Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Patch-wise Attack for Fooling Deep Neural Network   By adding human-imperceptible noise to clean images, the resultant
adversarial examples can fool other unknown models. Features of a pixel
extracted by deep neural networks (DNNs) are influenced by its surrounding
regions, and different DNNs generally focus on different discriminative regions
in recognition. Motivated by this, we propose a patch-wise iterative algorithm
-- a black-box attack towards mainstream normally trained and defense models,
which differs from the existing attack methods manipulating pixel-wise noise.
In this way, without sacrificing the performance of white-box attack, our
adversarial examples can have strong transferability. Specifically, we
introduce an amplification factor to the step size in each iteration, and one
pixel's overall gradient overflowing the $\epsilon$-constraint is properly
assigned to its surrounding regions by a project kernel. Our method can be
generally integrated to any gradient-based attack methods. Compared with the
current state-of-the-art attacks, we significantly improve the success rate by
9.2\% for defense models and 3.7\% for normally trained models on average. Our
code is available at
\url{https://github.com/qilong-zhang/Patch-wise-iterative-attack}

32
The categories of this paper are: atom-ph
7
The categories of this paper are: hep-th
20
The categories of this paper are: acc-phys
6
The categories of this paper are: astro-ph
26
The categories of this paper are: bayes-an
23
The categories of this paper are: solv-int
27
The categories of this paper are: comp-gas
12
The categories of this paper are: nucl-th
10
The categories of this paper are: q-bio
36
The categories of this paper are: cmp-lg
2
The categories of this paper are: math
37
The categories of this paper are: supr-con
15
The categories of this paper are: nucl-ex
16
The categories of this paper are: stat
9
The categories of this paper are: nlin
11
The categories of this paper are: hep-lat