137 citations · 206 across the 8 of their papers we have counts for
1 paper · 2 filters
Ali Shafahi, Mahyar Najibi, Zheng Xu +3
Standard adversarial attacks change the predicted class label of a selected image by adding specially tailored small perturbations to its pixels. In contrast, a universal perturbat…