Two Sides of the Same Coin: White-box and Black-box Attacks for Transfer Learning

Yinghua Zhang, Yangqiu Song, Jian Liang +2

Transfer learning has become a common practice for training deep learning models with limited labeled data in a target domain. On the other hand, deep models are vulnerable to adve…