Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples

Open in new window