Pixle: a fast and effective black-box attack based on rearranging pixels
Jary Pomponi, Simone Scardapane, Aurelio Uncini

TL;DR
Pixle introduces a fast black-box adversarial attack that rearranges a few pixels in images, effectively fooling models across various datasets with minimal perceptible changes.
Contribution
The paper presents a novel pixel-rearrangement attack method that is efficient, effective, and applicable to multiple models without needing model details.
Findings
High attack success rate across datasets
Requires few iterations to generate adversaries
Minimal perceptible difference between original and adversarial images
Abstract
Recent research has found that neural networks are vulnerable to several types of adversarial attacks, where the input samples are modified in such a way that the model produces a wrong prediction that misclassifies the adversarial sample. In this paper we focus on black-box adversarial attacks, that can be performed without knowing the inner structure of the attacked model, nor the training procedure, and we propose a novel attack that is capable of correctly attacking a high percentage of samples by rearranging a small number of pixels within the attacked image. We demonstrate that our attack works on a large number of datasets and models, that it requires a small number of iterations, and that the distance between the original sample and the adversarial one is negligible to the human eye.
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Code & Models
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Anomaly Detection Techniques and Applications
