Research question
What threat model and vocabulary should ML security research adopt?
Key findings
- Systematises attacks by attacker goals and knowledge across training and inference - Relates robustness, privacy and generalisation as linked properties
