2024
AGS: Affordable and Generalizable Substitute Training for Transferable Adversarial Attack
AAAI 2024technical
In practical black-box attack scenarios, most of the existing transfer-based attacks employ pretrained models (e.g. ResNet50) as the substitute models. Unfortunately, these substitute models are not always appropriate for transfer-based attacks. Firstly, these models are usually trained on a largesc…