Consequently, as c increases, the attack success rate improves and adversarial examples are generated more easily, while the L 2 distance shows a slightly increasing trend.
← all excerpts
FP-ZOO: Fast Patch-Based Zeroth Order Optimization for Black-Box Adversarial Attacks on Vision Models.
1
—
—