Latent Code Augmentation Based on Stable Diffusion for Data-free Substitute Attacks

Mingwen Shao, Lingzhuang Meng, Yuanjian Qiao +2

Since the training data of the target model is not available in the black-box substitute attack, most recent schemes utilize GANs to generate data for training the substitute model…