arrow
Return

Frequency-Guided Adaptive Gradient Attack for Transferable Adversarial Examples

delete2026-01-01
delete0
PRE
AI
F
Fu, Zewei
Y
Ya Li *
Y
Yan Huang
DOI:10.1007/978-981-95-4398-4_27delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Recent studies have shown that deep neural networks (DNNs) are highly vulnerable to adversarial attacks, posing significant security threats. Among various approaches, transfer-based attacks aim to generate adversarial examples that can generalize across models. However, existing methods often lack effective guidance in the unified perturbation direction and struggle to ensure high transferability. To address this, we propose a novel method called frequency-guided adaptive gradient attack (FAGA), which integrates two key components: truncated normal frequency constraints (TNFC) and an adaptive step adjuster (ASA). TNFC applies a truncated normal constraint to high-frequency components, suppressing overfitted high-frequency details while retaining the low-frequency components, thereby guiding perturbations toward a shared decision boundary. ASA dynamically adjusts the step size based on gradient consistency, stabilizing the optimization process as momentum converges. Furthermore, we perform the model augmentation through spectral transformation and aggregate the average gradient of the white-box model to further optimize attack direction. Extensive experiments on the standard surrogate model (Inc-v3) show that FAGA achieves 90.3% black-box success rate and 78.8% on defense models, outperforming existing state-of-the-art methods. Our results demonstrate that FAGA significantly improves the transferability and robustness of adversarial examples.
Keywords:
Adversarial Attack
Transferability
Frequency
Transferable Adversarial Examples
Black-boxAttack

Journal

P
PATTERN RECOGNITION AND COMPUTER VISION, ACPR 2025, PT II
IF:
0
Papers:
29
Citations:
0

Organization

G
Guangzhou University
Scholars:
1.8W
Papers: 1.3W
Citations: 1.8W
Cited Papers

Cited Papers

Learning in the Frequency Domain
err2020-06-01
err0
errOAAI
errKai Xu; Minghai Qin; Fei Sun; Yuhao Wang; Yen-Kuang Chen; Fengbo Ren
errShare
errSave
Rethinking the Inception Architecture for Computer Vision
err2016-06-01
err0
errOAAI
errChristian Szegedy; Vincent Vanhoucke; Sergey Ioffe; Jon Shlens; Zbigniew Wojna
errShare
errSave
Boosting Adversarial Attacks with Momentum
err2018-06-01
err0
errOAAI
errYinpeng Dong; Fangzhou Liao; Tianyu Pang; Hang Su; Jun Zhu; Xiaolin Hu; Jianguo Li
errShare
errSave
Frequency-based methods for improving the imperceptibility and transferability of adversarial examples
err2024-01-01
err3
PREAI
errZhu, Hegui; Ren, Yuchen; Liu, Chong; Sui, Xiaoyan; Zhang, Libo
errShare
errSave
Frequency Domain Model Augmentation for Adversarial Attack
err2022-10-28
err0
PREAI
errYuyang Long; Qilong Zhang; Boheng Zeng; Lianli Gao; Xianglong Liu; Jian Zhang; Jingkuan Song
errShare
errSave
researcher View more