NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability

Krishna Kanth Nakka, Alexandre Alahi

The generation of transferable adversarial perturbations typically involves training a generator to maximize embedding separation between clean and adversarial images at a single m…