Simple iterative method for generating targeted universal adversarial perturbations

Hokuto Hirano, Kazuhiro Takemoto

Deep neural networks (DNNs) are vulnerable to adversarial attacks. In particular, a single perturbation known as the universal adversarial perturbation (UAP) can foil most classifi…