Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Sparse-RS: A Versatile Framework for Query-Efficient Sparse Black-Box Adversarial Attacks
 
Loading...
Thumbnail Image
conference paper

Sparse-RS: A Versatile Framework for Query-Efficient Sparse Black-Box Adversarial Attacks

Croce, Francesco
•
Andriushchenko, Maksym  
•
Singh, Naman D.
Show more
January 1, 2022
Thirty-Sixth Aaai Conference On Artificial Intelligence / Thirty-Fourth Conference On Innovative Applications Of Artificial Intelligence / The Twelveth Symposium On Educational Advances In Artificial Intelligence
36th AAAI Conference on Artificial Intelligence / 34th Conference on Innovative Applications of Artificial Intelligence / 12th Symposium on Educational Advances in Artificial Intelligence

We propose a versatile framework based on random search, Sparse-RS, for score-based sparse targeted and untargeted attacks in the black-box setting. Sparse-RS does not rely on substitute models and achieves state-of-the-art success rate and query efficiency for multiple sparse attack models: l(0)-bounded perturbations, adversarial patches, and adversarial frames. The l(0)-version of untargeted Sparse-RS outperforms all black-box and even all white-box attacks for different models on MNIST, CIFAR-10, and ImageNet. Moreover, our untargeted Sparse-RS achieves very high success rates even for the challenging settings of 20 x 20 adversarial patches and 2-pixel wide adversarial frames for 224 x 224 images. Finally, we show that Sparse-RS can be applied to generate targeted universal adversarial patches where it significantly outperforms the existing approaches. Our code is available at https://github.com/fra31/sparse-rs.

  • Details
  • Metrics
Type
conference paper
DOI
10.1609/aaai.v36i6.20595
Web of Science ID

WOS:000893636206061

Author(s)
Croce, Francesco
•
Andriushchenko, Maksym  
•
Singh, Naman D.
•
Flammarion, Nicolas  
•
Hein, Matthias
Date Issued

2022-01-01

Publisher

ASSOC ADVANCEMENT ARTIFICIAL INTELLIGENCE

Publisher place

Palo Alto

Published in
Thirty-Sixth Aaai Conference On Artificial Intelligence / Thirty-Fourth Conference On Innovative Applications Of Artificial Intelligence / The Twelveth Symposium On Educational Advances In Artificial Intelligence
ISBN of the book

978-1-57735-876-3

Series title/Series vol.

AAAI Conference on Artificial Intelligence

Start page

6437

End page

6445

Subjects

Computer Science, Artificial Intelligence

•

Computer Science

Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
TML  
Event nameEvent placeEvent date
36th AAAI Conference on Artificial Intelligence / 34th Conference on Innovative Applications of Artificial Intelligence / 12th Symposium on Educational Advances in Artificial Intelligence

ELECTR NETWORK

Feb 22-Mar 01, 2022

Available on Infoscience
February 27, 2023
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/195167
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés