Weiheng Chai

Enhancing Cross-Task Black-Box Transferability of Adversarial Examples With Dispersion Reduction

Neural networks are known to be vulnerable to carefully crafted adversarial examples, and these malicious samples often transfer, i.e., they remain adversarial even against other models. Although significant effort has been devoted to the transferability across models, surprisingly little attention…