Does More Compute Make Every Adversarial Attack Transferable?
This work shows that, when there is a quadratic gap in computational resources between attacker and defender, every learnable classification task admits either a transferable attack or an adversarial defense, and proves a stronger result that implies this failure.
Greg Gluch, S. Goldwasser, Anastasiia Struss
· 1 citation