Improving the Transferability of Adversarial Examples by Using Generative Adversarial Networks and Data Enhancement

Abstract

Deep neural networks (DNNs) can be attacked by adversarial examples that are undetectable by humans. Generation-based approaches have recently gained popularity because they directly translate the input distribution to the distribution of adversarial instances, making them more effective and efficient. However, existing techniques are susceptible to overfitting on the substitute model, limiting the transferability of adversarial examples. In this paper, we introduce data augmentation into AdvGAN, called AdvGAN-DE, which can dramatically improve the transferability of adversarial examples. Experiments demonstrate that we enhance the success rate by 31.09% for defense models and 10.23% for typically trained models on average when compared to AdvGAN.