Robustness of Ensemble Stumps and TreesPreprint
Wang, Y., Zhang, H., Chen, H., Boning, D. S., & Hsieh, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2008.08755 · Cited by 1
Self-citationTowards Imperceptible Query-limited Adversarial Attacks with Perceptual Feature Fidelity LossPreprint
Quan, P., Guo, R., & Srivastava, M. B. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.00449 · Cited by 1
LSDAT: Low-Rank and Sparse Decomposition for Decision-based Adversarial AttackPreprint
Esmaeili, A., Edraki, M., Rahnavard, N., Shah, M. A., & Mian, A. S. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.10787 · Cited by 1
BO-DBA: Query-Efficient Decision-Based Adversarial Attacks via Bayesian OptimizationPreprint
Zhang, Z., & Yu, S. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.02732 · Cited by 1
Adversarial Imitation AttackPreprint
Zhou, M., Wu, J., Liu, Y., Huang, X., Liu, S., Zhang, X., & Zhu, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.12760
Towards Model-Agnostic Adversarial Defenses using Adversarially Trained AutoencodersPreprint
Vaishnavi, P., Eykholt, K., Prakash, A., & Rahmati, A. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1909.05921 · Cited by 1
Probing for Artifacts: Detecting Imagenet Model Evasions
Rounds, J., Kingsland, A., Henry, M. J., & Duskin, K. (2020) · IEEE/CVF Conference on Computer Vision and Pattern Recognition Workshops (CVPRW) · doi:10.1109/cvprw50498.2020.00403
Yi, J., Mudumbai, R., & Xu, W. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2007.14042
Self-citationVARF: Verifying and Analyzing Robustness of Random Forests
Nie, C., Shi, J., & Huang, Y. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-63406-3_10
Learning to Initialize Gradient Descent Using Gradient DescentPreprint
Ahuja, K., Dhurandhar, A., & Varshney, K. R. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2012.12141
García, W., Chen, P., Jha, S., Clouse, H. S., & Butler, K. R. B. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.03325
Self-citationAdversarial Feature Stacking for Accurate and Robust Predictions.Preprint
Liu, F., Zhao, R. J., & Shi, L. (2021) · arXiv (Cornell University)
Black-box adversarial attacks based on random coordinate selection
Dong, K., Shi, J., & Li, G. (2021) · Journal of Physics Conference Series · doi:10.1088/1742-6596/1941/1/012082
Adversarial Attack Algorithm on Target Features in Simplex Noise Area
Wei, C., Liu, Y., & Wei, S. (2021) · Journal of Computer-Aided Design & Computer Graphics · doi:10.3724/sp.j.1089.2021.18365
Exploring Adversarial Examples for Efficient Active Learning in Machine Learning ClassifiersPreprint
Yu, H., Zeng, S., Zhang, T., Lin, I.-C., & Jin, Y. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2109.10770
Feng, R., Mangaokar, N., Chen, J., Fernandes, E., Jha, S., & Prakash, A. (2020) · arXiv (Cornell University)
A Black Box Attack Based on Visual Sensitivity
Li, C., Fan, C., Zhu, J., Zhang, Z., & Qiao, J. (2021) · IEEE International Conference on Unmanned Systems (ICUS) · doi:10.1109/icus52573.2021.9641444
Black-Box Adversarial Attack by Evolution Strategy with Binary Search
Cheng, H., Li, Z., & Cai, X. (2021) · International Conference on Computational Intelligence and Security (CIS) · doi:10.1109/cis54983.2021.00103
Gray Adversarial Attack Algorithm based on Multi-Scale Grid Search
Fan, C., Zhang, J., Li, C., Zhang, Z., Teng, Y., & Qiao, J. (2021) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom53373.2021.00122
A Universal Targeted Attack Method against Image Classification
Luo, H., Gu, Z., Zhang, C., Wang, L., Li, S., & Chen, Z. (2021) · IEEE International Conference on Data Science in Cyberspace · doi:10.1109/dsc53577.2021.00032
A motional but temporally consistent physical video examples
Du, Z., Wei, X., Zhang, W., Liu, F., Bian, H., & Liu, J. (2022) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2022.103278
