DTA: Distribution Transform-based Attack for Query-Limited Scenario

Renyang Liu, Wei Zhou, Xin Jin +3

In generating adversarial examples, the conventional black-box attack methods rely on sufficient feedback from the to-be-attacked models by repeatedly querying until the attack is…