Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses

Abstract

This paper focuses on learning transferable adversarial examples specifically against defense models (models to defense adversarial attacks). In particular, we show that a simple universal perturbation can fool a series of state-of-the-art defenses.