Boosting Adversarial Attacks by Leveraging Decision Boundary Information

Boheng Zeng, LianLi Gao, QiLong Zhang +3

Due to the gap between a substitute model and a victim model, the gradient-based noise generated from a substitute model may have low transferability for a victim model since their…