Abstract:Deep neural networks are vulnerable to adversarial examples crafted by applying human-imperceptible perturbations on clean inputs. Although many attack methods can achieve high success rates in the white-box setting, they also exhibit weak transferability in the black-box setting. Recently, various methods have been proposed to improve adversarial transferability, in which the input transformation is one of the most effective methods. In this work, we notice that existing input transformation-based works mainly adopt the transformed data in the same domain for augmentation. Inspired by domain generalization, we aim to further improve the transferability using the data augmented from different domains. Specifically, a style transfer network can alter the distribution of low-level visual features in an image while preserving semantic content for humans. Hence, we propose a novel attack method named Style Transfer Method (STM) that utilizes a proposed arbitrary style transfer network to transform the images into different domains. To avoid inconsistent semantic information of stylized images for the classification network, we fine-tune the style transfer network and mix up the generated images added by random noise with the original images to maintain semantic consistency and boost input diversity. Extensive experimental results on the ImageNet-compatible dataset show that our proposed method can significantly improve the adversarial transferability on either normally trained models or adversarially trained models than state-of-the-art input transformation-based attacks. Code is available at: <a class="link-external link-https" href="https://github.com/Zhijin-Ge/STM" rel="external noopener nofollow">this https URL</a>.

A Geometrical Perspective on Image Style Transfer With Adversarial Learning

Creative and Diverse Artwork Generation Using Adversarial Networks

Style Fader Generative Adversarial Networks for Style Degree Controllable Artistic Style Transfer

Learning Structure-Aware Transformations for Arbitrary Image Style Transfer

Artistic Style Transfer with Internal-external Learning and Contrastive Learning

Optimal Transport of Deep Feature for Image Style Transfer

Style Permutation for Diversified Arbitrary Style Transfer

GLStyleNet: Exquisite Style Transfer Combining Global and Local Pyramid Features

Unsupervised Image-to-Image Translation with Generative Adversarial Networks.

Gated-GAN: Adversarial Gated Networks for Multi-Collection Style Transfer

Deep Learning-Based Application of Image Style Transfer

Image neural style transfer: A review

A model integrating attention mechanism and generative adversarial network for image style transfer

Improving the Transferability of Adversarial Examples with Arbitrary Style Transfer

Preserving Structural Consistency in Arbitrary Artist and Artwork Style Transfer

Geometric Style Transfer

Regional Style Transfer Based on Partial Convolution Generative Adversarial Network

Progress and Impediments in Deep Learning-Driven Image Style Transfer

A Generative Adversarial Network AMS-CycleGAN for Multi-Style Image Transformation

Adversarial-learning-based image-to-image transformation: A survey

Domain-Specific Mappings for Generative Adversarial Style Transfer