DANAA: Towards transferable attacks with double adversarial neuron attribution

Zhibo Jin, Zhiyu Zhu, Xinyi Wang +3

While deep neural networks have excellent results in many fields, they are susceptible to interference from attacking samples resulting in erroneous judgments. Feature-level attack…