Abstract:Despite the rapid development of adversarial machine learning, most adversarial attack and defense researches mainly focus on the perturbation-based adversarial examples, which is constrained by the input images. In comparison with existing works, we propose non-constrained adversarial examples, which are generated entirely from scratch without any constraint on the input. Unlike perturbation-based attacks, or the so-called unrestricted adversarial attack which is still constrained by the input noise, we aim to learn the distribution of adversarial examples to generate non-constrained but semantically meaningful adversarial examples. Following this spirit, we propose a novel attack framework called AT-GAN (Adversarial Transfer on Generative Adversarial Net). Specifically, we first develop a normal GAN model to learn the distribution of benign data, and then transfer the pre-trained GAN model to estimate the distribution of adversarial examples for the target model. In this way, AT-GAN can learn the distribution of adversarial examples that is very close to the distribution of real data. To our knowledge, this is the first work of building an adversarial generator model that could produce adversarial examples directly from any input noise. Extensive experiments and visualizations show that the proposed AT-GAN can very efficiently generate diverse adversarial examples that are more realistic to human perception. In addition, AT-GAN yields higher attack success rates against adversarially trained models under white-box attack setting and exhibits moderate transferability against black-box models.

Hlr: Generating Adversarial Examples By High-Level Representations

Adversarial Transformation Network with Adaptive Perturbations for Generating Adversarial Examples.

GAN Generate Adversarial Examples to Fool Deep Networks.

Generating Adversarial Examples with Adversarial Networks

Improved Forward-Backward Propagation To Generate Adversarial Examples

Transcending Adversarial Perturbations: Manifold-Aided Adversarial Examples with Legitimate Semantics

Generative Transferable Adversarial Attack

A General Framework for Adversarial Examples with Objectives

AT-GAN: An Adversarial Generator Model for Non-constrained Adversarial Examples

HAD-GAN: A Human-perception Auxiliary Defense GAN to Defend Adversarial Examples

Generating Adversarial Examples with Controllable Non-transferability

Generating Adversarial Examples withControllable Non-transferability

Boosting Transferability of Targeted Adversarial Examples via Hierarchical Generative Networks

LFAA: Crafting Transferable Targeted Adversarial Examples with Low-Frequency Perturbations

NODE-AdvGAN: Improving the transferability and perceptual similarity of adversarial examples by dynamic-system-driven adversarial generative model

GCSA: A New Adversarial Example-Generating Scheme Towards Black-Box Adversarial Attacks

Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks

A Direct Approach to Robust Deep Learning Using Adversarial Networks

Generate Adversarial Examples by Spatially Perturbing on the Meaningful Area

Adversarial Attacks Hidden in Plain Sight