MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Kim, Hyo Seo, Luo, Gang, Chen, Can, Wang, Binghui, Duan, Yue, Wang, Ren
Format: Preprint
Published: 2026
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866918510111752192
author Kim, Hyo Seo
Luo, Gang
Chen, Can
Wang, Binghui
Duan, Yue
Wang, Ren
author_facet Kim, Hyo Seo
Luo, Gang
Chen, Can
Wang, Binghui
Duan, Yue
Wang, Ren
contents Evolutionary algorithms for adversarial attacks leverage population-based search to discover perturbations without gradient information, but suffer from inefficient crossover operations that destroy adversarial properties through discrete interpolation. We introduce Mode Connectivity Evolutionary Attack (MoCo-EA), which replaces traditional crossover with a novel Bézier crossover operator that optimizes perturbations along a continuous Bézier curve between parent perturbations. Our key insight is that adversarial examples lie on connected manifolds where intermediate points maintain and often enhance attack effectiveness. We demonstrate three findings: (1) Successful adversarial perturbations exhibit mode connectivity; (2) Intermediate points along optimized paths achieve higher transferability than endpoints; (3) Bézier crossover dramatically outperforms discrete genetic operations while reducing convergence time and query requirements. By exploiting the geometric structure of adversarial space through path optimization, MoCo-EA provides an efficient and reliable method. Our work challenges the traditional view of adversarial examples as isolated points and opens new directions for both attack generation and defense research.
format Preprint
id arxiv_https___arxiv_org_abs_2605_18919
institution arXiv
publishDate 2026
record_format arxiv
spellingShingle MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks
Kim, Hyo Seo
Luo, Gang
Chen, Can
Wang, Binghui
Duan, Yue
Wang, Ren
Cryptography and Security
Artificial Intelligence
Machine Learning
Evolutionary algorithms for adversarial attacks leverage population-based search to discover perturbations without gradient information, but suffer from inefficient crossover operations that destroy adversarial properties through discrete interpolation. We introduce Mode Connectivity Evolutionary Attack (MoCo-EA), which replaces traditional crossover with a novel Bézier crossover operator that optimizes perturbations along a continuous Bézier curve between parent perturbations. Our key insight is that adversarial examples lie on connected manifolds where intermediate points maintain and often enhance attack effectiveness. We demonstrate three findings: (1) Successful adversarial perturbations exhibit mode connectivity; (2) Intermediate points along optimized paths achieve higher transferability than endpoints; (3) Bézier crossover dramatically outperforms discrete genetic operations while reducing convergence time and query requirements. By exploiting the geometric structure of adversarial space through path optimization, MoCo-EA provides an efficient and reliable method. Our work challenges the traditional view of adversarial examples as isolated points and opens new directions for both attack generation and defense research.
title MoCo-EA: Exploiting Adversarial Mode Connectivity for Efficient Evolutionary Attacks
topic Cryptography and Security
Artificial Intelligence
Machine Learning
url https://arxiv.org/abs/2605.18919