Research question
Does defensive distillation actually make networks robust?
Key findings
- The C&W attacks defeat defensive distillation with 100% success - Stronger optimisation-based attacks are needed to evaluate any defence honestly
The Carlini-Wagner attacks broke defensive distillation and set the standard that defences must be evaluated against strong, adaptive optimisation-based attacks.
Does defensive distillation actually make networks robust?
Spot an error, or know a record we should add? Members can propose additions and submit corrections.