Xuxiang Sun

Exploring Effective Data for Surrogate Training Towards Black-Box Attack

Without access to the training data where a black-box victim model is deployed, training a surrogate model for black-box adversarial attack is still a struggle. In terms of data, we mainly identify three key measures for effective surrogate training in this paper. First, we show that leveraging the…