arrow
返回

EGM: An Efficient Generative Model for Unrestricted Adversarial Examples

delete2022-11-29
delete7
PRE
AI
向
向涛 (Tao Xiang) *
H
Hangcheng Liu
S
Shangwei Guo
Y
Yan Gan
X
Xiaofeng Liao
DOI:10.1145/3511893delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Unrestricted adversarial examples allow the attacker to start attacks without given clean samples, which are quite aggressive and threatening. However, existing works for generating unrestricted adversary examples are quite inefficient and cannot achieve a high success rate. In this article, we explore an end-to-end and effective solution for unrestricted adversary example generation. To stabilize the training process and make our generative model converge to satisfactory results, we design a novel decoupled two-step efficient generative model (EGM), which contains a conditional reference generator and a conditional adversarial transformer. The former is responsible for generating reference samples from noises and source classes. The latter is responsible for converting the reference sample into adversarial examples corresponding to target classes. To improve the success rate, we design a new strategy, augmentation of adversarial labels to produce dynamic target labels and enhance the exploration ability of EGM. Such a strategy can be also applied to existing attacks to improve their attack success rates, which is of independent interest. We conduct extensive experiments to evaluate our proposed model and demonstrate the necessity of decoupling the generation process in EGM. Experimental results show our EGM is much faster and achieves a higher success rate than the state-of-the-art attacks.
Keyword:
Perturbation-based adversarial example
unrestricted adversarial example
efficiency
attack success rate

期刊

ACM Transactions on Sensor Networks 封面图
ACM Transactions on Sensor Networks
IF:
4.7
论文数:
1.0K
被引数:
2.0K

机构

C
Chongqing University
学者数:
5.1W
论文数: 4.1W
被引数: 6.0W
引用论文

引用论文

Competitive redox-catalyzed migratory carbonyl insertion and .beta.-elimination in iron alkyl complexes
err2002-05-01
err0
PREAI
errRobert S. Bly; Gary S. Silverman; M. Mahmun Hossain; Ruta K. Bly
err分享
err收藏
First crown ether derivative of benzoxazinone; a new fluoroionophore for alkaline earth metals recognition
err1988-01-01
err0
PREAI
errSuzanne Fery-Forgues; Marie-Thérèse Le Bris; Jean-Paul Guetté; Bernard Valeur
err分享
err收藏
A New Route for the Total Synthesis of 6,7‐Dihydroeponemycin
err2003-11-19
err0
PREAI
errBibia Bennacer; Christian Rivalle; David S. Grierson
err分享
err收藏
SMGEA: A New Ensemble Adversarial Attack Powered by Long-Term Gradient Memories
err2022-03-01
err15
PREAI
errChe, Zhaohui; Borji, Ali; Zhai, Guangtao; Ling, Suiyi; Li, Jing; Min, Xiongkuo; Guo, Guodong; Le Callet, Patrick
err分享
err收藏
Adversarial Attack Against Deep Saliency Models Powered by Non-Redundant Priors
err2021-01-01
err17
PREAI
errChe, Zhaohui; Borji, Ali; Zhai, Guangtao; Ling, Suiyi; Li, Jing; Tian, Yuan; Guo, Guodong; Le Callet, Patrick
err分享
err收藏
Deep Reinforcement Learning for Tropical Air Free-cooled Data Center Control
err2021-06-21
err21
errOAAI
errDuc Van Le; Wang, Rongrong; Liu, Yingbo; Tan, Rui; Wong, Yew-Wah; Wen, Yonggang
err分享
err收藏
err分享
err收藏
学者 查看更多内容