GSBAK: top-K Geometric Score-based Black-box Attack

Cross-technique transferability matrix: cell (I,j) is the percentage of adversarial samples crafted to mislead a classifier learned using machine learning technique I that are misclassified by one trained with technique j