2026
Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks
AAAI 2026technical
In hard-label black-box adversarial attacks, where only the top-1 predicted label is accessible, the prohibitive query complexity poses a major obstacle to practical deployment. In this paper, we focus on optimizing a representative class of attacks that search for the optimal ray direction yielding