← Back to all news
arXiv Computer Vision By Ankit Gupta, Akshat Pandya, Paul Lin, Christoph Adami, Emily Dolson

STROKE: Simple Sparse Structural Occlusions for Black-Box Adversarial Attacks

Read the original on arXiv Computer Vision →

STROKE is a query‑efficient, score‑based black‑box adversarial attack that builds perturbations from simple oriented rectangular occlusions. It optimizes these occlusions using a lightweight greedy add‑and‑refine procedure, achieving high attack success with low query counts at nominal 1–2% area settings across diverse image classifiers. Compared to existing patch‑based attacks, STROKE shows favorable performance, reduced wall‑clock attack time, and the ablation studies confirm the effectiveness of its structural primitives.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Computer Vision.

Related stories

arXiv Machine Learning
Oct 23

MIG-COW: Transferable Adversarial Attacks on Deepfake Detectors via Gradient Decomposition

MIG‑COW is a new adversarial attack framework that uses momentum‑integrated gradients and a consensus‑orthogonal decomposition to create highly generalizable, visually imperceptible perturbations against deepfake detectors. It achieves a 99.96% white‑box attack success rate on the AADD‑2025 Challenge benchmarks while maintaining high perceptual similarity (SSIM). In black‑box settings, its success rate drops to 7.16%, and adding low‑performing but diverse models to the ensemble can reduce attack effectiveness, highlighting the importance of careful surrogate model selection.

By Wonjune Seo, Joonhyuk Baek, Yeseong Jung, Saerom Park
multimodalbenchmarkssafety
More like this →
arXiv Machine Learning
Sep 22

Reinforcement Learning Inspired Black-box Adversarial Attacks for Computer Vision

The paper introduces RIBA, a reinforcement‑learning inspired black‑box adversarial attack that generates perturbations for neural networks with fewer queries than existing methods. RIBA achieves a 25.4% reduction in median queries on ResNet‑18/Cifar10 and a 22.5% reduction on Vit‑B/16/ImageNet, while matching white‑box attack performance on an adversarially trained model.

By Florian Krone, Elena Hoemann, Sven Hallerbach
llmscomputer-visionreinforcement-learningsafety
More like this →
arXiv AI
Jun 18

Revealing Hidden Vulnerabilities in Autoencoders through Gradient Signal Restoration

arXiv:2505. 03646v5 Announce Type: replace-cross Abstract: Adversarial robustness of deep autoencoders (AEs) has received less attention than that of discriminative models, although their compressed latent representations induce ill-conditioned mappings that can amplify small input perturbations and destabilize reconstructions.

By Chethan Krishnamurthy Ramanaik, Arjun Roy, Tobias Callies, Eirini Ntoutsi
multimodalsafety
More like this →