Adversarial Image Generation by Spatial Transformation in Perceptual Colorspaces

Ayberk Aydin, Alptekin Temizel

Deep neural networks are known to be vulnerable to adversarial perturbations. The amount of these perturbations are generally quantified using $L_p$ metrics, such as $L_0$, $L_2$ a…