PDPGD: Primal-Dual Proximal Gradient Descent Adversarial Attack

Understand

State-of-the-art deep neural networks are sensitive to small input perturbations.

• Since the discovery of this intriguing vulnerability, many defence methods have been proposed that attempt to improve robustness to adversarial noise.
• Fast and accurate attacks are required to compare various defence methods.
• However, evaluating adversarial robustness has proven to be extremely challenging.