• Complex
  • Title
  • Keyword
  • Abstract
  • Scholars
  • Journal
  • ISSN
  • Conference
成果搜索

author:

Fan, Mingyuan (Fan, Mingyuan.) [1] | Yin, Jia-Li (Yin, Jia-Li.) [2] (Scholars:印佳丽) | Liu, Ximeng (Liu, Ximeng.) [3] (Scholars:刘西蒙) | Guo, Wenzhong (Guo, Wenzhong.) [4] (Scholars:郭文忠)

Indexed by:

CPCI-S EI

Abstract:

With the discernment of the vulnerability of deep neural networks recently, adversarial attack methods have become one of the hot spots for the security of artificial intelligence technologies. While previous researches can effectively generate adversarial examples in white-box attacks, it remains challenging to transfer these adversarial examples to black-box models, where the attacker has no knowledge about the model structure and parameters. This paper focuses on the transferability of adversarial examples and proposes a novel approach named Model-Agnostic Attack (MAA), in which meta-learning is explored to facilitate the transferability of adversarial examples crafted on vanilla adversarial attacks across diverse black-box models. Specifically, model-agnostic meta-learning, a meta-learning approach, can train a well-generalized model to various unknown tasks and is utilized to alleviate the overfitting problem of adversarial examples for the specified models, so that the adversarial examples can be easily transferred to black-box models. Besides, we highlight that the MAA is a plug-and-play approach and can be effortlessly integrated with any existing technologies to further boost transferability. Extensive experiment results on CIFAR-10 and CIFAR-100 exhibit the superiority of MAA that achieves higher transferability than state-of-the-art methods on average against black-box models.

Keyword:

Adversarial attack Black-box attack Black-box scenario Meta learning Model-agnostic meta-learning Transferability Transferable adversarial examples

Community:

  • [ 1 ] [Fan, Mingyuan]Fuzhou Univ, Coll Comp & Data Sci, Fuzhou, Peoples R China
  • [ 2 ] [Yin, Jia-Li]Fuzhou Univ, Coll Comp & Data Sci, Fuzhou, Peoples R China
  • [ 3 ] [Liu, Ximeng]Fuzhou Univ, Coll Comp & Data Sci, Fuzhou, Peoples R China
  • [ 4 ] [Guo, Wenzhong]Fuzhou Univ, Coll Comp & Data Sci, Fuzhou, Peoples R China

Reprint 's Address:

Show more details

Related Keywords:

Source :

ALGORITHMS AND ARCHITECTURES FOR PARALLEL PROCESSING, ICA3PP 2021, PT I

ISSN: 0302-9743

Year: 2022

Volume: 13155

Page: 178-192

0 . 4 0 2

JCR@2005

Cited Count:

WoS CC Cited Count:

SCOPUS Cited Count:

ESI Highly Cited Papers on the List: 0 Unfold All

WanFang Cited Count:

Chinese Cited Count:

30 Days PV: 0

Online/Total:83/10022139
Address:FZU Library(No.2 Xuyuan Road, Fuzhou, Fujian, PRC Post Code:350116) Contact Us:0591-22865326
Copyright:FZU Library Technical Support:Beijing Aegean Software Co., Ltd. 闽ICP备05005463号-1