Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Transferable Universal Adversarial Perturbations Using Generative Models   Deep neural networks tend to be vulnerable to adversarial perturbations,
which by adding to a natural image can fool a respective model with high
confidence. Recently, the existence of image-agnostic perturbations, also known
as universal adversarial perturbations (UAPs), were discovered. However,
existing UAPs still lack a sufficiently high fooling rate, when being applied
to an unknown target model. In this paper, we propose a novel deep learning
technique for generating more transferable UAPs. We utilize a perturbation
generator and some given pretrained networks so-called source models to
generate UAPs using the ImageNet dataset. Due to the similar feature
representation of various model architectures in the first layer, we propose a
loss formulation that focuses on the adversarial energy only in the respective
first layer of the source models. This supports the transferability of our
generated UAPs to any other target model. We further empirically analyze our
generated UAPs and demonstrate that these perturbations generalize very well
towards different target models. Surpassing the current state of the art in
both, fooling rate and model-transferability, we can show the superiority of
our proposed approach. Using our generated non-targeted UAPs, we obtain an
average fooling rate of 93.36% on the source models (state of the art: 82.16%).
Generating our UAPs on the deep ResNet-152, we obtain about a 12% absolute
fooling rate advantage vs. cutting-edge methods on VGG-16 and VGG-19 target
models.

9
The categories of this paper are: nlin
21
The categories of this paper are: adap-org
36
The categories of this paper are: cmp-lg
32
The categories of this paper are: atom-ph
7
The categories of this paper are: hep-th
28
The categories of this paper are: alg-geom
29
The categories of this paper are: funct-an
17
The categories of this paper are: q-fin
10
The categories of this paper are: q-bio
3
The categories of this paper are: physics
33
The categories of this paper are: plasm-ph
23
The categories of this paper are: solv-int
16
The categories of this paper are: stat
13
The categories of this paper are: quant-ph
11
The categories of this paper are: hep-lat
24
The categories of this paper are: dg-ga