Multi-attacks: Many images $+$ the same adversarial attack $\to$ many target labels

Open in new window