Universal Adversarial Perturbation

When after obtaining a universal perturbation, an attacker reuses it repeatedly across multiple locations, continuously affecting the recognition system's judgment; due to unmitigated control gaps, because no adjustment per target is required, the attack can be conducted at low cost and large scale, triggering compliance exposure and operational reputational costs.