arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2011.11857cs.LGcs.CV

Augmented Lagrangian Adversarial Attacks

ÉTS Montreal(蒙特利尔高等工程技术学院)

Jérôme Rony, Eric Granger, Marco Pedersoli, Ismail Ben Ayed

英文摘要:

Adversarial attack algorithms are dominated by penalty methods, which are slow in practice, or more efficient distance-customized methods, which are heavily tailored to the properties of the distance considered. We propose a white-box attack algorithm to generate minimally perturbed adversarial examples based on Augmented Lagrangian principles. We bring several algorithmic modifications, which have a crucial effect on performance. Our attack enjoys the generality of penalty methods and the computational efficiency of distance-customized algorithms, and can be readily used for a wide set of distances. We compare our attack to state-of-the-art methods on three datasets and several models, and consistently obtain competitive performances with similar or lower computational complexity.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