Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Gradient-Free Adversarial Attacks for Bayesian Neural Networks   The existence of adversarial examples underscores the importance of
understanding the robustness of machine learning models. Bayesian neural
networks (BNNs), due to their calibrated uncertainty, have been shown to posses
favorable adversarial robustness properties. However, when approximate Bayesian
inference methods are employed, the adversarial robustness of BNNs is still not
well understood. In this work, we employ gradient-free optimization methods in
order to find adversarial examples for BNNs. In particular, we consider genetic
algorithms, surrogate models, as well as zeroth order optimization methods and
adapt them to the goal of finding adversarial examples for BNNs. In an
empirical evaluation on the MNIST and Fashion MNIST datasets, we show that for
various approximate Bayesian inference methods the usage of gradient-free
algorithms can greatly improve the rate of finding adversarial examples
compared to state-of-the-art gradient-based methods.

29
The categories of this paper are: funct-an
12
The categories of this paper are: nucl-th
22
The categories of this paper are: chao-dyn
10
The categories of this paper are: q-bio
23
The categories of this paper are: solv-int
30
The categories of this paper are: q-alg
27
The categories of this paper are: comp-gas
31
The categories of this paper are: ao-sci
13
The categories of this paper are: quant-ph
5
The categories of this paper are: gr-qc
34
The categories of this paper are: chem-ph
28
The categories of this paper are: alg-geom
33
The categories of this paper are: plasm-ph
36
The categories of this paper are: cmp-lg
3
The categories of this paper are: physics
20
The categories of this paper are: acc-phys