Defensive Distillation is Not Robust to Adversarial Examples

We show that defensive distillation is not secure: it is no more resistant to targeted misclassification attacks than unprotected neural networks.

Paper

Similar papers

© 2026 NYSGPT2525 LLC