A Sparsity-Limitation-Based High-Dimensional Distribution Searching Algorithm for Adversarial Attack

Figure 5

Visual comparisons of the adversarial examples generated by compared algorithms—AdvGAN, TREMBA, ColorFool, and our SparseAdv.