Adversarial Risk and the Dangers of Evaluating Against Weak Attacks

Abstract

This paper investigates recently proposed approaches for defending against adversarial examples and evaluating adversarial robustness. We motivate