Dual-Path Distillation: A Unified Framework to Improve Black-Box Attacks

Jul 12, 2020



We study the problem of constructing adversarial examples in the black-box setting, where no model information is revealed except the feedback knowledge of given inputs. To obtain sufficient knowledge for crafting adversarial examples, previous methods query the target model with inputs that are perturbed with different searching directions. However, these methods suffer from poor query efficiency since the employed searching directions are sampled randomly. To mitigate the issue, we capture the goal of mounting efficient attacks as an optimization problem that the adversary tries to fool the target model with limited queries. In such setting, the adversary has to select appropriate searching directions to reduce model queries. By solving the efficient-attack problem, we find that what we need is to distill the knowledge in both the adversarial example path and the searching direction path. Therefore, we propose a novel framework, dual-path distillation, that utilizes the feedback knowledge not only to craft adversarial examples but also alter searching directions for efficient attacks. Experimental results suggest that our framework can significantly increase the query efficiency.



About ICML 2020

The International Conference on Machine Learning (ICML) is the premier gathering of professionals dedicated to the advancement of the branch of artificial intelligence known as machine learning. ICML is globally renowned for presenting and publishing cutting-edge research on all aspects of machine learning used in closely related areas like artificial intelligence, statistics and data science, as well as important application areas such as machine vision, computational biology, speech recognition, and robotics. ICML is one of the fastest growing artificial intelligence conferences in the world. Participants at ICML span a wide range of backgrounds, from academic and industrial researchers, to entrepreneurs and engineers, to graduate students and postdocs.

Store presentation

Should this presentation be stored for 1000 years?

How do we store presentations

Total of 0 viewers voted for saving the presentation to eternal vault which is 0.0%


Recommended Videos

Presentations on similar topic, category or speaker