1 paper
Ziyang Liu, Hongyuan Wang, Zijian Wang +4
Physical adversarial attacks often overfit single surrogate models and optimization objectives. While ensemble attacks can mitigate this, existing methods struggle with severe grad…