A Little Robustness Goes a Long Way: Leveraging Robust Features for Targeted Transfer Attacks

Aug-14-2025, 11:45:16 GMT–Neural Information Processing Systems 

Here, we show that training the source classifier to be "slightly robust"--that is, robust to small-magnitude