Preprint Open access
Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation
Strong unrestricted adversarial attacks can distort the primary object of an image, hereafter referred to as the subject. To preserve subject integrity without compromising attack magnitude, we introduce the carrier: a secondary visual element that provides an auxiliary region to facilitate the attack under global clas …