Abstract: Most existing adversarial attack methods for remote ... We design a Perlin gradient generator network (PGGN), which takes a compact gradient parameter vector (gradient vectors, coefficients, ...