حملهٔ گریز

تعریف در منبع (انگلیسی)

An attack where the adversary's goal is to generate adversarial examples: samples whose classification can be changed to an arbitrary class of the attacker's choice, often with minimal perturbation.