Zhuoran Ma

Power of Diversity: Enhancing Data-Free Black-Box Attack with Domain-Augmented Learning

Substitute training-based data-free black-box attacks pose a significant threat to enterprise-deployed models. These attacks use a generator to synthesize data and query APIs, then train a substitute model to approximate the target model's decision boundary based on the returned results. However, ex…