I've not read everything yet but the adversarial attacks remind me of an article I read about evading SVMs and perceptrons by a simple gradient descent. Biggio

I've not read everything yet but the adversarial attacks remind me of an article I read about evading SVMs and perceptrons by a simple gradient descent. Biggio et al., "Evasion Attacks Against Machine Learning at Test Time", http://www.ecmlpkdd2013.org/wp-content/uploads/2013/07/527.pdf http://www.ecmlpkdd2013.org/wp-content/uploads/2013/07/527.p...