L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Guo, Ping, Liu, Fei, Lin, Xi, Zhao, Qingchuan, Zhang, Qingfu
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866913359059746816
author Guo, Ping
Liu, Fei
Lin, Xi
Zhao, Qingchuan
Zhang, Qingfu
author_facet Guo, Ping
Liu, Fei
Lin, Xi
Zhao, Qingchuan
Zhang, Qingfu
contents In the rapidly evolving field of machine learning, adversarial attacks present a significant challenge to model robustness and security. Decision-based attacks, which only require feedback on the decision of a model rather than detailed probabilities or scores, are particularly insidious and difficult to defend against. This work introduces L-AutoDA (Large Language Model-based Automated Decision-based Adversarial Attacks), a novel approach leveraging the generative capabilities of Large Language Models (LLMs) to automate the design of these attacks. By iteratively interacting with LLMs in an evolutionary framework, L-AutoDA automatically designs competitive attack algorithms efficiently without much human effort. We demonstrate the efficacy of L-AutoDA on CIFAR-10 dataset, showing significant improvements over baseline methods in both success rate and computational efficiency. Our findings underscore the potential of language models as tools for adversarial attack generation and highlight new avenues for the development of robust AI systems.
format Preprint
id arxiv_https___arxiv_org_abs_2401_15335
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks
Guo, Ping
Liu, Fei
Lin, Xi
Zhao, Qingchuan
Zhang, Qingfu
Cryptography and Security
Artificial Intelligence
Computer Vision and Pattern Recognition
Machine Learning
In the rapidly evolving field of machine learning, adversarial attacks present a significant challenge to model robustness and security. Decision-based attacks, which only require feedback on the decision of a model rather than detailed probabilities or scores, are particularly insidious and difficult to defend against. This work introduces L-AutoDA (Large Language Model-based Automated Decision-based Adversarial Attacks), a novel approach leveraging the generative capabilities of Large Language Models (LLMs) to automate the design of these attacks. By iteratively interacting with LLMs in an evolutionary framework, L-AutoDA automatically designs competitive attack algorithms efficiently without much human effort. We demonstrate the efficacy of L-AutoDA on CIFAR-10 dataset, showing significant improvements over baseline methods in both success rate and computational efficiency. Our findings underscore the potential of language models as tools for adversarial attack generation and highlight new avenues for the development of robust AI systems.
title L-AutoDA: Leveraging Large Language Models for Automated Decision-based Adversarial Attacks
topic Cryptography and Security
Artificial Intelligence
Computer Vision and Pattern Recognition
Machine Learning
url https://arxiv.org/abs/2401.15335