Decision-based Universal Adversarial Attack

Jing Wu, Mingyi Zhou, Shuaicheng Liu +2

A single perturbation can pose the most natural images to be misclassified by classifiers. In black-box setting, current universal adversarial attack methods utilize substitute mod…