多目标攻击框架自动挖掘损失函数协同关系,提升对抗样本生成效果。
MOS-Attack: A Scalable Multi-objective Adversarial Attack Framework
- 基于集合的多目标优化,无需额外参数即可融合多个损失函数。
- 在不降低性能前提下,减少所需损失函数数量,提升攻击效率。
- 适合研究模型鲁棒性与对抗攻击的学者,尤其关注高效攻击方法者。
构建对抗样本对于评估和提升深度神经网络(DNN)的鲁棒性至关重要,其挑战等价于最大化不可微的0-1损失函数。然而,现有单目标攻击方法仅依赖代理损失函数,未能充分挖掘多个损失函数之间的协同与冲突关系。为此,我们提出多目标集攻击(MOS Attack),一种利用多个损失函数并自动揭示其相互关系的新框架。MOS Attack采用基于集合的多目标优化策略,可在不增加参数的情况下融入大量损失函数,并自动挖掘不同损失间的协同模式,从而以更少的目标生成更强的对抗样本。大量实验表明,MOS Attack优于单目标攻击;且通过利用发现的协同模式,即使减少损失函数数量仍保持优异表现。代码已开源:https://github.com/pgg3/MOS-Attack。
原文摘要 · Abstract (English)
Crafting adversarial examples is crucial for evaluating and enhancing the robustness of Deep Neural Networks (DNNs), presenting a challenge equivalent to maximizing a non-differentiable 0-1 loss function. However, existing single objective methods, namely adversarial attacks focus on a surrogate loss function, do not fully harness the benefits of engaging multiple loss functions, as a result of insufficient understanding of their synergistic and conflicting nature. To overcome these limitations, we propose the Multi-Objective Set-based Attack (MOS Attack), a novel adversarial attack framework leveraging multiple loss functions and automatically uncovering their interrelations. The MOS Attack adopts a set-based multi-objective optimization strategy, enabling the incorporation of numerous loss functions without additional parameters. It also automatically mines synergistic patterns among various losses, facilitating the generation of potent adversarial attacks with fewer objectives. Extensive experiments have shown that our MOS Attack outperforms single-objective attacks. Furthermore, by harnessing the identified synergistic patterns, MOS Attack continues to show superior results with a reduced number of loss functions. Our code is available at https://github.com/pgg3/MOS-Attack.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。