Kaisheng Liang

attack transferability (2) adversarial attack (2) adversarial example (2) adversarial perturbation (1) feature perturbation (1) neural network (1) targeted attack (1) feature tuning (1) image classification (1) stylized network (1) black-box attack (1) deep neural network (1)