1 paper
Alireza Heshmati, Saman Soleimani Roudi, Sajjad Amini +2
Existing adversarial attacks often neglect perturbation sparsity, limiting their ability to model structural changes and to explain how deep neural networks (DNNs) process meaningf…