However, current sparse adversarial attack methods still have some shortcomings on both sparsity and invisibility. In this paper, we propose a novel two-stage distortion-aware greedy-based method dubbed as “GreedyFool”. Specifically, it first selects the most effective candidate positions to...
GreedyFool Distortion-Aware Sparse.pptx 932.1K· 百度网盘发布于 2021-08-19 09:13 对抗样本 对抗机器学习:机器学习系统中的攻击和防御(书籍) 赞同1添加评论 分享喜欢收藏申请转载 写下你的评论... 还没有评论,发表第一个评论吧关于...
current sparse adversarial attack methods still have some shortcomings on both sparsity and invisibility. In this paper, we propose a novel two-stage distortion-aware greedy-based method dubbed as “GreedyFool”. Specifically, it first selects the most effective candidate positions to mo...