Towards Feature Space Adversarial Attack

Qiuling Xu, Guanhong Tao, Siyuan Cheng +1

We propose a new adversarial attack to Deep Neural Networks for image classification. Different from most existing attacks that directly perturb input pixels, our attack focuses on…