Adversarial machine learning

Researchers introduce the certified local transferable region, a connected area of inputs where a single adversarial perturbation is mathematically guaranteed to fool a deep neural network. They propose reverse attack oracle-based search (RAOS) to estimate the maximum size of this region, using a minimal distance attack and state-of-the-art verifiers at each step. The region's size serves as a metric for the local transferability of perturbations across model structures and adversarial training scenarios.