Query-Free Adversarial Transfer via Undertrained Surrogates [article]

Chris Miller, Soroush Vosoughi
<span title="2020-11-28">2020</span> <i > arXiv </i> &nbsp; <span class="release-stage" >pre-print</span>
Deep neural networks are vulnerable to adversarial examples -- minor perturbations added to a model's input which cause the model to output an incorrect prediction. We introduce a new method for improving the efficacy of adversarial attacks in a black-box setting by undertraining the surrogate model which the attacks are generated on. Using two datasets and five model architectures, we show that this method transfers well across architectures and outperforms state-of-the-art methods by a wide
more &raquo; ... rgin. We interpret the effectiveness of our approach as a function of reduced surrogate model loss function curvature and increased universal gradient characteristics, and show that our approach reduces the presence of local loss maxima which hinder transferability. Our results suggest that finding strong single surrogate models is a highly effective and simple method for generating transferable adversarial attacks, and that this method represents a valuable route for future study in this field.
<span class="external-identifiers"> <a target="_blank" rel="external noopener" href="https://arxiv.org/abs/2007.00806v2">arXiv:2007.00806v2</a> <a target="_blank" rel="external noopener" href="https://fatcat.wiki/release/66okirzm7rabva23eesijzza4u">fatcat:66okirzm7rabva23eesijzza4u</a> </span>
<a target="_blank" rel="noopener" href="https://web.archive.org/web/20200710103309/https://arxiv.org/pdf/2007.00806v1.pdf" title="fulltext PDF download [not primary version]" data-goatcounter-click="serp-fulltext" data-goatcounter-title="serp-fulltext"> <button class="ui simple right pointing dropdown compact black labeled icon button serp-button"> <i class="icon ia-icon"></i> Web Archive [PDF] <span style="color: #f43e3e;">&#10033;</span> </button> </a> <a target="_blank" rel="external noopener" href="https://arxiv.org/abs/2007.00806v2" title="arxiv.org access"> <button class="ui compact blue labeled icon button serp-button"> <i class="file alternate outline icon"></i> arxiv.org </button> </a>