Watertox: The Art of Simplicity in Universal Attacks A Cross-Model Framework for Robust Adversarial Generation
Not on the map. Why?
Abstract (arXiv)
Contemporary adversarial attack methods face significant limitations in cross-model transferability and practical applicability. We present Watertox, an elegant adversarial attack framework achieving remarkable effectiveness through architectural diversity and precision-controlled perturbations. Our two-stage Fast Gradient Sign Method combines uniform baseline perturbations (ε1 = 0.1) with targeted enhancements (ε2 = 0.4). The framework leverages an ensemble of complementary architectures, from VGG to ConvNeXt, synthesizing diverse perspectives through an innovative voting mechanism. Against state-of-the-art architectures, Watertox reduces model accuracy from 70.6% to 16.0%, with zero-shot attacks achieving up to 98.8% accuracy reduction against unseen architectures. These results establish Watertox as a significant advancement in adversarial methodologies, with promising applications in visual security systems and CAPTCHA generation.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 5 of its 18 references that are in the map. First posted on arXiv 20 Dec 2024.
Builds on
5 of 18 references.
References · 5
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2016Adversarial examples in the physical worldcited by 1,769
- 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 446
- 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 355
- 20192DR1-PCA and 2DL1-PCA: two variant 2DPCA algorithms based on none L2 normcited by 1
Built on by
Not cited yet.