Yunlong Wang

ATR-UAP: Enhancing the Transferability of Data-Free Universal Adversarial Perturbation via Adaptive Truncated Ratio Maximization.

Universal adversarial attacks aim to generate a single image-agnostic perturbation, known as Universal Adversarial Perturbation (UAP), that consistently misleads CNN models across diverse inputs, thus serving as an efficient tool for robustness evaluation. Early approaches to universal attacks typically rely on large-s...