Boundary on the Table: Efficient Black-Box Decision-Based Attacks for Structured Data
Not on the map. Why?
Abstract (arXiv)
Adversarial robustness in structured data remains an underexplored frontier compared to vision and language domains. In this work, we introduce a novel black-box, decision-based adversarial attack tailored for tabular data. Our approach combines gradient-free direction estimation with an iterative boundary search, enabling efficient navigation of discrete and continuous feature spaces under minimal oracle access. Extensive experiments demonstrate that our method successfully compromises nearly the entire test set across diverse models, ranging from classical machine learning classifiers to large language model (LLM)-based pipelines. Remarkably, the attack achieves success rates consistently above 90%, while requiring only a small number of queries per instance. These results highlight the critical vulnerability of tabular models to adversarial perturbations, underscoring the urgent need for stronger defenses in real-world decision-making systems.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 20 of its 33 references that are in the map. First posted on arXiv 26 Sep 2025.
Builds on
20 of 33 references.
References · 20
- 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,372
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2016XGBoost: A Scalable Tree Boosting Systemcited by 5,166
- 2019Adversarial NLI: A New Benchmark for Natural Language Understandingcited by 807
- 2022TabPFN: A Transformer That Solves Small Tabular Classification Problems in a Secondcited by 674
- 2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 333
- 2020BAE: BERT-based Adversarial Examples for Text Classificationcited by 316
- 2022TabLLM: Few-shot Classification of Tabular Data with Large Language Modelscited by 277
- 2018CatBoost: gradient boosting with categorical features supportcited by 208
- 2021Adversarial Attacks for Tabular Data: Application to Fraud Detection and Imbalanced Datacited by 45
- 2015Evasion and Hardening of Tree Ensemble Classifierscited by 44
- 2019Imperceptible Adversarial Attacks on Tabular Datacited by 35
8 more
- 2025Red Teaming the Mind of the Machine: A Systematic Evaluation of Prompt Injection and Jailbreak Vulnerabilities in LLMscited by 34
- 2022Adversarial Robustness for Tabular Data through Cost and Utility Awarenesscited by 15
- 2024Constrained Adaptive Attack: Effective Adversarial Attack Against Deep Neural Networks for Tabular Datacited by 11
- 2025VAULT: Vigilant Adversarial Updates via LLM-Driven Retrieval-Augmented Generation for NLIcited by 6
- 2025Don't Lag, RAG: Training-Free Adversarial Detection Using RAGcited by 5
- 2024Investigating Imperceptibility of Adversarial Attacks on Tabular Data: An Empirical Analysiscited by 4
- 2025TabAttackBench: A Benchmark for Adversarial Attacks on Tabular Datacited by 4
- 2024Faster Repeated Evasion Attacks in Tree Ensemblescited by 1
Built on by
Not cited yet.