Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses

摘要

This paper focuses on learning transferable adversarial examples specifically against defense models (models to defense adversarial attacks). In particular, we show that a simple universal perturbation can fool a series of state-of-the-art defenses.