TabAttackBench: A benchmark for adversarial attacks on tabular data

doi:10.1016/j.eswa.2025.130491

TabAttackBench: A benchmark for adversarial attacks on tabular data

2025-11-19

0

OA

AI

DOI：10.1016/j.eswa.2025.130491

Original

Save

View PDF

Abstract

En 中文

Adversarial attacks pose a significant threat to machine learning models by inducing incorrect predictions through imperceptible perturbations to input data. While these attacks are well studied in unstructured domains such as images, their behaviour on tabular data remains underexplored due to mixed feature types and complex inter-feature dependencies. This study introduces a comprehensive benchmark that evaluates adversarial attacks on tabular datasets with respect to both effectiveness and imperceptibility. We assess five white-box attack algorithms (FGSM, BIM, PGD, DeepFool, and C&W) across four representative models (LR, MLP, TabTransformer and FT-Transformer) using eleven datasets spanning finance, energy, and healthcare domains. The benchmark employs four quantitative imperceptibility metrics (proximity, sparsity, deviation, and sensitivity) to characterise perturbation realism. The analysis quantifies the trade-off between these two aspects and reveals consistent differences between attack types, with ℓ∞-based attacks achieving higher success but lower subtlety, and ℓ2-based attacks offering more realistic perturbations. The benchmark findings offer actionable insights for designing more imperceptible adversarial attacks, advancing the understanding of adversarial vulnerability in tabular machine learning.

Keywords:

Adversarial attack

Tabular data

Benchmark

Machine learning

Robustness

TabAttackBench: A benchmark for adversarial attacks on tabular data

Abstract

AI Summary

Journal

Organization