Backpropagating Linearly Improves Transferability of Adversarial Examples (Supplementary Material)

Open in new window