ADVERSARIAL ATTACK MODEL TRAINING METHOD AND APPARATUS, ADVERSARIAL IMAGE GENERATION METHOD AND APPARATUS, ELECTRONIC DEVICE, AND STORAGE MEDIUM

摘要

An adversarial attack model training method and apparatus, an adversarial image generation method and apparatus, an electronic device, and a storage medium. An adversarial attack model comprises a generator network (201, 301). The training method comprises: generating an adversarial attack image by using the generator network (201, 301) on the basis of a training digital image (S41); performing adversarial attack on a target model on the basis of the adversarial attack image, and obtaining an adversarial attack result (S43); obtaining a physical image corresponding to the training digital image (S45); and training the generator network on the basis of the training digital image, the adversarial attack image, the adversarial attack result, and the physical image (S47).