Learning Transferable Adversarial Examples via Ghost Networks

Yingwei Li, Song Bai, Yuyin Zhou +3

Recent development of adversarial attacks has proven that ensemble-based methods outperform traditional, non-ensemble ones in black-box attack. However, as it is computationally pr…