@Article{CSIAM-AM-4-4,
author = {Xuan, Lin and Xie, Haidong and Wu, Chunlin and Xueshuang, Xiang},
title = {Non-Lipschitz Attack: A More Sparse Adversarial Attack via Non-Lipschitz $ℓ_p$ Regularization},
journal = {CSIAM Transactions on Applied Mathematics},
year = {2023},
volume = {4},
number = {4},
pages = {797--819},
abstract = {<p style="text-align: justify;">Deep neural networks are considerably vulnerable to adversarial attacks.
Therein, sparse attacks mislead image classifiers with a sparse, pixel-level perturbation that alters few pixels, and have much potential in physical world applications.
The existing sparse attacks are mostly based on $ℓ_0$ optimization, and there are few
theoretical results in these works. In this paper, we propose a novel sparse attack
approach named the non-Lipschitz attack (NLA). For the proposed $ℓ_p \ (0&lt; p &lt;1)$ regularization attack model, we derive a lower bound theory that indicates a support
inclusion analysis. Based on these discussions, we naturally extend previous works
to present an iterative algorithm with support shrinking and thresholding strategies,
as well as an efficient ADMM inner solver. Experiments show that our NLA method
outperforms comparative attacks on several datasets with different networks in both
targeted and untargeted scenarios. Our NLA achieves the 100% attack success rate in
almost all cases, and the pixels perturbed are roughly 14% fewer than the recent $ℓ_0$ attack FMN-$ℓ_0$ on average.</p>},
issn = {2708-0579},
doi = {https://doi.org/10.4208/csiam-am.SO-2022-0005},
url = {https://global-sci.com/article/82307/non-lipschitz-attack-a-more-sparse-adversarial-attack-via-non-lipschitz-p-regularization}
}