Jan 22, 2021 · In this paper, we propose a novel approach to generate a black-box attack in sparse domain whereas the most important information of an image ...
In this paper, we propose a novel approach to generate a black-box attack in sparse domain whereas the most important information of an image can be observed.
In this paper, we propose a novel approach to generate a black-box attack in sparse domain whereas the most important information of an image can be observed.
In this paper, we propose a novel approach to generate a black-box attack in sparse domain whereas the most important information of an image can be observed.
People also ask
This work focuses on deep convolutional neural networks and demonstrates that adversaries can easily craft adversarial examples even without any internal ...
We propose the DEceit algorithm for constructing effective universal pixel-restricted perturbations using only black-box feedback from the target network.
To generate an adversarial image, the authors iteratively sample pixel loca- tions from a designed distribution, where the perturbation value of each pixel is ...
Abstract. We propose a versatile framework based on random search,. Sparse-RS, for score-based sparse targeted and untargeted attacks in the black-box ...
We explore the black-box adversarial attack on video recognition models. Attacks are only per- formed on selected key regions and key frames to.
Abstract. We focus on the problem of adversarial attacks against models on discrete sequential data in the black-box setting where the attacker aims to ...