Search Results for author:
Found 4 papers, 4 papers with code
Natural Color Fool: Towards Boosting Black-box Unrestricted Attacks
Unrestricted color attacks, which manipulate semantically meaningful color of an image, have shown their stealthiness and success in fooling both human eyes and deep neural networks.
Practical Evaluation of Adversarial Robustness via Adaptive Auto Attack
Specifically, by observing that adversarial examples to a specific defense model follow some regularities in their starting points, we design an Adaptive Direction Initialization strategy to speed up the evaluation.
Fast Gradient Non-sign Methods
Based on the linearity hypothesis, under $\ell_\infty$ constraint, $sign$ operation applied to the gradients is a good choice for generating perturbations.
Feature Space Targeted Attacks by Statistic Alignment
However, the current choice of pixel-wise Euclidean Distance to measure the discrepancy is questionable because it unreasonably imposes a spatial-consistency constraint on the source and target features.
