STBA: Towards Evaluating the Robustness of DNNs for Query-Limited Black-box Scenario

arXiv:2404.00362v1 Announce Type: new
Abstract: Many attack techniques have been proposed to explore the vulnerability of DNNs and further help to improve their robustness. Despite the significant progress made recently, existing black-box attack methods still suffer from unsatisfactory performance due to the vast number of queries needed to optimize desired perturbations. Besides, the other critical challenge is that adversarial examples built in a noise-adding manner are abnormal and struggle to successfully attack robust models, whose robustness is enhanced by adversarial …

abstract arxiv attack methods box cs.cv eess.iv explore performance progress queries query robustness type vast vulnerability