Kazuki Yoneyama

Zero-Query Black-Box Adversarial Attacks Using Transferability on Object Detection Models

: Non-maximum suppression (NMS) is commonly used to filter redundant detection results in object detection models. Several white-box adversarial attacks to induce false positives by circumventing the NMS and increasing the number of false bounding boxes have been studied. However, since white-box attacks require intern...