Computer Science > Computer Vision and Pattern Recognition
[Submitted on 16 Apr 2019 (v1), revised 21 May 2019 (this version, v3), latest version 7 Feb 2020 (v4)]
Title:AT-GAN: A Generative Attack Model for Adversarial Transferring on Generative Adversarial Nets
View PDFAbstract:We propose a new attack model called AT-GAN that transfers generative adversarial nets (GANs) for adversarial attacks. Different from existing attacks that add small perturbations to the input images, AT-GAN tries to explore the distribution of adversarial instances so as to directly generate the adversarial examples from any random noise. In this way, the generated adversarial examples are not limited to any natual images. Also, compared with the ioneer work using GAN that do iterations of gradient descent to search for a good noise in the neighborhood of an original random noise such that the corresponding output of GAN is an adversial example, our model is a generative model that tries to learn the distribution of the adversial examples. Once AT-GAN is trained, it can generate adversarial images and the output is not limited to the input noise. Experiments show that AT-GAN is very fast and can generate plenty of adversarial instances that look more realistic to human eyes, AT-GAN yields a higher attack success rate under various adversarial training defenses for semi-whitebox as well as black-box attack settings, and AT-GAN can learn a distribution of adversarial examples that is very close to the distribution of the real data.
Submission history
From: Xiaosen Wang [view email][v1] Tue, 16 Apr 2019 16:26:19 UTC (279 KB)
[v2] Wed, 17 Apr 2019 02:19:07 UTC (1 KB) (withdrawn)
[v3] Tue, 21 May 2019 15:26:32 UTC (1,734 KB)
[v4] Fri, 7 Feb 2020 18:11:58 UTC (5,462 KB)
Bibliographic and Citation Tools
Bibliographic Explorer (What is the Explorer?)
Litmaps (What is Litmaps?)
scite Smart Citations (What are Smart Citations?)
Code, Data and Media Associated with this Article
CatalyzeX Code Finder for Papers (What is CatalyzeX?)
DagsHub (What is DagsHub?)
Gotit.pub (What is GotitPub?)
Papers with Code (What is Papers with Code?)
ScienceCast (What is ScienceCast?)
Demos
Recommenders and Search Tools
Influence Flower (What are Influence Flowers?)
Connected Papers (What is Connected Papers?)
CORE Recommender (What is CORE?)
arXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.