Exploring non-additive randomness on ViT against query-based black-box attacks

Conference item

Deep Neural Networks can be easily fooled by small and imperceptible perturbations. The query-based black-box attack (QBBA) is able to create the perturbations using model output probabilities of image queries requiring no access to the underlying models. QBBA poses realistic threats to real-world applications. Recently, various types of robustness have been explored to defend against QBBA. In this work, we first taxonomize the stochastic defense strategies against QBBA. Following our taxonomy, we propose to explore non-additive randomness in models to defend against QBBA. Specifically, we focus on underexplored Vision Transformers based on their flexible architectures. Extensive experiments show that the proposed defense approach achieves effective defense, without much sacrifice in performance.

Authors: Gu, J; Wei, F; Torr, P; Hu, H

• Publication status: Published
• Peer review status: Peer reviewed
• Publisher: British Machine Vision Association
• Host title: The 34th British Machine Vision Conference Proceedings
• Article number: 406
• Publication date: 2023-01-01
• Event title: 34th British Machine Vision Conference (BMVC 2023)
• Event location: Aberdeen, UK
• Event website: https://bmvc2023.org/
• Event start date: 2023-11-20
• Event end date: 2023-11-24
• Language: English