Search

Black box attack is mainly focuses on the decision information, but there are many query times and the selection of sensitive pixels is difficult. Therefore, this paper proposed a defect sample generation algorithm based on differential evolution. By defining the black box attack as an unconstrained optimization problem, the algorithm used differential evolution to search image sensitive points, and optimized the loss function of decision definition and gradient calculation based on the deep learning model to achieve an effective black box attack. On MNIST and CIF ARlO datasets, the average query times of the proposed algorithm decreased by 28.3% and 14.8% respectively under the same attack success rate. [ABSTRACT FROM AUTHOR]