Low Frequency Adversarial Perturbation

Chuan Guo, Jared S. Frank, Kilian Q. Weinberger

Abstract: Adversarial images aim to change a target model’s decision by minimally perturbing a target image. In the black-box setting, the absence of gradient information often renders this search problem co...