Abstract:Transferable targeted adversarial attacks (TTAs) against deep neural networks have been proven significantly more challenging than untargeted ones, yet they remain relatively underexplored. This paper sheds new light on performing highly efficient yet transferable targeted attacks leveraging the simple gradient-based baseline. Our research underscores the critical importance of image transformations within gradient calculations, marking a shift from the prevalent emphasis on loss functions to address the gradient vanishing problem. Moreover, we have developed two effective blind estimators that facilitate the design of transformation strategies to enhance targeted transferability under black-box conditions. The adversarial examples' self-transferability to geometric transformations has been identified as strongly correlated with their black-box transferability, featuring these basic operations as potent yet overlapped proxies for facilitating targeted transferability. The surrogate self-alignment assessments further highlight simple scaling transformation's exceptional efficacy, which rivals that of most advanced methods. Building on these insights, we introduce a scaling-centered transformation strategy termed Strong, Self-transferable, faSt, and Simple Scale Transformation (S4ST) to enhance transferable targeted attacks. In experiments conducted on the ImageNet-Compatible benchmark dataset, our proposed S4ST attains a SOTA average targeted transfer success rate across various challenging black-box models, outperforming the previous leading method by over 14% while requiring only 25% of the execution time. Additionally, our approach eclipses SOTA attacks considerably and exhibits remarkable effectiveness against real-world APIs. This work marks a significant leap forward in TTAs, revealing the realistic threats they pose and providing a practical generation method for future research.

Mtisa: Multi-Target Image-Scaling Attack

You See What I Want You to See: Exploring Targeted Black-Box Transferability Attack for Hash-based Image Retrieval Systems

Call White Black: Enhanced Image-Scaling Attack in Industrial Artificial Intelligence Systems

Seeing Is Not Believing: Camouflage Attacks On Image Scaling Algorithms

Target Attack on Biomedical Image Segmentation Model Based on Multi-Scale Gradients.

Image Scaling Attack Simulation: A Measure of Stealth and Detectability

Scaling Camouflage: Content Disguising Attack Against Computer Vision Applications

S$^4$ST: A Strong, Self-transferable, faSt, and Simple Scale Transformation for Transferable Targeted Attack

Adversarial RAW: Image-Scaling Attack Against Imaging Pipeline

Wolf in Sheep's Clothing - The Downscaling Attack Against Deep Learning Applications

Generic Image Manipulation Localization Through the Lens of Multi-scale Spatial Inconsistence

Enhancing Transferability of Targeted Adversarial Examples: A Self-Universal Perspective

Semantic Image Attack for Visual Model Diagnosis

A Universal Targeted Attack Method against Image Classification

Robust Adversarial Examples Against Scale Transformation Via Generative Network

Downstream Transfer Attack: Adversarial Attacks on Downstream Models with Pre-trained Vision Transformers

Miss the Point: Targeted Adversarial Attack on Multiple Landmark Detection

Multi-Target Invisibly Trojaned Networks for Visual Recognition and Detection

Impact of Scaled Image on Robustness of Deep Neural Networks

Multi-attacks: Many images $+$ the same adversarial attack $\to$ many target labels

Adversarial Patch Attack on Multi-Scale Object Detection for UAV Remote Sensing Images