Query-Efficient Decision-based Black-Box Patch Attack
Zhaoyu Chen, Bo Li, Shuang Wu, Shouhong Ding, Wenqiang Zhang

TL;DR
This paper introduces DevoPatch, a query-efficient decision-based patch attack method that models patches with key-points and uses evolutionary algorithms, significantly improving attack success rates and patch efficiency on various models.
Contribution
The paper proposes a novel decision-based patch attack method using paired key-points and evolutionary algorithms, advancing black-box attack efficiency and robustness evaluation.
Findings
DevoPatch outperforms state-of-the-art black-box patch attacks in success rate and patch size.
The method is effective on image classification and face verification tasks.
First evaluation of ViT and MLP models' vulnerability to decision-based patch attacks.
Abstract
Deep neural networks (DNNs) have been showed to be highly vulnerable to imperceptible adversarial perturbations. As a complementary type of adversary, patch attacks that introduce perceptible perturbations to the images have attracted the interest of researchers. Existing patch attacks rely on the architecture of the model or the probabilities of predictions and perform poorly in the decision-based setting, which can still construct a perturbation with the minimal information exposed -- the top-1 predicted label. In this work, we first explore the decision-based patch attack. To enhance the attack efficiency, we model the patches using paired key-points and use targeted images as the initialization of patches, and parameter optimizations are all performed on the integer domain. Then, we propose a differential evolutionary algorithm named DevoPatch for query-efficient decision-based…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdversarial Robustness in Machine Learning · Anomaly Detection Techniques and Applications
