Generalizable Adversarial Attacks with Latent Variable Perturbation Modelling

Avishek Joey Bose, Andre Cianflone, William L. Hamilton

Adversarial attacks on deep neural networks traditionally rely on a constrained optimization paradigm, where an optimization procedure is used to obtain a single adversarial pertur…