Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Transfer Attacks Revisited: A Large-Scale Empirical Study in Real
  Computer Vision Settings   One intriguing property of adversarial attacks is their "transferability" --
an adversarial example crafted with respect to one deep neural network (DNN)
model is often found effective against other DNNs as well. Intensive research
has been conducted on this phenomenon under simplistic controlled conditions.
Yet, thus far, there is still a lack of comprehensive understanding about
transferability-based attacks ("transfer attacks") in real-world environments.
  To bridge this critical gap, we conduct the first large-scale systematic
empirical study of transfer attacks against major cloud-based MLaaS platforms,
taking the components of a real transfer attack into account. The study leads
to a number of interesting findings which are inconsistent to the existing
ones, including: (1) Simple surrogates do not necessarily improve real transfer
attacks. (2) No dominant surrogate architecture is found in real transfer
attacks. (3) It is the gap between posterior (output of the softmax layer)
rather than the gap between logit (so-called $\kappa$ value) that increases
transferability. Moreover, by comparing with prior works, we demonstrate that
transfer attacks possess many previously unknown properties in real-world
environments, such as (1) Model similarity is not a well-defined concept. (2)
$L_2$ norm of perturbation can generate high transferability without usage of
gradient and is a more powerful source than $L_\infty$ norm. We believe this
work sheds light on the vulnerabilities of popular MLaaS platforms and points
to a few promising research directions.

35
The categories of this paper are: mtrl-th
27
The categories of this paper are: comp-gas
28
The categories of this paper are: alg-geom
15
The categories of this paper are: nucl-ex
16
The categories of this paper are: stat
24
The categories of this paper are: dg-ga
0
The categories of this paper are: hep-ph
32
The categories of this paper are: atom-ph
6
The categories of this paper are: astro-ph
9
The categories of this paper are: nlin
12
The categories of this paper are: nucl-th
2
The categories of this paper are: math
18
The categories of this paper are: econ
8
The categories of this paper are: hep-ex
36
The categories of this paper are: cmp-lg
26
The categories of this paper are: bayes-an