Abstract:Targeted adversarial attack, which aims to mislead a model to recognize any image as a target object by imperceptible perturbations, has become a mainstream tool for vulnerability assessment of deep neural networks (DNNs). Since existing targeted attackers only learn to attack known target classes, they cannot generalize well to unknown classes. To tackle this issue, we propose $\bf{G}$eneralized $\bf{A}$dversarial attac$\bf{KER}$ ($\bf{GAKer}$), which is able to construct adversarial examples to any target class. The core idea behind GAKer is to craft a latently infected representation during adversarial example generation. To this end, the extracted latent representations of the target object are first injected into intermediate features of an input image in an adversarial generator. Then, the generator is optimized to ensure visual consistency with the input image while being close to the target object in the feature space. Since the GAKer is class-agnostic yet model-agnostic, it can be regarded as a general tool that not only reveals the vulnerability of more DNNs but also identifies deficiencies of DNNs in a wider range of classes. Extensive experiments have demonstrated the effectiveness of our proposed method in generating adversarial examples for both known and unknown classes. Notably, compared with other generative methods, our method achieves an approximately $14.13\%$ higher attack success rate for unknown classes and an approximately $4.23\%$ higher success rate for known classes. Our code is available in <a class="link-external link-https" href="https://github.com/VL-Group/GAKer" rel="external noopener nofollow">this https URL</a>.

AdverseGen: A Practical Tool for Generating Adversarial Examples to Deep Neural Networks Using Black-Box Approaches

Towards Efficient Data Free Blackbox Adversarial Attack

GenAttack: Practical Black-box Attacks with Gradient-Free Optimization

Improving Query Efficiency of Black-box Adversarial Attack

Generating Adversarial Examples with Adversarial Networks

A Multi-objective Examples Generation Approach to Fool the Deep Neural Networks in the Black-Box Scenario

DCVAE-adv: A Universal Adversarial Example Generation Method for White and Black Box Attacks

A Black-Box Approach to Generate Adversarial Examples Against Deep Neural Networks for High Dimensional Input.

A CMA-ES-Based Adversarial Attack on Black-Box Deep Neural Networks

Detecting Adversarial Examples Via Key-based Network

The Vulnerability of the Neural Networks Against Adversarial Examples in Deep Learning Algorithms

Adversarial Examples Generation System Based on Gradient Shielding of Restricted Region

Adversarial Transformation Network with Adaptive Perturbations for Generating Adversarial Examples.

Query-Efficient Generation of Adversarial Examples for Defensive DNNs via Multi-Objective Optimization

An Evolutionary-Based Black-Box Attack to Deep Neural Network Classifiers.

Are You Confident That You Have Successfully Generated Adversarial Examples?

GCSA: A New Adversarial Example-Generating Scheme Towards Black-Box Adversarial Attacks

How Can We Deal with Adversarial Examples?

Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection

Adversarial Examples: Attacks and Defenses for Deep Learning

AdvFoolGen: Creating Persistent Troubles for Deep Classifiers