Frame the adversary: a structure-aware attack methodology
This paper proposes a methodology for crafting principled frequency-based adversarial attacks, via a dedicated optimization framework, and proves that the attacks emerge as weighted $\ell_2$-projections onto this set, yielding a general and controlled attack generation mechanism.
Vicky Kouni, Stelios Perrakis, Francis R. Bach et al.
· 0 citations