The proposed method, termed Joint Metric-based Universal Adversarial Perturbation (JM-UAP), strives to enhance the aggressiveness of UAPs by minimizing the similarity metric between feature vectors ...