On-manifold adversarial attack based on latent space substitute model

Chunkai Zhang, Xiaofeng Luo, Peiyi Han