arXiv:2511.11993cs.CVcs.LG2025-11

动态调参提升迁移攻击效果,效率更高且更稳定。

Dynamic Parameter Optimization for Highly Transferable Transformation-Based Attacks

  • 根据参数强度变化规律设计动态优化策略
  • 在多种模型和任务上显著提升攻击迁移性
  • 适合研究对抗样本与模型安全的学者

尽管深度神经网络应用广泛,其漏洞引发社会关注。基于变换的攻击在迁移攻击中表现优异,但现有方法存在参数优化盲区:(1) 多数研究仅考虑低迭代情形,而高迭代下攻击性能差异大,仅凭低迭代结果评估整体表现具有误导性;(2) 现有方法对不同代理模型、迭代次数和任务使用统一参数,严重削弱迁移性;(3) 传统参数优化依赖网格搜索,复杂度为O(mn),计算开销大,难以深入优化。为此,我们以多种变换为基线进行实证研究,揭示了参数强度与迁移性之间的三种动态模式。进一步提出同心衰减模型(CDM)有效解释这些模式。基于上升后下降的动态规律,提出高效动态参数优化(DPO),将复杂度降至O(nlogm)。在多种代理模型、迭代次数和任务上的实验表明,该方法可显著提升迁移攻击性能。

原文摘要 · Abstract (English)

Despite their wide application, the vulnerabilities of deep neural networks raise societal concerns. Among them, transformation-based attacks have demonstrated notable success in transfer attacks. However, existing attacks suffer from blind spots in parameter optimization, limiting their full potential. Specifically, (1) prior work generally considers low-iteration settings, yet attacks perform quite differently at higher iterations, so characterizing overall performance based only on low-iteration results is misleading. (2) Existing attacks use uniform parameters for different surrogate models, iterations, and tasks, which greatly impairs transferability. (3) Traditional transformation parameter optimization relies on grid search. For n parameters with m steps each, the complexity is O(mn). Large computational overhead limits further optimization of parameters. To address these limitations, we conduct an empirical study with various transformations as baselines, revealing three dynamic patterns of transferability with respect to parameter strength. We further propose a novel Concentric Decay Model (CDM) to effectively explain these patterns. Building on these insights, we propose an efficient Dynamic Parameter Optimization (DPO) based on the rise-then-fall pattern, reducing the complexity to O(nlogm). Comprehensive experiments on existing transformation-based attacks across different surrogate models, iterations, and tasks demonstrate that our DPO can significantly improve transferability.

对抗攻击迁移性动态优化

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。