I am performing an adversarial machine learning attack on a neural network for network traffic classification. For adding adversarial perturbations in features such as packet interarrival times and packet size, what norm should I use as a constraint? (eg. l1 norm, l2 norm, l-infinity norm, etc.)

  • 1
    $\begingroup$ You should provide some details about where are you applying exactly the norm to. You're saying you're using it for placing a constraint, but it's not clear, unless someone knows what you're talking about. $\endgroup$
    – nbro
    Mar 31 '20 at 11:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.