Home > Research > Publications & Outputs > FeatureBA

Associated organisational unit

Electronic data

  • ESWA-D-24-18394_R2

    Accepted author manuscript, 7.09 MB, PDF document

    Available under license: CC BY: Creative Commons Attribution 4.0 International License

Links

Text available via DOI:

View graph of relations

FeatureBA: Hard label black box attack based on internal layer features of surrogate model

Research output: Contribution to Journal/MagazineJournal articlepeer-review

E-pub ahead of print
Close
Article number127082
<mark>Journal publication date</mark>1/06/2025
<mark>Journal</mark>Expert Systems with Applications
Volume276
Publication StatusE-pub ahead of print
Early online date12/03/25
<mark>Original language</mark>English

Abstract

This study revises previous work by emphasizing the integration of surrogate models into query-based black-box adversarial attacks, showcasing their effectiveness in reducing query counts and enhancing robustness. This observation highlights a critical gap in decision-based (hard label) approaches, which have not yet effectively integrated surrogate models. In this paper, we propose a novel decision-based approach to black-box adversarial attacks. By utilizing intermediate layer features of the surrogate network and optimizing the query feedback process, the proposed method achieves competitive results with a significant reduction in query counts (up to 99.73% lower compared to existing methods). Extensive experiments validate its performance across diverse tasks, including image classification, object detection, and face recognition. This work demonstrates the potential for enhancing the practicality of decision-based attacks in real-world scenarios.