Pareto-Improving Adversarial Attacks with Primal-Dual Regularization
Transferable adversarial attacks are arguably the most practical black-box threat model. Under the same perturbation budget, stronger transfer attacks attain higher attack success rate (ASR), yet their imperceptibility also tends to degrade. Under such a fixed-budget protocol, transferability and imperceptibility there...
Yang Dai, Long-Fei Zhang, Wei Tao et al.
· 0 citations