Compression as an Adversarial Amplifier Through Decision Space Reduction
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2026
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866915923860914176 |
|---|---|
| author | Evans, Lewis Jandu, Harkrishan Ye, Zihan Lu, Yang Gowda, Shreyank N |
| author_facet | Evans, Lewis Jandu, Harkrishan Ye, Zihan Lu, Yang Gowda, Shreyank N |
| contents | Image compression is a ubiquitous component of modern visual pipelines, routinely applied by social media platforms and resource-constrained systems prior to inference. Despite its prevalence, the impact of compression on adversarial robustness remains poorly understood. We study a previously unexplored adversarial setting in which attacks are applied directly in compressed representations, and show that compression can act as an adversarial amplifier for deep image classifiers. Under identical nominal perturbation budgets, compression-aware attacks are substantially more effective than their pixel-space counterparts. We attribute this effect to decision space reduction, whereby compression induces a non-invertible, information-losing transformation that contracts classification margins and increases sensitivity to perturbations. Extensive experiments across standard benchmarks and architectures support our analysis and reveal a critical vulnerability in compression-in-the-loop deployment settings. Code will be released. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2604_06954 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | Compression as an Adversarial Amplifier Through Decision Space Reduction Evans, Lewis Jandu, Harkrishan Ye, Zihan Lu, Yang Gowda, Shreyank N Computer Vision and Pattern Recognition Image compression is a ubiquitous component of modern visual pipelines, routinely applied by social media platforms and resource-constrained systems prior to inference. Despite its prevalence, the impact of compression on adversarial robustness remains poorly understood. We study a previously unexplored adversarial setting in which attacks are applied directly in compressed representations, and show that compression can act as an adversarial amplifier for deep image classifiers. Under identical nominal perturbation budgets, compression-aware attacks are substantially more effective than their pixel-space counterparts. We attribute this effect to decision space reduction, whereby compression induces a non-invertible, information-losing transformation that contracts classification margins and increases sensitivity to perturbations. Extensive experiments across standard benchmarks and architectures support our analysis and reveal a critical vulnerability in compression-in-the-loop deployment settings. Code will be released. |
| title | Compression as an Adversarial Amplifier Through Decision Space Reduction |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2604.06954 |