Dual-Path Distillation: A Unified Framework to Improve Black-Box Attacks

12. Červenec 2020

Řečníci

O prezentaci

We study the problem of constructing adversarial examples in the black-box setting, where no model information is revealed except the feedback knowledge of given inputs. To obtain sufficient knowledge for crafting adversarial examples, previous methods query the target model with inputs that are perturbed with different searching directions. However, these methods suffer from poor query efficiency since the employed searching directions are sampled randomly. To mitigate the issue, we capture the goal of mounting efficient attacks as an optimization problem that the adversary tries to fool the target model with limited queries. In such setting, the adversary has to select appropriate searching directions to reduce model queries. By solving the efficient-attack problem, we find that what we need is to distill the knowledge in both the adversarial example path and the searching direction path. Therefore, we propose a novel framework, dual-path distillation, that utilizes the feedback knowledge not only to craft adversarial examples but also alter searching directions for efficient attacks. Experimental results suggest that our framework can significantly increase the query efficiency.

Organizátor

Kategorie

O organizátorovi (ICML 2020)

The International Conference on Machine Learning (ICML) is the premier gathering of professionals dedicated to the advancement of the branch of artificial intelligence known as machine learning. ICML is globally renowned for presenting and publishing cutting-edge research on all aspects of machine learning used in closely related areas like artificial intelligence, statistics and data science, as well as important application areas such as machine vision, computational biology, speech recognition, and robotics. ICML is one of the fastest growing artificial intelligence conferences in the world. Participants at ICML span a wide range of backgrounds, from academic and industrial researchers, to entrepreneurs and engineers, to graduate students and postdocs.

Uložení prezentace

Měla by být tato prezentace uložena po dobu 1000 let?

Jak ukládáme prezentace

Pro uložení prezentace do věčného trezoru hlasovalo 0 diváků, což je 0.0 %

Sdílení

Doporučená videa

Prezentace na podobné téma, kategorii nebo přednášejícího

Zajímají Vás podobná videa? Sledujte ICML 2020