On Transfer-based Universal Attacks in Pure Black-box Setting

Open in new window