Fig. 5From: Attack based on data: a novel perspective to attack sensitive points directlyThe figure of using global search algorithm on Adiac dataset (\(exp=1.5\), \(eps=1\)). Only when the perturbation is greater than or equal to \(|\delta (\mathbf {x_i})_{j}^v\big |_{\text {min}}^f\) can the model misjudge, the minimum perturbation above is a \(\delta ({\textbf{x}})_2\) or \(\delta ({\textbf{x}})_3\)Back to article page