Adversarial testing · Question 56 of 60

A development team has full access to the architecture, parameters and training process of its model. Which approach to adversarial testing is then typically easier?

1 answer is correct. Hard

1. A Building an equivalent substitute model, because the original model may not be tested
2. B Brute force testing, because internals provide no advantage
3. C No test at all, because known models have no adversarial examples
4. D White-box testing, because knowledge of the internals makes it easier to craft adversarial examples