Generating Structured Adversarial Attacks Using Frank-Wolfe Method

Ehsan Kazemi, Thomas Kerdreux, Liquang Wang

White box adversarial perturbations are generated via iterative optimization algorithms most often by minimizing an adversarial loss on a ${\ell }_p$ neighborhood of the original imag…