Pixel2Feature Attack (P2FA): Rethinking the Perturbed Space to Enhance Adversarial Transferability

Renpu Liu, Hao Wu, Jiawei Zhang, Xin Cheng, Xiangyang Luo +2 more
2/14/2026

No official code found. Best implementation: WH-Lrp/P2FA (8 stars, last commit 2026-04-21).

Semantic Scholar

Code Implementations(1)

WH-Lrp/P2FACommunity69%

The official code for the paper “Pixel2Feature Attack (P2FA): Rethinking the Perturbed Space to Enhance Adversarial Transferability”

81PythonMay 14, 20256 months ago

Cite this paper

@article{liu2026pixelfeature,
  title  = {Pixel2Feature Attack (P2FA): Rethinking the Perturbed Space to Enhance Adversarial Transferability},
  author = {Renpu Liu and Hao Wu and Jiawei Zhang and Xin Cheng and Xiangyang Luo and Bin Ma and Jinwei Wang},
  year   = {2026},
  url    = {https://api.semanticscholar.org/CorpusID:fa8272c27213b365df26e17a59bfde2238a01896},
  journal = {ICML 2025 2025}
}

Discussion