affiliation not provided to SSRN
data-free, knowledge distillation, generator, adversarial example attack, image classification