Assertion: perturbation | /r/CapableOf | fool different models
Facets:
Source sentences:
text: So we’ve seen that universal perturbations can be created for a given model, but does a perturbation developed for one model also fool different models?