Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Harmonic Adversarial Attack Method   Adversarial attacks find perturbations that can fool models into
misclassifying images. Previous works had successes in generating
noisy/edge-rich adversarial perturbations, at the cost of degradation of image
quality. Such perturbations, even when they are small in scale, are usually
easily spottable by human vision. In contrast, we propose Harmonic Adversar-
ial Attack Methods (HAAM), that generates edge-free perturbations by using
harmonic functions. The property of edge-free guarantees that the generated
adversarial images can still preserve visual quality, even when perturbations
are of large magnitudes. Experiments also show that adversaries generated by
HAAM often have higher rates of success when transferring between models. In
addition, we find harmonic perturbations can simulate natural phenomena like
natural lighting and shadows. It would then be possible to help find corner
cases for given models, as a first step to improving them.

29
The categories of this paper are: funct-an
30
The categories of this paper are: q-alg
24
The categories of this paper are: dg-ga
37
The categories of this paper are: supr-con
26
The categories of this paper are: bayes-an
14
The categories of this paper are: math-ph
5
The categories of this paper are: gr-qc
15
The categories of this paper are: nucl-ex
13
The categories of this paper are: quant-ph
17
The categories of this paper are: q-fin
35
The categories of this paper are: mtrl-th
25
The categories of this paper are: patt-sol
31
The categories of this paper are: ao-sci
34
The categories of this paper are: chem-ph
12
The categories of this paper are: nucl-th
22
The categories of this paper are: chao-dyn