Jingyang Wen

CA-UAP: Content-Agnostic Universal Adversarial Perturbation for Enhanced Generalization

Deep Neural Networks (DNNs) have been shown vulnerable to universal adversarial perturbation (UAP), which are imperceptible and capable of fooling the target model for most samples. Existing universal attack methods mainly focus on aggregating the gradient obtained from global image features to dire…