Sep 2026
Boosting cross-architecture adversarial transferability by enhanced deformation attack.
The Enhanced Deformation Attack (EDA), which estimates attack gradients over stochastically transformed views of the current adversarial image, achieves the highest mean attack success rate (ASR) on ViT targets for all four CNN sources, outperforming the strongest source-specific baseline.
Jia-Cheng Wang, Hegui Zhu, Yi-Fan Zhang et al.
· Neural Networks · 0 citations