Abstract:To improve the attack success rate and image perceptual quality of adversarial examples against deep neural networks(DNNs), we propose a new Generative Adversarial Network (GAN) based attacker, named Elastic-net Regularized Boundary Equilibrium Generative Adversarial Network(ERBEGAN). Recent studies have shown that DNNs are easy to attack by adversarial examples(AEs) where benign images with small-magnitude perturbations mislead DNNs to incorrect results. A number of methods are proposed to generate AEs, but how to generate them with high attack success rate and perceptual quality needs more effort. Most attackers generate AEs by restricting <math>L2</math>-norm and <math>L∞</math>-norm of adversarial perturbations. However, very few works have been developed on <math>L1</math>distortion matrix which encourages sparsity in the perturbation. In this paper, we penalize both <math>L2</math>-norm and <math>L1</math>-norm of perturbation as Elastic-Net regularization to improve the diversity and robustness of AEs. We further improve GAN by minimizing the additional pixel-wise loss derived from the Wasserstein distance between benign and adversarial auto-encoder loss distributions. Extensive experiments and visualizations on several datasets show that the proposed ERBEGAN can yield higher attack success rates than the state-of-the-art GAN-based attacker AdvGAN under the semi-whitebox and black-box attack settings. Besides, our method efficiently generates diverse adversarial examples that are more perceptually realistic.

EGM: an Efficient Generative Model for Unrestricted Adversarial Examples

Towards Understanding the Generative Capability of Adversarially Robust Classifiers

Towards Efficient Data Free Blackbox Adversarial Attack

Generating Natural Language Adversarial Examples on a Large Scale with Generative Models

GAP++: Learning to generate target-conditioned adversarial examples

At-gan: An adversarial generator model for non-constrained adversarial examples

GAME: Generative-Based Adaptive Model Extraction Attack

Generating Adversarial Examples with Adversarial Networks

An Efficient Framework for Generating Robust Adversarial Examples.

Generating adversarial examples with elastic-net regularized boundary equilibrium generative adversarial network

An efficient adversarial example generation algorithm based on an accelerated gradient iterative fast gradient

AdvDiff: Generating Unrestricted Adversarial Examples using Diffusion Models

Any Target Can be Offense: Adversarial Example Generation via Generalized Latent Infection

Adversarial Transformation Network with Adaptive Perturbations for Generating Adversarial Examples.

Generative Transferable Adversarial Attack

Fine-grained Synthesis of Unrestricted Adversarial Examples

Adversarial Example Games

ELAA: an Efficient Local Adversarial Attack Using Model Interpreters.

Online Alternate Generator against Adversarial Attacks

AACEGEN: Attention Guided Adversarial Code Example Generation for Deep Code Models