Abstract:One area of current research on adversarial attacks is how to generate plausible adversarial examples when only a small number of datasets are available. Current adversarial attack algorithms used to attack these black-box systems face a number of challenges, such as difficulty in training convergence, ambiguous sample images, substitute models collapse, unsatisfactory attack success rates, high query cost, and low defense capability improvement of target models. As a result, constructing plausible adversarial situations in a few known real-world sample circumstances remains difficult. As a solution to the aforementioned issues, this study introduces MC-Net, a novel multi-stage and multi-class balanced generating method based on a limited number of samples to generate realistic adversarial examples. Firstly, a multi-task learning approach is used to train the GAN by fully utilizing the small samples, ensuring that the size of the generated dataset for each category is balanced. In addition, we design a weight-balancing strategy to ensure faster convergence of each sub-network. Then, in the second stage, the generated samples of different categories are used to train a substitute model, and the distillation method is adopted to learn the output distribution of the target model. Finally, adversarial examples are constructed on the generated samples to complete the attack on the target models. Extensive experiments have proven that MC-Net has the following advantages: 1) The substitute model converges quickly using limited samples and queries; 2) High attack success rates can be obtained with a few queries; and 3) The constructed adversarial examples significantly improve the target model's defense. Furthermore, we only utilize a few queries for the Microsoft Azure online model to obtain a satisfactory result. Our code can be found at https://github.com/jiaokailun/A-fast.

Data-Free Model Stealing Attack Based on Denoising Diffusion Probabilistic Model

D-DAE: Defense-Penetrating Model Extraction Attacks.

Towards Efficient Data Free Blackbox Adversarial Attack

The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks

NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks Using GAN-generated Fake Samples

Multi-Step Denoising Scheduled Sampling: Towards Alleviating Exposure Bias for Diffusion Models

A GAN-Based Defense Framework Against Model Inversion Attacks.

Fully Exploiting Every Real Sample: SuperPixel Sample Gradient Model Stealing

Making models more secure: An efficient model stealing detection method

Intriguing Properties of Diffusion Models: An Empirical Study of the Natural Attack Capability in Text-to-Image Generative Models

ES Attack: Model Stealing against Deep Neural Networks without Data Hurdles

Model Stealing Attack against Graph Classification with Authenticity, Uncertainty and Diversity

Dual Student Networks for Data-Free Model Stealing

Unlearnable Examples for Diffusion Models: Protect Data from Unauthorized Exploitation

Efficient Data-Free Model Stealing with Label Diversity

Denoising Diffusion Step-aware Models

MC-Net: Realistic Sample Generation for Black-Box Attacks

Attacks and Defenses for Generative Diffusion Models: A Comprehensive Survey

Model Inversion Attacks Through Target-Specific Conditional Diffusion Models

Modeling Spoof Noise by De-spoofing Diffusion and its Application in Face Anti-spoofing

MEGEX: Data-Free Model Extraction Attack against Gradient-Based Explainable AI