Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Identification of Attack-Specific Signatures in Adversarial Examples   The adversarial attack literature contains a myriad of algorithms for
crafting perturbations which yield pathological behavior in neural networks. In
many cases, multiple algorithms target the same tasks and even enforce the same
constraints. In this work, we show that different attack algorithms produce
adversarial examples which are distinct not only in their effectiveness but
also in how they qualitatively affect their victims. We begin by demonstrating
that one can determine the attack algorithm that crafted an adversarial
example. Then, we leverage recent advances in parameter-space saliency maps to
show, both visually and quantitatively, that adversarial attack algorithms
differ in which parts of the network and image they target. Our findings
suggest that prospective adversarial attacks should be compared not only via
their success rates at fooling models but also via deeper downstream effects
they have on victims.

3
The categories of this paper are: physics
13
The categories of this paper are: quant-ph
16
The categories of this paper are: stat
17
The categories of this paper are: q-fin
14
The categories of this paper are: math-ph
34
The categories of this paper are: chem-ph
12
The categories of this paper are: nucl-th
30
The categories of this paper are: q-alg
27
The categories of this paper are: comp-gas
33
The categories of this paper are: plasm-ph
7
The categories of this paper are: hep-th
29
The categories of this paper are: funct-an
9
The categories of this paper are: nlin
10
The categories of this paper are: q-bio
4
The categories of this paper are: cond-mat
37
The categories of this paper are: supr-con