cs.AI updates on arXiv.org 07月30日 12:12
Teach Me to Trick: Exploring Adversarial Transferability via Knowledge Distillation
index_new5.html
../../../zaker_core/zaker_tpl_static/wap/tpl_guoji1.html

 

本文研究从多个异构教师模型进行知识蒸馏是否能增强生成可迁移对抗样本的能力。通过两种知识蒸馏策略训练轻量级学生模型,并使用FG、FGS和PGD攻击生成对抗样本,结果表明多教师知识蒸馏在攻击成功率上与集成基线相当,同时生成时间缩短至六分之一。研究表明知识蒸馏不仅可压缩模型,还能提高黑盒对抗攻击的效率和效果。

arXiv:2507.21992v1 Announce Type: cross Abstract: We investigate whether knowledge distillation (KD) from multiple heterogeneous teacher models can enhance the generation of transferable adversarial examples. A lightweight student model is trained using two KD strategies: curriculum-based switching and joint optimization, with ResNet50 and DenseNet-161 as teachers. The trained student is then used to generate adversarial examples using FG, FGS, and PGD attacks, which are evaluated against a black-box target model (GoogLeNet). Our results show that student models distilled from multiple teachers achieve attack success rates comparable to ensemble-based baselines, while reducing adversarial example generation time by up to a factor of six. An ablation study further reveals that lower temperature settings and the inclusion of hard-label supervision significantly enhance transferability. These findings suggest that KD can serve not only as a model compression technique but also as a powerful tool for improving the efficiency and effectiveness of black-box adversarial attacks.

Fish AI Reader

Fish AI Reader

AI辅助创作,多种专业模板,深度分析,高质量内容生成。从观点提取到深度思考,FishAI为您提供全方位的创作支持。新版本引入自定义参数,让您的创作更加个性化和精准。

FishAI

FishAI

鱼阅,AI 时代的下一个智能信息助手,助你摆脱信息焦虑

联系邮箱 441953276@qq.com

相关标签

知识蒸馏 对抗样本 黑盒攻击 模型压缩 多教师模型
相关文章