BriefGPT.xyz
Jul, 2023
从替代训练中理解对抗可迁移性
Towards Understanding Adversarial Transferability From Surrogate Training
HTML
PDF
Yechao Zhang, Shengshan Hu, Leo Yu Zhang, Junyu Shi, Minghui Li...
TL;DR
通过对拟合平滑度和梯度相似度进行权衡,我们揭示了对抗传递的调节机制,发现数据分布移位导致的梯度相似度降级说明了拟合平滑度与梯度相似度之间的贸易协定,并提出了一种更好的替代品构建方法,旨在优化拟合平滑度和梯度相似度,通过数据增强、梯度正则化等技术进行验证。
Abstract
adversarial examples
(AEs) for
dnns
have been shown to be transferable: AEs that successfully fool white-box
surrogate models
can also dec
→