Weilun Chen

Boosting Decision-based Black-box Adversarial Attacks with Random Sign Flip

Decision-based black-box adversarial attacks (decision-based attack) pose a severe threat to current deep neural networks, as they only need the predicted label of the target model to craft adversarial examples. However, existing decision-based attacks perform poorly on the $ l_\infty $ setting and…