Kevin J Liang

Perturbing Across the Feature Hierarchy to Improve Standard and Strict Blackbox Attack Transferability

2020 · arXiv (Cornell University)

We consider the blackbox transfer-based targeted adversarial attack threat model in the realm of deep neural network (DNN) image classifiers. Rather than focusing on crossing decision boundaries at the output layer of the source model, …