Adversarial eigen attack on black-box models

L Zhou, P Cui, X Zhang, Y Jiang… - Proceedings of the …, 2022 - openaccess.thecvf.com
L Zhou, P Cui, X Zhang, Y Jiang, S Yang
Proceedings of the IEEE/CVF conference on computer vision and …, 2022openaccess.thecvf.com
Black-box adversarial attack has aroused much research attention for its difficulty on nearly
no available information of the attacked model and the additional constraint on the query
budget. A common way to improve attack efficiency is to transfer the gradient information of a
white-box substitute model trained on an extra dataset. In this paper, we deal with a more
practical setting where a pre-trained white-box model with network parameters is provided
without extra training data. To solve the model mismatch problem between the white-box …
Abstract
Black-box adversarial attack has aroused much research attention for its difficulty on nearly no available information of the attacked model and the additional constraint on the query budget. A common way to improve attack efficiency is to transfer the gradient information of a white-box substitute model trained on an extra dataset. In this paper, we deal with a more practical setting where a pre-trained white-box model with network parameters is provided without extra training data. To solve the model mismatch problem between the white-box and black-box models, we propose a novel algorithm EigenBA by systematically integrating gradient-based white-box method and zeroth-order optimization in black-box methods. We theoretically show the optimal directions of perturbations for each step are closely related to the right singular vectors of the Jacobian matrix of the pretrained white-box model. Extensive experiments on ImageNet, CIFAR-10 and WebVision show that EigenBA can consistently and significantly outperform state-of-the-art baselines in terms of success rate and attack efficiency.
openaccess.thecvf.com
Showing the best result for this search. See all results