Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Thundernna: a white box adversarial attack   The existing work shows that the neural network trained by naive
gradient-based optimization method is prone to adversarial attacks, adds small
malicious on the ordinary input is enough to make the neural network wrong. At
the same time, the attack against a neural network is the key to improving its
robustness. The training against adversarial examples can make neural networks
resist some kinds of adversarial attacks. At the same time, the adversarial
attack against a neural network can also reveal some characteristics of the
neural network, a complex high-dimensional non-linear function, as discussed in
previous work.
  In This project, we develop a first-order method to attack the neural
network. Compare with other first-order attacks, our method has a much higher
success rate. Furthermore, it is much faster than second-order attacks and
multi-steps first-order attacks.

16
The categories of this paper are: stat
24
The categories of this paper are: dg-ga
3
The categories of this paper are: physics
17
The categories of this paper are: q-fin
23
The categories of this paper are: solv-int
9
The categories of this paper are: nlin
2
The categories of this paper are: math
35
The categories of this paper are: mtrl-th
34
The categories of this paper are: chem-ph
21
The categories of this paper are: adap-org
8
The categories of this paper are: hep-ex
22
The categories of this paper are: chao-dyn
10
The categories of this paper are: q-bio
13
The categories of this paper are: quant-ph
28
The categories of this paper are: alg-geom
31
The categories of this paper are: ao-sci