Jun-Liang Xing

Towards Transferable Black-Box Attack via Minimizing Maximum Model Discrepancy.

Adversarial attacks on black-box models, which operate without direct access to the target system, present a significant challenge due to the lack of a foundational theory for the transferability of adversarial examples. This paper introduces a paradigm shift in black-box adversarial attacks by minimizing model discrep...