[D] Do imperceptible adversarial examples exist for classical models? • r/MachineLearning

So linear models definitely do, and they're at least as bad as with neural nets. For KNN with k 1, it definitely wouldn't have adversarial examples. Assuming all distinct data points are separated by more than epsilon, perturbations smaller than epsilon shouldn't change the nearest neighbor and hence shouldn't change the classification. SVMs also might not have adversarial examples, but I'm less certain.