Alert button

Headless Horseman: Adversarial Attacks on Transfer Learning Models

Apr 20, 2020
Ahmed Abdelkader, Michael J. Curry, Liam Fowl, Tom Goldstein, Avi Schwarzschild, Manli Shu, Christoph Studer, Chen Zhu

Figure 1 for Headless Horseman: Adversarial Attacks on Transfer Learning Models
Figure 2 for Headless Horseman: Adversarial Attacks on Transfer Learning Models
Figure 3 for Headless Horseman: Adversarial Attacks on Transfer Learning Models
Figure 4 for Headless Horseman: Adversarial Attacks on Transfer Learning Models

Share this with someone who'll enjoy it:

Transfer learning facilitates the training of task-specific classifiers using pre-trained models as feature extractors. We present a family of transferable adversarial attacks against such classifiers, generated without access to the classification head; we call these \emph{headless attacks}. We first demonstrate successful transfer attacks against a victim network using \textit{only} its feature extractor. This motivates the introduction of a label-blind adversarial attack. This transfer attack method does not require any information about the class-label space of the victim. Our attack lowers the accuracy of a ResNet18 trained on CIFAR10 by over 40\%.

* 5 pages, 2 figures. Accepted in ICASSP 2020. Code available on https://github.com/zhuchen03/headless-attack.git  
View paper onarxiv icon

Share this with someone who'll enjoy it: