1 paper
Chao Zhou, Shenghua He, Jiaxin Mo +2
Decision-based sparse attacks must reduce perturbation support using only the victim's predicted label. The best restoration strategy varies as support contracts: coarse removal wo…