Triangle Attack: A Query-efficient Decision-based Adversarial Attack. (arXiv:2112.06569v3 [cs.CV] UPDATED)

Decision-based attack poses a severe threat to real-world applications since
it regards the target model as a black box and only accesses the hard
prediction label. Great efforts have been made recently to decrease the number
of queries; however, existing decision-based attacks still require thousands of
queries in order to generate good quality adversarial examples. In this work,
we find that a benign sample, the current and the next adversarial examples can
naturally construct a triangle in a subspace for …

arxiv cv decision query