Daily Arxiv

This is a page that curates AI-related papers published worldwide.
All content here is summarized using Google Gemini and operated on a non-profit basis.
Copyright for each paper belongs to the authors and their institutions; please make sure to credit the source when sharing.

PAR-AdvGAN: Improving Adversarial Attack Capability with Progressive Auto-Regression AdvGAN

Created by
  • Haebom

Author

Jiayu Zhang, Zhiyu Zhu, Xinyi Wang, Silin Liao, Zhibo Jin, Flora D. Salim, and Huaming Chen.

Outline

This paper presents a novel method, called Progressive Autoregressive AdvGAN (PAR-AdvGAN), to address the adversarial example problem, a vulnerability of deep neural networks. To overcome the limitation of single-iteration generation in existing GAN-based methods, PAR-AdvGAN introduces an autoregressive iterative mechanism to generate adversarial examples with enhanced attack capabilities. Through extensive experiments, PAR-AdvGAN demonstrates superior performance against various state-of-the-art black-box adversarial attacks and existing AdvGANs. In particular, it achieves a maximum frame rate of 335.5 frames per second on the Inception-v3 model, significantly faster than gradient-based transferable attack algorithms. The source code is available on GitHub.

Takeaways, Limitations

Takeaways:
A new method (PAR-AdvGAN) is presented to overcome the limitations of existing GAN-based adversarial example generation methods.
Ability to generate adversarial examples with improved attack capabilities and speed.
Superior performance against various cutting-edge methods (including black-box attacks)
Achieve fast generation speeds (up to 335.5 frames per second)
Open source code release
Limitations:
The paper does not specifically address Limitations. Further analysis is needed to address potential issues in practical applications (e.g., overfitting to specific models or datasets, increased computational complexity, etc.).
👍