no code implementations • 21 Dec 2023 • Haobo Lu, Xin Liu, Kun He
However, few of them are dedicated to input transformation. In this work, we observe a positive correlation between the logit/probability of the target class and diverse input transformation methods in targeted attacks.