Attacking deep networks with surrogate-based adversarial black-box methods is easy.

Nicholas A. Lord, Romain Mller, Luca Bertinetto

Browse the full ICLR paper archive.