Leveraging Information Consistency in Frequency and Spatial Domain for Adversarial Attacks

Zhibo Jin, Jiayu Zhang, Zhiyu Zhu +3

Adversarial examples are a key method to exploit deep neural networks. Using gradient information, such examples can be generated in an efficient way without altering the victim mo…