no code implementations • CVPR 2023 • Phoenix Neale Williams, Ke Li
However, existing methods often struggle to simultaneously minimize the number of modified pixels and the size of the modifications, often requiring a large number of queries and assuming unrestricted access to the targeted DNN.