FAPA: Transferable Adversarial Attacks Based on Foreground Attention

Figure 1

The framework of the proposed method. It mainly includes the FAPA algorithm, patch encoder, white-box model, and black-box model.