cross-model attack

input transformation (2) adversarial example (2) adversarial transferability (2) adversarial watermark (1) deformation-constrained warping (1) reverse embedded defense (1) elastic deformation (1) reinforcement learning strategy (1) facial image (1) model augmentation (1)