Yipeng Zou

Boosting Adversarial Transferability via Ensemble Non-Attention

Ensemble attacks integrate the outputs of surrogate models with diverse architectures, which can be combined with various gradient-based attacks to improve adversarial transferability. However, previous work shows unsatisfactory attack performance when transferring across heterogeneous model archite