"Real Attackers Don't Compute Gradients": Bridging the Gap Between Adversarial ML Research and Practice
Argues that real attackers rely on simple tactics rather than gradient-based methods, highlighting gaps between adversarial ML research and practice.
Giovanni Apruzzese, Hyrum S. Anderson, Savino Dambra et al.