Chengyao Hua

Physically Robust and Imperceptible Adversarial Examples Generation Based on Frequency

Adversarial examples generated in digital space may fail to work in the physical world because the recapture process will ruin the adversarial property of the examples. Several approaches have been proposed to generate adversarial examples that can survive in the physical world, they however either…