GeoDA: a Decision-based Adversarial Attack
GeoDA is a black-box attack framework to generate adversarial example for image classifiers. We propose a geometric framework to generate adversarial examples in one of the most challenging black-box settings where the adversary can only generate a small number of queries, each of them returning the top-1 label of the classifier.
A. Rahmati, S. M. Moosavi-Dezfooli, P. Frossard, and H. Dai, “A geometric framework for black-box adversarial attacks”, in CVF/IEEE Computer Vision and Pattern Recognition (CVPR’20), Seattle, WA, 2020. [CVF Open Access], [arXiv], [Code]