Minimizing Maximum Model Discrepancy for Transferable Black-box Targeted Attacks

Open in new window