Jingwen Li

Rotation Transformation: A Method to Improve the Transferability of Adversarial Examples

2021

Convolutional neural network models are fragile to adversarial examples. Adding disturbances that humans cannot observe in clean images can make the model classification error. Among the adversarial attack methods, white-box attacks have achieved a high …