Lingyang Chu*

Cocktail Universal Adversarial Attack on Deep Neural Networks

"Deep neural networks (DNNs) for image classification are known to be susceptible to many diversified universal adversarial perturbations (UAPs), where each UAP successfully attacks a large but substantially different set of images. Properly combining the diversified UAPs can significantly improve t…