Qizhang Li

Improving Adversarial Transferability via Intermediate-level Perturbation Decay

2023 · arXiv (Cornell University)

Intermediate-level attacks that attempt to perturb feature representations following an adversarial direction drastically have shown favorable performance in crafting transferable adversarial examples. Existing methods in this category are normally formulated with two separate stages, where …