Universal Decision-Based Black-Box Perturbations: Breaking Security-Through-Obscurity Defenses
ZOO: Zeroth Order Optimization Based Black-box Attacks to Deep Neural Networks without Training Substitute Models