Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Perception Improvement for Free: Exploring Imperceptible Black-box
  Adversarial Attacks on Image Classification   Deep neural networks are vulnerable to adversarial attacks. White-box
adversarial attacks can fool neural networks with small adversarial
perturbations, especially for large size images. However, keeping successful
adversarial perturbations imperceptible is especially challenging for
transfer-based black-box adversarial attacks. Often such adversarial examples
can be easily spotted due to their unpleasantly poor visual qualities, which
compromises the threat of adversarial attacks in practice. In this study, to
improve the image quality of black-box adversarial examples perceptually, we
propose structure-aware adversarial attacks by generating adversarial images
based on psychological perceptual models. Specifically, we allow higher
perturbations on perceptually insignificant regions, while assigning lower or
no perturbation on visually sensitive regions. In addition to the proposed
spatial-constrained adversarial perturbations, we also propose a novel
structure-aware frequency adversarial attack method in the discrete cosine
transform (DCT) domain. Since the proposed attacks are independent of the
gradient estimation, they can be directly incorporated with existing
gradient-based attacks. Experimental results show that, with the comparable
attack success rate (ASR), the proposed methods can produce adversarial
examples with considerably improved visual quality for free. With the
comparable perceptual quality, the proposed approaches achieve higher attack
success rates: particularly for the frequency structure-aware attacks, the
average ASR improves more than 10% over the baseline attacks.

7
The categories of this paper are: hep-th
9
The categories of this paper are: nlin
14
The categories of this paper are: math-ph
37
The categories of this paper are: supr-con
22
The categories of this paper are: chao-dyn
18
The categories of this paper are: econ
30
The categories of this paper are: q-alg
26
The categories of this paper are: bayes-an
5
The categories of this paper are: gr-qc
3
The categories of this paper are: physics
4
The categories of this paper are: cond-mat
8
The categories of this paper are: hep-ex
2
The categories of this paper are: math
31
The categories of this paper are: ao-sci
20
The categories of this paper are: acc-phys
21
The categories of this paper are: adap-org