Department of Automation, Shanghai Jiao Tong University; Computer Science and Engineering, University of California, Santa Cruz; ESAT-STADIUS, KU Leuven
Sizhe Chen, Zhehao Huang, Qinghua Tao, Yingwen Wu, Cihang Xie, Xiaolin Huang
adversarial defense;black-box attack;model calibration;score-based query attack
Adversarial Attack on Attackers: Post-Process to Mitigate Black-Box Score-Based Query Attacks