Limited Budget Adversarial Attack Against Online Image Stream
Abstract
An adversary wants to attack a limited number of images within a stream of known length to reduce the exposure risk. Also, the adversary wants to maximize the success rate of the performed attacks. We show that with very minimal changes in images data, majority of attacking attempt would fail, however some attempts still lead to succeed. We detail an algorithm that choose the optimal images which lead to successful attack . We apply our approach on MNIST and prove it’s significant outcome compared to the state of the art.
Cite
Text
Arjomandi et al. "Limited Budget Adversarial Attack Against Online Image Stream." ICML 2021 Workshops: AML, 2021.Markdown
[Arjomandi et al. "Limited Budget Adversarial Attack Against Online Image Stream." ICML 2021 Workshops: AML, 2021.](https://mlanthology.org/icmlw/2021/arjomandi2021icmlw-limited/)BibTeX
@inproceedings{arjomandi2021icmlw-limited,
title = {{Limited Budget Adversarial Attack Against Online Image Stream}},
author = {Arjomandi, Hossein Mohasel and Khalooei, Mohammad and Amirmazlaghani, Maryam},
booktitle = {ICML 2021 Workshops: AML},
year = {2021},
url = {https://mlanthology.org/icmlw/2021/arjomandi2021icmlw-limited/}
}