Starting black-box optimization attacks from local-model adversarial candidates reduces query cost by up to 81 percent, and seed prioritization lets batch attacks succeed with a few queries.
Exploring the space of black-box attacks on deep neural networks
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.CR 1years
2019 1verdicts
CONDITIONAL 1representative citing papers
citing papers explorer
-
Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries
Starting black-box optimization attacks from local-model adversarial candidates reduces query cost by up to 81 percent, and seed prioritization lets batch attacks succeed with a few queries.