They Might NOT Be Giants: Crafting Black-Box Adversarial Examples with Fewer Queries Using Particle Swarm Optimization

W.-N. Chen, J. Zhang, H. S. H. Chung, W.-L. Zhong, W.-G. Wu, and Y.-h. Shi, “A novel set-based particle swarm optimization method for discrete optimization problems,” IEEE Transactions on Evolutionary Computation , vol. 14, no. 2, pp. 278 – 300, 2010

Original

1909

Earlier work this paper cites.

J. Kennedy and R. Eberhart, “Particle swarm optimization,” in Proceedings of ICNN’95 - International Conference on Neural Networks , vol. 4, 1995, pp. 1942 – 1948

1948

Earlier work this paper cites.

Y. Shi and R. C. Eberhart, “Empirical study of particle swarm optimization,” in Proceedings of the 1999 Congress on Evolutionary Computation-CEC99 (Cat. No. 99TH8406) , vol. 3, 02 1999, pp. 1945 – 1950

1950

Earlier work this paper cites.

M. Clerc and J. Kennedy, “The particle swarm - explosion, stability, and convergence in a multidimensional complex space,” IEEE Transactions on Evolutionary Computation , vol. 6, no. 1, pp. 58 – 73, 2002

2002

Earlier work this paper cites.

Z.-L. Gaing, “Particle swarm optimization to solving the economic dispatch considering the generator constraints,” IEEE Transactions on Power Systems , vol. 18, no. 3, pp. 1187 – 1195, 2003

2003

Earlier work this paper cites.

S. C. Esquivel and C. A. Coello, “On the use of particle swarm optimization with multimodal functions,” in The 2003 Congress on Evolutionary Computation, 2003. CEC ’03. , vol. 2, 2003, pp. 1130 – 1136

2003

Earlier work this paper cites.

H. Izakian, B. Tork Ladani, K. Zamanifar, and A. Abraham, “A novel particle swarm optimization approach for grid job scheduling,” in Information Systems, Technology and Management , S. K. Prasad, S. Routray, R. Khurana, and S. Sahni, Eds. Berlin, Heidelberg: Springer Berlin Heidelberg, 2009, pp. 100 – 109

2009

Earlier work this paper cites.

C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, and R. Fergus, “Intriguing properties of neural networks,” CoRR , vol. abs/1312.6199v4, 2014. [Online]. Available: https://arxiv.org/abs/1312.6199

Original

2014

Earlier work this paper cites.

K. Simonyan and A. Zisserman, “Very deep convolutional networks for large-scale image recognition,” CoRR , vol. abs/1409.1556, 2015

Original

2015

Earlier work this paper cites.

I. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” in International Conference on Learning Representations , 2015. [Online]. Available: http://arxiv.org/abs/1412.6572

Original

2015

Cited alongside, same era.

N. Papernot, P. McDaniel, X. Wu, S. Jha, and A. Swami, “Distillation as a defense to adversarial perturbations against deep neural networks,” CoRR , vol. abs/1511.04508, 2015. [Online]. Available: http://arxiv.org/abs/1511.04508

Original

2015

Cited alongside, same era.

Y. Lu, M. Liang, Z. Ye, and L. Cao, “Improved particle swarm optimization algorithm and its application in text feature selection,” Applied Soft Computing , vol. 35, pp. 629 – 636, 2015. [Online]. Available: http://www.sciencedirect.com/science/article/pii/S1568494615004354

2015

Cited alongside, same era.

K. He, X. Zhang, S. Ren, and J. Sun, “Deep residual learning for image recognition,” CoRR , vol. abs/1512.03385, 2015. [Online]. Available: http://arxiv.org/abs/1512.03385

Original

2015

N. Papernot, P. McDaniel, I. Goodfellow, S. Jha, Z. B. Celik, and A. Swami, “Practical black-box attacks against machine learning,” in Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security , ser. ASIA CCS ’17. New York, NY, USA: ACM, 2017, pp. 506–519. [Online]. Available: http://doi.acm.org/10.1145/3052973.3053009

2017

Later among the works it cites.

N. Carlini and D. Wagner, “Towards evaluating the robustness of neural networks,” in 2017 IEEE Symposium on Security and Privacy (SP) , 2017, pp. 39 – 57

2017

Later among the works it cites.

P.-Y. Chen, H. Zhang, Y. Sharma, J. Yi, and C.-J. Hsieh, “Zoo: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models,” CoRR , vol. abs/1708.03999v2, 2017. [Online]. Available: http://arxiv.org/abs/1708.03999

Original

2017

Later among the works it cites.

J. Su, D. V. Vargas, and K. Sakurai, “One pixel attack for fooling deep neural networks,” CoRR , vol. abs/1710.08864, 2017. [Online]. Available: http://arxiv.org/abs/1710.08864

Original