Adversarial attacks to image classification systems using evolutionary algorithms

Abstract

Image classification currently faces significant security challenges due to adversarial attacks, which consist of intentional alterations designed to deceive classification models based on artificial intelligence. This article explores an approach to generate adversarial attacks against image classifiers using a combination of evolutionary algorithms and generative adversarial networks. The proposed approach explores the latent space of a generative adversarial network with an evolutionary algorithm to find vectors representing adversarial attacks. The approach was evaluated in two case studies corresponding to the classification of handwritten digits and object images. The results showed success rates of up to 35% for handwritten digits, and up to 75% for object images, improving over other search methods and reported results in related works. The applied method proved to be effective in handling data diversity on the target datasets, even in problem instances that presented additional challenges due to the complexity and richness of information.

Genetic and Evolutionary Computation Conference (GECCO '25), July 14--18, 2025, Malaga, Spain

References in corpus (8)

• Conditional Generative Adversarial Nets
• Explaining and Harnessing Adversarial Examples
• CINIC-10 is not ImageNet or CIFAR-10
• Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks
• Adversarial Attack Framework on Graph Embedding Models with Limited Knowledge
• GenAttack: Practical Black-box Attacks with Gradient-Free Optimization
• Efficient Combinatorial Optimization for Word-level Adversarial Textual Attack
• SemiAdv: Query-Efficient Black-Box Adversarial Attack with Unlabeled Images