Abstract: Recent trend on transferable adversarial attacks focuses on applying different transformations on input images to improve input diversity. DEM, the recently proposed state-of-the-art method, ...