MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examples

TL;DR

This paper demonstrates that MagNet and similar defenses against adversarial examples are vulnerable, as adversaries can craft examples that bypass these defenses with minimal additional distortion.

Contribution

It reveals the fragility of MagNet and similar defenses, showing they are not robust against carefully constructed adversarial examples.

Findings

Adversarial examples can defeat MagNet with slight distortion

MagNet and similar defenses are not robust to adversarial attacks

Minimal increase in distortion can bypass these defenses

Abstract

MagNet and "Efficient Defenses..." were recently proposed as a defense to adversarial examples. We find that we can construct adversarial examples that defeat these defenses with only a slight increase in distortion.