Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attacks
AutoAttack combines Auto-PGD, FAB, Square Attack for parameter-free, automated robustness evaluation, revealing vulnerabilities missed by prior methods.
Francesco Croce, Matthias Hein