English

Watertox: The Art of Simplicity in Universal Attacks A Cross-Model Framework for Robust Adversarial Generation

Computer Vision and Pattern Recognition 2024-12-23 v1 Artificial Intelligence Cryptography and Security

Abstract

Contemporary adversarial attack methods face significant limitations in cross-model transferability and practical applicability. We present Watertox, an elegant adversarial attack framework achieving remarkable effectiveness through architectural diversity and precision-controlled perturbations. Our two-stage Fast Gradient Sign Method combines uniform baseline perturbations (ϵ1=0.1\epsilon_1 = 0.1) with targeted enhancements (ϵ2=0.4\epsilon_2 = 0.4). The framework leverages an ensemble of complementary architectures, from VGG to ConvNeXt, synthesizing diverse perspectives through an innovative voting mechanism. Against state-of-the-art architectures, Watertox reduces model accuracy from 70.6% to 16.0%, with zero-shot attacks achieving up to 98.8% accuracy reduction against unseen architectures. These results establish Watertox as a significant advancement in adversarial methodologies, with promising applications in visual security systems and CAPTCHA generation.

Keywords

Cite

@article{arxiv.2412.15924,
  title  = {Watertox: The Art of Simplicity in Universal Attacks A Cross-Model Framework for Robust Adversarial Generation},
  author = {Zhenghao Gao and Shengjie Xu and Meixi Chen and Fangyao Zhao},
  journal= {arXiv preprint arXiv:2412.15924},
  year   = {2024}
}

Comments

18 pages, 4 figures, 3 tables. Advances a novel method for generating cross-model transferable adversarial perturbations through a two-stage FGSM process and architectural ensemble voting mechanism