Frequency Domain Model Augmentation for Adversarial Attack

Yuyang Long, Qilong Zhang, Boheng Zeng +4

For black-box attacks, the gap between the substitute model and the victim model is usually large, which manifests as a weak attack performance. Motivated by the observation that t…