Decision Based

Decision-based attacks target machine learning models by exploiting only their final output (decision), without requiring access to internal model parameters or gradients, posing a significant real-world security threat. Current research focuses on developing efficient algorithms, such as those employing evolutionary strategies, geometric approaches, and reinforcement learning, to generate adversarial examples that fool these models with minimal queries. These attacks are being explored across various model architectures, including convolutional neural networks, vision transformers, and graph neural networks, and their effectiveness highlights the need for robust defenses in diverse applications ranging from image recognition to semantic segmentation and beyond.

Papers

August 16, 2024

Ask, Attend, Attack: A Effective Decision-Based Black-Box Targeted Attack for Image-to-Text Models
Qingyuan Zeng, Zhenzhong Wang, Yiu-ming Cheung, Min Jiang
Adversarial Attack Image to Text Gray Box Decision Based Multiple Attack

June 7, 2024

ADBA:Approximation Decision Boundary Approach for Black-Box Adversarial Attacks
Feiyang Wang, Xingquan Zuo, Hai Huang, Gang Chen
Adversarial Attack Adversarial Example Decision Boundary Black Box Adversarial Attack Decision Based dlADMM Algorithm

February 19, 2024

Attacks on Node Attributes in Graph Neural Networks
Ying Xu, Michael Lanier, Anindya Sarkar, Yevgeniy Vorobeychik
Graph Neural Network Adversarial Attack New Attack Graph Based Graph Contrastive Learning Decision Based Node Attribute

February 2, 2024

Delving into Decision-based Black-box Attacks on Semantic Segmentation
Zhaoyu Chen, Zhengyang Shan, Jingwen Chang, Kaixun Jiang, Dingkang Yang, Yiting Cheng, Wenqiang Zhang
Semantic Segmentation Adversarial Robustness Semantic Segmentation Model Adversarial Vulnerability Decision Based

January 27, 2024

L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks
Ping Guo, Fei Liu, Xi Lin, Qingchuan Zhao, Qingfu Zhang
Adversarial Attack Adversarial Generation Decision Based

December 20, 2023

Adversarial Markov Games: On Adaptive Decision-Based Attacks and Defenses
Ilias Tsingenopoulos, Vera Rimmer, Davy Preuveneers, Fabio Pierazzi, Lorenzo Cavallaro, Wouter Joosen
Adaptive Importance Adaptive Attack Adaptive Adversary Multi Step Adversarial Attack Decision Based Adaptive Defense Adversarial Team Game

October 29, 2023

Boosting Decision-Based Black-Box Adversarial Attack with Gradient Priors
Han Liu, Xingshuo Huang, Xiaotong Zhang, Qimai Li, Fenglong Ma, Wei Wang, Hongyang Chen, Hong Yu, Xianchao Zhang
Adversarial Attack Gradient Estimation Decision Based

October 1, 2023

Understanding the Robustness of Randomized Feature Defense Against Query-Based Adversarial Attacks
Quang H. Nguyen, Yingjie Lao, Tung Pham, Kok-Seng Wong, Khoa D. Doan
Adversarial Attack Native Robustness Adversarial Example Black Box Attack Adversarial Objective Decision Based

September 5, 2023

The Adversarial Implications of Variable-Time Inference
Dudi Biton, Aditi Misra, Efrat Levy, Jaidip Kotak, Ron Bitton, Roei Schuster, Nicolas Papernot, Yuval Elovici, Ben Nassi
Side Channel Adversarial Risk Decision Based Temporal Inference Time Varying Impedance Attack

August 6, 2023

CGBA: Curvature-aware Geometric Black-box Attack
Md Farhamdur Reza, Ali Rahmati, Tianfu Wu, Huaiyu Dai
Adversarial Example Decision Based

June 5, 2023

Evading Black-box Classifiers Without Breaking Eggs
Edoardo Debenedetti, Nicholas Carlini, Florian Tramèr
Adversarial Example Black Box Evasion Attack Decision Based Chicken Egg

March 21, 2023

Efficient Decision-based Black-box Patch Attacks on Video Recognition
Kaixun Jiang, Zhaoyu Chen, Hao Huang, Jiafeng Wang, Dingkang Yang, Bo Li, Yan Wang, Wenqiang Zhang
High Efficiency Adversarial Patch Video Recognition Differential Evolution Decision Based Patch Attack

March 9, 2023

Decision-BADGE: Decision-based Adversarial Batch Attack with Directional Gradient Estimation
Geunhyeok Yu, Minwoo Jeon, Hyoseok Hwang
Adversarial Attack Adversarial Example Gradient Estimation Decision Based

December 7, 2022

DDoD: Dual Denial of Decision Attacks on Human-AI Teams
Benjamin Tag, Niels van Berkel, Sunny Verma, Benjamin Zi Hao Zhao, Shlomo Berkovsky, Dali Kaafar, Vassilis Kostakos, Olga Ohrimenko
Artificial Intelligence Human AI Team Decision Based Sponge Attack

November 15, 2022

Universal Distributional Decision-based Black-box Adversarial Attack with Reinforcement Learning
Yiran Huang, Yexu Zhou, Michael Hefenbrock, Till Riedel, Likun Fang, Michael Beigl
Reinforcement Learning Adversarial Attack Adversarial Perturbation Black Box Adversarial Attack Decision Based ImageNet Attack

October 1, 2022

DeltaBound Attack: Efficient decision-based attack in low queries regime
Lorenzo Rossi
Deep Neural Network Adversarial Attack Attack Strategy Low Data Regime Decision Based Non Neural

December 13, 2021

Triangle Attack: A Query-efficient Decision-based Adversarial Attack
Xiaosen Wang, Zeliang Zhang, Kangheng Tong, Dihong Gong, Kun He, Zhifeng Li, Wei Liu
Adversarial Attack Adversarial Example Decision Based Efficient Query

December 10, 2021

RamBoAttack: A Robust Query Efficient Deep Neural Network Decision Exploit
Viet Quoc Vo, Ehsan Abbasnejad, Damith C. Ranasinghe
Adversarial Attack Adversarial Example Decision Based Gradient Based Adversarial Blackbox Attack

December 7, 2021

Decision-based Black-box Attack Against Vision Transformers via Patch-wise Adversarial Removal
Yucheng Shi, Yahong Han, Yu-an Tan, Xiaohui Kuang
Vision Transformer Adversarial Robustness Decision Based Better Adversarial Robustness Adversarial Removal