1 paper · 1 filter
Mingyuan Fan, Xiaodan Li, Cen Chen +2
A prevailing belief in attack and defense community is that the higher flatness of adversarial examples enables their better cross-model transferability, leading to a growing inter…