Manara - Qatar Research Repository
Browse
ManiGen_A_Manifold_Aided_Black-Box_Generator_of_Adversarial_Examples.pdf (1.75 MB)

ManiGen: A Manifold Aided Black-Box Generator of Adversarial Examples

Download (1.75 MB)
journal contribution
submitted on 2024-07-07, 13:37 and posted on 2024-07-07, 14:18 authored by Guanxiong Liu, Issa Khalil, Abdallah Khreishah, Abdulelah Algosaibi, Adel Aldalbahi, Mohammed Alnaeem, Abdulaziz Alhumam, Muhammad Anan

From recent research work, it has been shown that neural network (NN) classifiers are vulnerable to adversarial examples which contain special perturbations that are ignored by human eyes while can mislead NN classifiers. In this paper, we propose a practical black-box adversarial example generator, dubbed ManiGen. ManiGen does not require any knowledge of the inner state of the target classifier. It generates adversarial examples by searching along the manifold, which is a concise representation of input data. Through extensive set of experiments on different datasets, we show that (1) adversarial examples generated by ManiGen can mislead standalone classifiers by being as successful as the state-of-the-art white-box generator, Carlini, and (2) adversarial examples generated by ManiGen can more effectively attack classifiers with state-of-the-art defenses.

Other Information

Published in: IEEE Access
License: https://creativecommons.org/licenses/by/4.0
See article on publisher's website: https://dx.doi.org/10.1109/access.2020.3029270

Funding

Deputyship for Research & Innovation, Ministry of Education in Saudi Arabia (1120).

History

Language

  • English

Publisher

IEEE

Publication Year

  • 2020

License statement

This Item is licensed under the Creative Commons Attribution 4.0 International License.

Institution affiliated with

  • Hamad Bin Khalifa University
  • Qatar Computing Research Institute - HBKU