Understanding Black-Box Attacks Against Object Detectors from a User’s Perspective
Midtlid, K. A., Åsheim, J., & Li, J. (2022) · Communications in computer and information science · doi:10.1007/978-3-031-14179-9_18
(2022) · Elsevier eBooks · doi:10.1016/b978-0-12-824020-5.00034-x
ECOPY: Data-free model stealing for deep neural network
Qin, W., Zhang, Z., Xie, Y., & Zhu, L. (2023) · International Conference on Computer Network Security and Software Engineering (CNSSE) · doi:10.1117/12.2683207
An Ant Colony Optimization Defense Against Adversarial Attacks for Pedestrian DetectionPreprint
Abari, M. E., Nilchi, A. R. N., & Hoseinnezhad, R. (2023) · SSRN Electronic Journal · doi:10.2139/ssrn.4583897
Stability Analysis for Power Depth Vision of New Power System Based on Black-Box Adversarial Attack
Zhang, Y., Bai, H., Huo, C., Zhang, G., & Zheng, L. (2023) · International Conference on Power System Technology (POWERCON) · doi:10.1109/powercon58120.2023.10330972
Side Channel Based Substitute Adversarial Attack on Deep Learning ModelsPreprint
Chen, Z., Hu, J., Lu, Y., Zhang, D., Xiang, Y., & Xuan, Q. (2024) · Research Square · doi:10.21203/rs.3.rs-4178736/v1
Hasan, M. M., Islam, R., Mamun, Q., Islam, M. Z., & Gao, J. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4863302 · Cited by 2
Boosting Transferability of Decision-based Sampling Batch Attack Using Skeleton Feature
Chen, S., & Wang, S. (2024) · International Joint Conference on Neural Networks (IJCNN) · doi:10.1109/ijcnn60899.2024.10650179
When does gradient estimation improve black-box adversarial attacks?
Gesny, E., Giboulot, E., & Furon, T. (2024) · IEEE International Workshop on Information Forensics and Security · doi:10.1109/wifs61860.2024.10810691
AdvNets: Adversarial Attacks and Countermeasures for Model-level Neural Trojan Defenses
Sun, P., Zhang, C., Wei, L., Zhang, B., & Sun, Q. (2024) · Globecom · doi:10.1109/globecom52923.2024.10901588
Ji, Y. P., & Echizen, I. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00129
SEA: Shareable and Explainable Attribution for Query-Based Black-Box Attacks
Gao, Y., Shumailov, I., & Fawaz, K. (2025) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml64287.2025.00031
Towards Robust Synthetic Aperture Radar Classification: Counteracting Black‐Box Adversarial Attacks
Wang, K., Wu, Y., Yang, J., & Huang, X. (2025) · IET Radar Sonar & Navigation · doi:10.1049/rsn2.70062
Model safety: adversarial attacks
Jiang, Y., Ma, X., & Wu, Z. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-324840-5.00013-5
(2025) · Elsevier eBooks · doi:10.1016/b978-0-44-324840-5.00019-6
SamJailbreak: Query-Efficient Sampling-based Jailbreak Attack against Large Language ModelsPreprint
Guo, S., Ming, Z., Zhao, D., Zhang, X., Ding, Z., Han, J., & Peng, H. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5492127
Metadata
- Authors
- Cheng, M., Le, T., Chen, P.-Y., Yi, J., Zhang, H., & Hsieh, C.-J.
- Affiliations
- University of California, Davis (US)
- IBM (United States) (US)
- University of California, Los Angeles (US)
- Venue
- arXiv
- Publisher
- arXiv
- Published
- 2018
- ISSN
- 2331-8422 (ISSN-L)
- arXiv
- 1807.04457
- OpenAlex
- W2874797877
- Cited by
- 269
- References
- 14
- Citations by year
- 2025: 20 · 2024: 36 · 2023: 39 · 2022: 48 · 2021: 57 · 2020: 46 · 2019: 22 · 2018: 1
- Type
- posted content
- Language
- en
- Open access
- green
- arxiv.org
- Locations
- arXiv (Cornell University) (submittedVersion)
- Rare & Special e-Zone (The Hong Kong University of Science and Technology) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Software › Software Testing and Debugging Techniques
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- adversarial attacks, derivative-free optimization, gradient boosting decision tree, convolutional neural networks, adversarial robustness
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
