arXiv:2605.31219cs.CVcs.CR2026-05

通过几何路径搜索,在低查询次数下实现高保真对抗攻击。

Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks

论文配图:Latent Geometric Chords for Query-Efficient Decision-Based Adversarial Attacks
图 1 · 摘自论文原文
  • 在压缩语义流形中进行曲率感知的几何搜索,避开维度瓶颈。
  • 5000次查询内实现SSIM>0.99、LPIPS<0.01,攻击成功率高。
  • 适合研究对抗样本生成与模型鲁棒性评估的学者使用。

决策型黑盒对抗攻击虽具严重安全威胁,但现有方法存在根本缺陷:像素级攻击常引入不自然的高频伪影,而潜空间框架受限于低维流形的搜索空间和固有的重建缺陷。为此,我们提出用于高效查询的潜在几何弦(LGC)及其变体LGC-H。LGC通过在压缩语义流形中执行曲率感知的几何搜索来穿越决策边界。为保证高视觉保真度并突破维度限制,引入基于残差的对抗生成机制(RAG)。RAG将语义扰动视为几何弦,并直接叠加于原始图像上,显著缓解基线重建缺陷,使允许的搜索空间维度几乎翻倍。实验表明,LGC具备强跨数据集迁移能力,显著优于当前最优基线。尤其在5000次查询下,实现SSIM超过0.99、LPIPS低于0.01,同时在严格感知约束下保持高攻击成功率,成功攻破经过对抗训练的鲁棒模型。源代码见:https://github.com/eihmuekhine/Latent-Geometric-Chords。

原文摘要 · Abstract (English)

While decision-based black-box adversarial attacks present a severe security threat, current methodologies suffer from fundamental limitations. Pixel-wise attacks frequently introduce unnatural, high-frequency visual artifacts, while latent-space frameworks are confined by the limited search space of low-dimensional manifolds and inherent reconstruction flaws. To resolve these limitations, we propose Latent Geometric Chords (LGC) for Query-Efficient Decision-Based Adversarial Attacks alongside a variant, LGC-H. At its core, LGC navigates decision boundaries by executing a curvature-aware geometric search within a compressed semantic manifold. To guarantee high visual fidelity and circumvent dimensionality bottlenecks, we introduce a Residual-based Adversarial Generation (RAG) mechanism. RAG isolates semantic perturbations as geometric chords and superimposes them directly onto the original source image. RAG substantially resolves baseline reconstruction flaws and effectively doubles the permissible search space dimensions. Experimental results demonstrate that LGC achieves robust cross-dataset transferability and substantially outperforms state-of-the-art baselines. Notably, our method, LGC, minimizes perturbation magnitudes while achieving state-of-the-art visual fidelity--with a Structural Similarity Index Measure (SSIM) exceeding 0.99 and a Learned Perceptual Image Patch Similarity (LPIPS) below 0.01 at 5000 queries--and sustaining high attack success rates under stringent perceptual constraints, successfully compromising adversarially trained robust models. The source code is available at: https://github.com/eihmuekhine/Latent-Geometric-Chords.

对抗攻击几何搜索低查询图像保真

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。