Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks

Xinjie Xu; Shuyu Cheng; Dongwei Xu; Qi Xuan; Chen Ma

AAAI 2026technical0 citations

Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks

Xinjie Xu, Shuyu Cheng, Dongwei Xu, Qi Xuan, Chen Ma

Abstract

In hard-label black-box adversarial attacks, where only the top-1 predicted label is accessible, the prohibitive query complexity poses a major obstacle to practical deployment. In this paper, we focus on optimizing a representative class of attacks that search for the optimal ray direction yielding the minimum ℓ₂-norm perturbation required to move a benign image into the adversarial region. Inspired by Nesterov

BibTeX

@inproceedings{aaai2026_improvingtheconv,
  title = {Improving the Convergence Rate of Ray Search Optimization for Query-Efficient Hard-Label Attacks},
  author = {Xinjie Xu and Shuyu Cheng and Dongwei Xu and Qi Xuan and Chen Ma},
  booktitle = {AAAI 2026},
  year = {2026}
}