Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples

Qizhang Li, Yiwen Guo, Wangmeng Zuo +1

The transferability of adversarial examples across deep neural networks (DNNs) is the crux of many black-box attacks. Many prior efforts have been devoted to improving the transfer…