FGSM for targeted attack.
Loss function: cosine similarity
Pretrained model can be found in https://github.com/TencentYoutuResearch/Adv-Makeup
The adversial examples is :
And the raw image is like:
FGSM for targeted attack.
Loss function: cosine similarity
Pretrained model can be found in https://github.com/TencentYoutuResearch/Adv-Makeup
The adversial examples is :
And the raw image is like: