Averaging adversarial examples over the fine-tuning trajectory, called AaF, improves targeted adversarial transferability across CNN and transformer victim models compared with endpoint-only fine-tuning.
Learning with pseudo- ensembles,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CV 1years
2024 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Two Heads Are Better Than One: Averaging along Fine-Tuning to Improve Targeted Transferability
Averaging adversarial examples over the fine-tuning trajectory, called AaF, improves targeted adversarial transferability across CNN and transformer victim models compared with endpoint-only fine-tuning.