Zhendong Wu

Improving Transferability of Adversarial Examples with Virtual Step and Auxiliary Gradients

Deep neural networks have been demonstrated to be vulnerable to adversarial examples, which fool networks by adding human-imperceptible perturbations to benign examples. At present, the practical transfer-based black-box attacks are attracting significant attention. However, most existing transfer-b…