Spanning Attack: Reinforce Black-box Attacks with Unlabeled Data
Adversarial black-box attacks aim to craft adversarial perturbations by querying input-output pairs of machine learning models. They are widely used to evaluate the robustness of pre-trained models. However, black-box attacks often suffer from the issue of query inefficiency due to the high dimensionality of the input space, and therefore incur a false sense of model robustness. In this paper, we relax the conditions of the black-box threat model, and propose a novel technique called the spanning attack. By constraining adversarial perturbations in a low-dimensional subspace via spanning an auxiliary unlabeled dataset, the spanning attack significantly improves the query efficiency of a wide variety of existing black-box attacks. Extensive experiments show that the proposed method works favorably in both soft-label and hard-label black-box attacks. Our code is available at https://github.com/wangwllu/spanning_attack.
Code (1)
Similar Papers 제목 키워드 기반
SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images
Adversarial attack has garnered considerable attention due to its profound implications for the secure deployment of robots in sensitive security scenarios. To potentially push for advances in the field, this paper studi…
Adversarial AttackProvably Efficient Black-Box Action Poisoning Attacks Against Reinforcement Learning
Due to the broad range of applications of reinforcement learning (RL), understanding the effects of adversarial attacks against RL model is essential for the safe applications of this model. Prior theoretical works on ad…
reinforcement-learningReinforcement LearningReinforcement Learning (RL)Reinforcement Learning-Based Black-Box Model Inversion Attacks
Model inversion attacks are a type of privacy attack that reconstructs private data used to train a machine learning model, solely by accessing the model. Recently, white-box model inversion attacks leveraging Generative…
modelPrivacy Preservingreinforcement-learningReinforcement LearningTheoretical Corrections and the Leveraging of Reinforcement Learning to Enhance Triangle Attack
Adversarial examples represent a serious issue for the application of machine learning models in many sensitive domains. For generating adversarial examples, decision based black-box attacks are one of the most practical…
reinforcement-learningReinforcement LearningAdversarial joint attacks on legged robots
We address adversarial attacks on the actuators at the joints of legged robots trained by deep reinforcement learning. The vulnerability to the joint attacks can significantly impact the safety and robustness of legged r…
Deep Reinforcement LearningOpenAI Gymreinforcement-learningReinforcement Learning+1