Mingwen Shao*

Inter-Class Topology Alignment for Efficient Black-Box Substitute Attacks

"In black-box attacks based on substitute training, the similarity of the substitute model to the target model is critical for successful attacks. However, existing schemes merely train the substitute model to mimic the outputs of the target model without fully simulating the decision space, resulti…