Abstract:Research of adversarial attacks is important for AI security because it shows the vulnerability of deep learning models and helps to build more robust models. Adversarial attacks on images are most widely studied, which include noise-based attacks, image editing-based attacks, and latent space-based attacks. However, the adversarial examples crafted by these methods often lack sufficient semantic information, making it challenging for humans to understand the failure modes of deep learning models under natural conditions. To address this limitation, we propose a natural language induced adversarial image attack method. The core idea is to leverage a text-to-image model to generate adversarial images given input prompts, which are maliciously constructed to lead to misclassification for a target model. To adopt commercial text-to-image models for synthesizing more natural adversarial images, we propose an adaptive genetic algorithm (GA) for optimizing discrete adversarial prompts without requiring gradients and an adaptive word space reduction method for improving query efficiency. We further used CLIP to maintain the semantic consistency of the generated images. In our experiments, we found that some high-frequency semantic information such as "foggy", "humid", "stretching", etc. can easily cause classifier errors. This adversarial semantic information exists not only in generated images but also in photos captured in the real world. We also found that some adversarial semantic information can be transferred to unknown classification tasks. Furthermore, our attack method can transfer to different text-to-image models (e.g., Midjourney, DALL-E 3, etc.) and image classifiers. Our code is available at: <a class="link-external link-https" href="https://github.com/zxp555/Natural-Language-Induced-Adversarial-Images" rel="external noopener nofollow">this https URL</a>.

Generating Multi-label Adversarial Examples by Linear Programming.

Training NLI Models Through Universal Adversarial Attack

Showing Many Labels in Multi-label Classification Models: An Empirical Study of Adversarial Examples

Hiding All Labels for Multi-label Images: an Empirical Study of Adversarial Examples

Evolutionary Multilabel Adversarial Examples: an Effective Black-Box Attack

JMA: a General Algorithm to Craft Nearly Optimal Targeted Adversarial Example

Comprehensive Comparisons of Gradient-Based Multi-Label Adversarial Attacks

Generating Natural Language Adversarial Examples on a Large Scale with Generative Models

Latent Adversarial Defence with Boundary-guided Generation

LSD: Adversarial Examples Detection Based on Label Sequences Discrepancy

An ADMM-Based Universal Framework for Adversarial Attacks on Deep Neural Networks

LADDER: Latent boundary-guided adversarial training

A Multi-objective Examples Generation Approach to Fool the Deep Neural Networks in the Black-Box Scenario

Generating Valid and Natural Adversarial Examples with Large Language Models

Robust Adversarial Examples Against Scale Transformation Via Generative Network

On-manifold Adversarial Attack Based on Latent Space Substitute Model

A New Black Box Attack Generating Adversarial Examples Based on Reinforcement Learning

ADSAttack: an Adversarial Attack Algorithm Via Searching Adversarial Distribution in Latent Space

Natural Language Induced Adversarial Images

Multi-label Adversarial Defense Scheme Based on Negative Correlation Ensemble.

Improved Forward-Backward Propagation To Generate Adversarial Examples