Distinguished Paper Award Runner-up

Evading Black-box Classifiers Without Breaking Eggs

We propose a new real-world oriented metric for black-box decision-based attacks on security-critical systems

Edoardo Debenedetti, Nicholas Carlini, Florian Tramèr