Yongwei Wang

Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification

2020 · arXiv (Cornell University)

Deep neural networks are vulnerable to adversarial attacks. White-box adversarial attacks can fool neural networks with small adversarial perturbations, especially for large size images. However, keeping successful adversarial perturbations imperceptible is especially challenging for transfer-based …