arXiv:2511.12985cs.LGcs.CV2025-11AAAI被引 2

针对双曲网络设计新攻击方法,聚焦语义方向扰动提升欺骗率。

Angular Gradient Sign Method: Uncovering Vulnerabilities in Hyperbolic Networks

  • 基于双曲空间切向量分解,仅在角度方向施加扰动。
  • 在图像分类与跨模态任务中,攻破率高于传统方法。
  • 适合研究双曲嵌入安全性的研究人员参考。

神经网络中的对抗样本在欧几里得几何中已有广泛研究,但近年来双曲网络的发展促使我们重新审视非欧几何下的攻击策略。现有方法如FGSM和PGD未考虑底层双曲结构,可能导致攻击效率低或几何不一致。本文提出一种新型对抗攻击,显式利用双曲空间的几何特性:计算损失函数在双曲空间切向量上的梯度,分解为径向(深度)与角向(语义)分量,并仅基于角向方向施加扰动。该方法通过双曲几何中编码的语义敏感方向进行扰动,生成对抗样本。在图像分类、跨模态检索任务及多种网络架构上的实验表明,本方法的欺骗率高于传统攻击,且扰动具有更强的可解释性,揭示了双曲嵌入的深层脆弱性。本工作强调几何感知攻击策略在曲面表示空间中的重要性,为攻击层次化嵌入提供了理论框架。

原文摘要 · Abstract (English)

Adversarial examples in neural networks have been extensively studied in Euclidean geometry, but recent advances in \textit{hyperbolic networks} call for a reevaluation of attack strategies in non-Euclidean geometries. Existing methods such as FGSM and PGD apply perturbations without regard to the underlying hyperbolic structure, potentially leading to inefficient or geometrically inconsistent attacks. In this work, we propose a novel adversarial attack that explicitly leverages the geometric properties of hyperbolic space. Specifically, we compute the gradient of the loss function in the tangent space of hyperbolic space, decompose it into a radial (depth) component and an angular (semantic) component, and apply perturbation derived solely from the angular direction. Our method generates adversarial examples by focusing perturbations in semantically sensitive directions encoded in angular movement within the hyperbolic geometry. Empirical results on image classification, cross-modal retrieval tasks and network architectures demonstrate that our attack achieves higher fooling rates than conventional adversarial attacks, while producing high-impact perturbations with deeper insights into vulnerabilities of hyperbolic embeddings. This work highlights the importance of geometry-aware adversarial strategies in curved representation spaces and provides a principled framework for attacking hierarchical embeddings.

双曲网络对抗攻击几何感知

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。