Current browse context:
cs.LG
Change to browse by:
References & Citations
Computer Science > Machine Learning
Title: Rethinking Classifier And Adversarial Attack
(Submitted on 4 May 2022 (this version), latest version 14 May 2022 (v2))
Abstract: Various defense models have been proposed to resist adversarial attack algorithms, but existing adversarial robustness evaluation methods always overestimate the adversarial robustness of these models (i.e. not approaching the lower bound of robustness). To solve this problem, this paper first uses the Decouple Space method to divide the classifier into two parts: non-linear and linear. On this basis, this paper defines the representation vector of original example (and its space, i.e., the representation space) and uses Absolute Classification Boundaries Initialization (ACBI) iterative optimization to obtain a better attack starting point (i.e. attacking from this point can approach the lower bound of robustness faster). Particularly, this paper apply ACBI to nearly 50 widely-used defense models (including 8 architectures). Experimental results show that ACBI achieves lower robust accuracy in all cases.
Submission history
From: Youhuan Yang [view email][v1] Wed, 4 May 2022 09:32:33 GMT (936kb)
[v2] Sat, 14 May 2022 09:26:06 GMT (1164kb)
Link back to: arXiv, form interface, contact.