Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Delving into Transferable Adversarial Examples and Black-box Attacks   An intriguing property of deep neural networks is the existence of
adversarial examples, which can transfer among different architectures. These
transferable adversarial examples may severely hinder deep neural network-based
applications. Previous works mostly study the transferability using small scale
datasets. In this work, we are the first to conduct an extensive study of the
transferability over large models and a large scale dataset, and we are also
the first to study the transferability of targeted adversarial examples with
their target labels. We study both non-targeted and targeted adversarial
examples, and show that while transferable non-targeted adversarial examples
are easy to find, targeted adversarial examples generated using existing
approaches almost never transfer with their target labels. Therefore, we
propose novel ensemble-based approaches to generating transferable adversarial
examples. Using such approaches, we observe a large proportion of targeted
adversarial examples that are able to transfer with their target labels for the
first time. We also present some geometric studies to help understanding the
transferable adversarial examples. Finally, we show that the adversarial
examples generated using ensemble-based approaches can successfully attack
Clarifai.com, which is a black-box image classification system.

33
The categories of this paper are: plasm-ph
8
The categories of this paper are: hep-ex
19
The categories of this paper are: eess
28
The categories of this paper are: alg-geom
17
The categories of this paper are: q-fin
14
The categories of this paper are: math-ph
31
The categories of this paper are: ao-sci
35
The categories of this paper are: mtrl-th
18
The categories of this paper are: econ
3
The categories of this paper are: physics
26
The categories of this paper are: bayes-an
22
The categories of this paper are: chao-dyn
16
The categories of this paper are: stat
25
The categories of this paper are: patt-sol
15
The categories of this paper are: nucl-ex
10
The categories of this paper are: q-bio