Adversarial Attack across Datasets

Yunxiao Qin, Yuanhao Xiong, Jinfeng Yi +2

Existing transfer attack methods commonly assume that the attacker knows the training set (e.g., the label set, the input size) of the black-box victim models, which is usually unr…