Then, in Section 4.2, we investigate the effect of hyperparameters on the performance of AB-FGSM attack. The results of single and ensemble model attacks by the proposed method and other baseline attacks are discussed in Sections 4.3 and 4.4. Discussion Here, we summarize each optimal hyper...