A Survey On Universal Adversarial Attack

Abstract

The intriguing phenomenon of adversarial examples has attracted significant attention in machine learning and what might be more surprising to the community is the existence of universal adversarial perturbations (UAPs), i.e. a single perturbation to fool the target DNN for most images. With the focus on UAP against deep classifiers, this survey summarizes the recent progress on universal adversarial attacks, discussing the challenges from both the attack and defense sides, as well as the reason for the existence of UAP. We aim to extend this work as a dynamic survey that will regularly update its content to follow new works regarding UAP or universal attack in a wide range of domains, such as image, audio, video, text, etc. Relevant updates will be discussed at: https://bit.ly/2SbQlLG. We welcome authors of future works in this field to contact us for including your new finding.

arXiv commentAccepted by IJCAI 2021, survey track: https://www.ijcai.org/proceedings/2021/635

References in corpus (17)

• Adversarially Robust Generalization Requires More Data
• Fast is better than free: Revisiting adversarial training
• Robustness of classifiers: from adversarial to random noise
• Fast Feature Fool: A data independent approach to universal adversarial perturbations
• Cross-Domain Transferability of Adversarial Perturbations
• Defending Against Universal Attacks Through Selective Feature Regeneration
• Universal adversarial examples in speech command classification
• Playing the Game of Universal Adversarial Perturbations
• Transferable Universal Adversarial Perturbations Using Generative Models
• Universal Adversarial Attacks with Natural Triggers for Text Classification
• Universal Adversarial Perturbation for Text Classification
• Appending Adversarial Frames for Universal Video Attack
• Real-time, Universal, and Robust Adversarial Attacks Against Speaker Recognition Systems
• Decision-based Universal Adversarial Attack
• Enabling Fast and Universal Audio Adversarial Attack Using Generative Model
• A Method for Computing Class-wise Universal Adversarial Perturbations
• Fast-UAP: An Algorithm for Speeding up Universal Adversarial Perturbation Generation with Orientation of Perturbation Vectors

Cited by in corpus (3)

• Black-box adversarial attacks using Evolution Strategies
• Consistent Attack: Universal Adversarial Perturbation on Embodied Vision Navigation
• MINIMAL: Mining Models for Data Free Universal Adversarial Triggers