2023 . 09 . 8

Properties of learning Multiplicative Universal Adversarial Perturbations in image data