Abstract:It has been widely substantiated that deep neural networks (DNNs) are susceptible and vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks by corrupting targeted objects (physical attack) or images (digital attack), which is intuitively acceptable and understandable in terms of the attack's effectiveness. In contrast, our focus lies in conducting background adversarial attacks in both digital and physical domains, without causing any disruptions to the targeted objects themselves. Specifically, an effective background adversarial attack framework is proposed to attack anything, by which the attack efficacy generalizes well between diverse objects, models, and tasks. Technically, we approach the background adversarial attack as an iterative optimization problem, analogous to the process of DNN learning. Besides, we offer a theoretical demonstration of its convergence under a set of mild but sufficient conditions. To strengthen the attack efficacy and transferability, we propose a new ensemble strategy tailored for adversarial perturbations and introduce an improved smooth constraint for the seamless connection of integrated perturbations. We conduct comprehensive and rigorous experiments in both digital and physical domains across various objects, models, and tasks, demonstrating the effectiveness of attacking anything of the proposed method. The findings of this research substantiate the significant discrepancy between human and machine vision on the value of background variations, which play a far more critical role than previously recognized, necessitating a reevaluation of the robustness and reliability of DNNs. The code will be publicly available at <a class="link-external link-https" href="https://github.com/JiaweiLian/Attack_Anything" rel="external noopener nofollow">this https URL</a>

A Survey on Universal Adversarial Attack

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Comparative Evaluation of Recent Universal Adversarial Perturbations in Image Classification

Learning Universal Adversarial Perturbation by Adversarial Example

Double Targeted Universal Adversarial Perturbations

Joint Universal Adversarial Perturbations with Interpretations

Crafting Universal Adversarial Perturbations with Output Vectors

On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection

Attack Anything: Blind DNNs via Universal Background Adversarial Attack

Decision-based Universal Adversarial Attack

Universal Adversarial Perturbations Through the Lens of Deep Steganography: Towards A Fourier Perspective

Adversarial Attacks in Computer Vision: a Survey

Sigma-UAP: An Invisible Semi-Universal Adversarial Attack Against Deep Neural Networks

PB-UAP: Hybrid Universal Adversarial Attack For Image Segmentation

Multi-scale Features Destructive Universal Adversarial Perturbations

Improving Transferability of Universal Adversarial Perturbation with Feature Disruption.

A Survey on Adversarial Attacks and Defenses in Text

Generalizing universal adversarial perturbations for deep neural networks

Cocktail Universal Adversarial Attack on Deep Neural Networks

Crafting Targeted Universal Adversarial Perturbations: Considering Images as Noise

Real-time Detection of Practical Universal Adversarial Perturbations