Analyzing Physical Adversarial Example Threats to Machine Learning in Election Systems
This paper presents a probabilistic framework to quantify the number of adversarial ballots required to flip a U.S. election and empirically demonstrates through 144,000 physical print-and-scan experiments that the most effective adversarial attacks in the physical voting domain differ significantly from those in the digital domain.