Closing the Gap: Achieving Better Accuracy-Robustness Tradeoffs against Query-Based Attacks

arXiv:2312.10132v2 Announce Type: replace-cross
Abstract: Although promising, existing defenses against query-based attacks share a common limitation: they offer increased robustness against attacks at the price of a considerable accuracy drop on clean samples. In this work, we show how to efficiently establish, at test-time, a solid tradeoff between robustness and accuracy when mitigating query-based attacks. Given that these attacks necessarily explore low-confidence regions, our insight is that activating dedicated defenses, such as random noise defense and random image transformations, only …

accuracy arxiv attacks cs.cr cs.cv cs.lg defenses gap offer query robustness share solid test work