arXiv Machine Learning
Sep 22

Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision

The paper introduces RIBA, a reinforcement‑learning inspired black‑box adversarial attack that generates perturbations for neural networks with fewer queries than existing methods. RIBA achieves a 25.4% reduction in median queries on ResNet‑18/Cifar10 and a 22.5% reduction on Vit‑B/16/ImageNet, while matching white‑box attack performance on an adversarially trained model.

By Florian Krone, Elena Hoemann, Sven Hallerbach
arXiv Machine Learning
Oct 28

Augmentation-Guided Adversarial Training via Local Stability-Based Sample Selection

The paper introduces Augmentation-Guided Adversarial Training (AGAT), a selective adversarial training method that uses augmentation-induced local variation to identify unstable samples for training. AGAT employs Augmentation-based Local Stability (ALS) to rank samples based on the normalized change in model logits between an input and its label-preserving augmented version. Experiments on MNIST, CIFAR-10, CIFAR-100, and Tiny-ImageNet-200 show that AGAT achieves comparable or higher robust accuracy while applying adversarial supervision to only 20‑30% of training samples per minibatch, and it requires less training time than other adversarial training baselines.

By Daniel Agyei Asante, Mark Tetteh, Deborah Asamoah, Bernard Asante, Regina Esi Turkson
arXiv Machine Learning
Aug 27

Continuous Adversarial Flow Models

The paper introduces continuous adversarial flow models, a continuous-time flow framework trained with an adversarial objective that replaces the fixed mean-squared-error criterion of flow matching. By incorporating a learned discriminator, the method guides training toward a different generalized distribution, yielding samples more closely aligned with the target data distribution. Applied as a post‑training step, it markedly improves ImageNet 256px generation metrics—reducing the guidance‑free FID of latent‑space SiT from 8.26 to 3.63 and of pixel‑space JiT from 7.17 to 3.57—and also enhances guided generation and text‑to‑image benchmarks.

By Shanchuan Lin, Ceyuan Yang, Zhijie Lin, Hao Chen, Haoqi Fan