Fig. 2From: DTA: distribution transform-based attack for query-limited scenarioThe conditional normalizing flow model for attack. The left depicts a basic conditional flow step, while the right plots the whole architectureBack to article page