Exploring Sparsity and Smoothness of Arbitrary ℓp Norms in Adversarial Attacks
It is shown that the choice of $\ell_1$ or $\ell_2$ is suboptimal in most cases and the optimal $p$ value is dependent on the specific task, highlighting the importance of principled norm selection when designing and evaluating adversarial attacks.