DualFlow: Generating imperceptible adversarial examples by flow field and normalize flow-based model.

Recent adversarial attack research reveals the vulnerability of learning-based deep learning models (DNN) against well-designed perturbations. However, most existing attack methods have inherent limitations in image quality as they rely on a relatively loose noise budget, i.e.