NATTACK Learning the Distributions of Adversarial Examples for an Improved Black-Box Attack on Deep Neural Networks

NATTACK:LearningtheDistributionsofAdversarialExamplesforanImprovedBlack-BoxAttackonDeepNeuralNetworksYandongLi1LijunLi1LiqiangWang1TongZhang2BoqingGong3Abstracttacklingdifferentdefenses.Hence,itmay...