Patch-wise Adversarial Removal
Implementation of paper "Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal".
Introduction
Patch-wise Adversarial Removal (PAR) is a new decision-based black-box attack against vision transformers, which divides images into patches through a coarse-to-fine search process and compresses the noise on each patch separately.