Unrestricted Adversarial Samples Based on Non-semantic Feature Clusters Substitution

MingWei Zhou, Xiaobing Pei

Most current methods generate adversarial examples with the $L_p$ norm specification. As a result, many defense methods utilize this property to eliminate the impact of such attack…