title: One for Many: an Instagram inspired black-box adversarial attack
abstract: It is well known that deep learning models are susceptible to adversarial attacks. To produce more robust and effective attacks, we propose a nested evolutionary algorithm able to produce multi-network (decision-based) black-box adversarial attacks based on Instagram inspired image filters. Due to the multi-network training, the system reaches a high transferability rate of attacks and, due to the composition of image filters, it is able to bypass standard detection mechanisms. Moreover, this kind of attack is semantically robust: our filter composition cannot be distinguished from any other filter composition used extensively every day to enhance images; this raises new security issues and challenges for real-world systems.  Experimental results demonstrate that the method is also effective against
  ensemble-adversarially trained models and it has a low cost in terms of queries to the victim model.
authors: Alina Elena Baia Alfredo Milani Valentina Poggioni
hIndex: None 0