用张量低秩表示视频,高效生成难以察觉的对抗样本
TenAd: A Tensor-based Low-rank Black Box Adversarial Attack for Video Classification
- 将视频视为四阶张量,利用多维结构降低攻击搜索空间
- 在标准数据集上实现更高攻击成功率与更低查询次数
- 适合研究视频模型安全或优化对抗攻击的开发者
深度学习模型在计算机视觉中取得显著成功,但在黑盒环境下仍易受对抗攻击。现有攻击方法(包括基于关键帧的方法)常将视频数据当作简单向量处理,忽视其固有的多维结构,且需大量查询,效率低下且易被检测。本文提出一种新型张量基低秩对抗攻击方法 TenAd,通过将视频表示为四阶张量,利用低秩特性显著缩小搜索空间,减少黑盒环境下生成对抗样本所需的查询次数。在标准视频分类数据集上的实验表明,TenAd 能有效生成难以察觉的扰动,攻击成功率更高、查询效率更优,优于当前最先进方法。该结果凸显了张量方法在视频模型对抗攻击中的潜力。
原文摘要 · Abstract (English)
Deep learning models have achieved remarkable success in computer vision but remain vulnerable to adversarial attacks, particularly in black-box settings where model details are unknown. Existing adversarial attack methods(even those works with key frames) often treat video data as simple vectors, ignoring their inherent multi-dimensional structure, and require a large number of queries, making them inefficient and detectable. In this paper, we propose \textbf{TenAd}, a novel tensor-based low-rank adversarial attack that leverages the multi-dimensional properties of video data by representing videos as fourth-order tensors. By exploiting low-rank attack, our method significantly reduces the search space and the number of queries needed to generate adversarial examples in black-box settings. Experimental results on standard video classification datasets demonstrate that \textbf{TenAd} effectively generates imperceptible adversarial perturbations while achieving higher attack success rates and query efficiency compared to state-of-the-art methods. Our approach outperforms existing black-box adversarial attacks in terms of success rate, query efficiency, and perturbation imperceptibility, highlighting the potential of tensor-based methods for adversarial attacks on video models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。