FSPGD uses two feature-similarity losses to craft segmentation attacks that transfer across CNN and transformer models, and reports large mIoU drops on Pascal VOC and Cityscapes.
An adaptive model ensemble adversarial attack for boosting adversarial transferability
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CV 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
FSPGD: Rethinking Black-box Attacks on Semantic Segmentation
FSPGD uses two feature-similarity losses to craft segmentation attacks that transfer across CNN and transformer models, and reports large mIoU drops on Pascal VOC and Cityscapes.