PAR-AdvGAN: Improving Adversarial Attack Capability with Progressive Auto-Regression AdvGAN
Not on the map. Why?
Abstract (arXiv)
Deep neural networks have demonstrated remarkable performance across various domains. However, they are vulnerable to adversarial examples, which can lead to erroneous predictions. Generative Adversarial Networks (GANs) can leverage the generators and discriminators model to quickly produce high-quality adversarial examples. Since both modules train in a competitive and simultaneous manner, GAN-based algorithms like AdvGAN can generate adversarial examples with better transferability compared to traditional methods. However, the generation of perturbations is usually limited to a single iteration, preventing these examples from fully exploiting the potential of the methods. To tackle this issue, we introduce a novel approach named Progressive Auto-Regression AdvGAN (PAR-AdvGAN). It incorporates an auto-regressive iteration mechanism within a progressive generation network to craft adversarial examples with enhanced attack capability. We thoroughly evaluate our PAR-AdvGAN method with a large-scale experiment, demonstrating its superior performance over various state-of-the-art black-box adversarial attacks, as well as the original AdvGAN.Moreover, PAR-AdvGAN significantly accelerates the adversarial example generation, i.e., achieving the speeds of up to 335.5 frames per second on Inception-v3 model, outperforming the gradient-based transferable attack algorithms. Our code is available at: https://github.com/LMBTough/PAR
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 37 of its 45 references that are in the map. First posted on arXiv 16 Feb 2025.
Builds on
37 of 45 references.
References · 37
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2020An Image is Worth 16x16 Words: Transformers for Image Recognition at Scalecited by 29,915
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2013Intriguing properties of neural networkscited by 5,114
- 2016Image-to-Image Translation with Conditional Adversarial Networkscited by 4,510
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2016Identity Mappings in Deep Residual Networkscited by 1,960
- 2016Adversarial examples in the physical worldcited by 1,762
- 2016Inception-v4, Inception-ResNet and the Impact of Residual Connections on Learningcited by 1,509
25 more
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2021Alias-Free Generative Adversarial Networkscited by 1,181
- 2022MaskGIT: Masked Generative Image Transformercited by 1,082
- 2017Ensemble Adversarial Training: Attacks and Defensescited by 833
- 2018Improving Transferability of Adversarial Examples with Input Diversitycited by 591
- 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 530
- 2019Evading Defenses to Transferable Adversarial Examples by Translation-Invariant Attackscited by 440
- 2017Mitigating Adversarial Effects Through Randomizationcited by 382
- 2019Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attackscited by 352
- 2017Defense against Adversarial Attacks Using High-Level Representation Guided Denoisercited by 329
- 2018Generating Adversarial Examples with Adversarial Networkscited by 256
- 2016A study of the effect of JPG compression on adversarial imagescited by 196
- 2020Torchattacks: A PyTorch Repository for Adversarial Attackscited by 156
- 2019Understanding Adversarial Attacks on Deep Learning Based Medical Image Analysis Systemscited by 151
- 2022Frequency Domain Model Augmentation for Adversarial Attackcited by 128
- 2016Technical Report on the CleverHans v2.1.0 Adversarial Examples Librarycited by 123
- 2022Improving Adversarial Transferability via Neuron Attribution-Based Attackscited by 92
- 2020Patch-wise Attack for Fooling Deep Neural Networkcited by 78
- 2020An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Modelscited by 67
- 2021Feature Space Targeted Attacks by Statistic Alignmentcited by 21
- 2019AdvGAN++ : Harnessing latent layers for adversary generationcited by 20
- 2019TextKD-GAN: Text Generation using KnowledgeDistillation and Generative Adversarial Networkscited by 14
- 2020Explainable Recommendation via Interpretable Feature Mapping and Evaluation of Explainabilitycited by 9
- 2020On the Learning Property of Logistic and Softmax Losses for Deep Neural Networkscited by 3
- 2020Toward Tag-free Aspect Based Sentiment Analysis: A Multiple Attention Network Approachcited by 3
Built on by
Not cited yet.