Traditional adversarial examples are typically generated by adding perturbation noise to the input image within a small matrix norm. In practice, un-restricted adversarial attack has raised great concern and presented a new threat to the AI safety. In this paper, we propose a wavelet-VAE structure to reconstruct an input image and generate adversarial examples by modifying the latent code. Different from perturbation-based attack, the modifications of the proposed method are not limited but imperceptible to human eyes. Experiments show that our method can generate high quality adversarial examples on ImageNet dataset.
@article{arxiv.2108.11032,
title = {Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE},
author = {Wenzhao Xiang and Chang Liu and Shibao Zheng},
journal= {arXiv preprint arXiv:2108.11032},
year = {2021}
}