Evasion Attacks on Image Classifiers: FGSM, PGD, and C&W

The three foundational gradient-based evasion attacks, what each one actually optimizes, and what the benchmark numbers mean when you're evaluating a defense.