Paper under double-blind review
hard-label attacks;adversarial machine learning;generalization
Hard-label Manifolds: Unexpected advantages of query efficiency for finding on-manifold adversarial examples