IBM

Adversarial examples pose an asymmetrical challenge with respect to attackers and defenders. An attacker aims to get his reward from a successful attack without raising suspicion.