GNP Attack: Transferable Adversarial Examples via Gradient Norm Penalty

Open in new window