functional attack

An adversarial attack that is optimized for a set of data in a domain rather than per data point.