Skip to main content

Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?

Publication ,  Conference
Inkawhich, N; Liang, KJ; Zhang, J; Yang, H; Li, H; Chen, Y
Published in: Proceedings of the IEEE International Conference on Computer Vision
January 1, 2021

We design blackbox transfer-based targeted adversarial attacks for an environment where the attacker's source model and the target blackbox model may have disjoint label spaces and training datasets. This scenario significantly differs from the "standard"blackbox setting, and warrants a unique approach to the attacking process. Our methodology begins with the construction of a class correspondence matrix between the whitebox and blackbox label sets. During the online phase of the attack, we then leverage representations of highly related proxy classes from the whitebox distribution to fool the blackbox model into predicting the desired target class. Our attacks are evaluated in three complex and challenging test environments where the source and target models have varying degrees of conceptual overlap amongst their unique categories. Ultimately, we find that it is indeed possible to construct targeted transfer-based adversarial attacks between models that have non-overlapping label spaces! We also analyze the sensitivity of attack success to properties of the clean data. Finally, we show that our transfer attacks serve as powerful adversarial priors when integrated with query-based methods, markedly boosting query efficiency and adversarial success.

Duke Scholars

Published In

Proceedings of the IEEE International Conference on Computer Vision

DOI

ISSN

1550-5499

Publication Date

January 1, 2021

Volume

2021-October

Start / End Page

41 / 50
 

Citation

APA
Chicago
ICMJE
MLA
NLM
Inkawhich, N., Liang, K. J., Zhang, J., Yang, H., Li, H., & Chen, Y. (2021). Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap? In Proceedings of the IEEE International Conference on Computer Vision (Vol. 2021-October, pp. 41–50). https://doi.org/10.1109/ICCVW54120.2021.00011
Inkawhich, N., K. J. Liang, J. Zhang, H. Yang, H. Li, and Y. Chen. “Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?” In Proceedings of the IEEE International Conference on Computer Vision, 2021-October:41–50, 2021. https://doi.org/10.1109/ICCVW54120.2021.00011.
Inkawhich N, Liang KJ, Zhang J, Yang H, Li H, Chen Y. Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap? In: Proceedings of the IEEE International Conference on Computer Vision. 2021. p. 41–50.
Inkawhich, N., et al. “Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap?Proceedings of the IEEE International Conference on Computer Vision, vol. 2021-October, 2021, pp. 41–50. Scopus, doi:10.1109/ICCVW54120.2021.00011.
Inkawhich N, Liang KJ, Zhang J, Yang H, Li H, Chen Y. Can Targeted Adversarial Examples Transfer When the Source and Target Models Have No Label Space Overlap? Proceedings of the IEEE International Conference on Computer Vision. 2021. p. 41–50.

Published In

Proceedings of the IEEE International Conference on Computer Vision

DOI

ISSN

1550-5499

Publication Date

January 1, 2021

Volume

2021-October

Start / End Page

41 / 50