Let the Carrier Carry the Attack: Preserving the Subject in Adversarial Image Generation
This research introduces a secondary visual element, a 'carrier,' to enable strong adversarial attacks while keeping the main subject recognizable to humans. The carrier absorbs attack updates, improving transferability and attack success without distorting the original content. This allows for targeted attacks that mislead classifiers while preserving human perception of the primary subject.