On Adaptive Attacks to Adversarial Example Defenses

Explore a 20-minute conference talk from USENIX's ScAINet '20 summit that delves into the critical topic of adaptive attacks on adversarial example defenses. Join Stanford University researcher Florian Tramer as he examines the challenges and intricacies of this cybersecurity issue. Gain insights into whitebox attacks, adaptive attacks, and the reasons behind the persistent vulnerability of defense mechanisms. Discover key observations and meta points that shed light on the underlying problem. Learn why this subject matters and its implications for the field of artificial intelligence and security. Conclude with a comprehensive understanding of the current state of adversarial example defenses and the ongoing challenges they face.

Intro
Why should we care
Challenges
Background
Whitebox Attacks
Adaptive Attacks
Why were all defenses still broken
First Observation
Second Observation
Meta Points
The Problem
Conclusion