White-Box Optimization
This technique has been demonstrated in research or controlled environments.
In White-Box Optimization, the adversary has full access to the target model and optimizes the adversarial example directly. Adversarial examples trained in this manner are most effective against the target model.