Pol Labarbarie

Optimal transport based adversarial patch to leverage large scale attack transferability

Adversarial patch attacks, where a small patch is placed in the scene to fool neural networks, have been studied for numerous applications. Focusing on image classification, we consider the setting of a black-box transfer attack where an attacker does not know the target model. Instead of forcing co…