search

labsix / limited-blackbox-attacks

Code for "Black-box Adversarial Attacks with Limited Queries and Information" (http://arxiv.org/abs/1804.08598)
174 stars 43 forks source link

Attacking Google Cloud Vision API #13

Open Eric-mingjie opened 4 years ago

Eric-mingjie commented 4 years ago

I am trying to attack the google cloud vision api using your code and i was checking on the video you posted about the attacking process. I have some questions about it:

There seems to be some images where the label dog are not among the predicted labels, for examples https://youtu.be/1h9bU7WBTUg?t=43. But I think the partial information attack depends on the target class staying in the predicted labels. So there seems to be contradiction here? Is the video showing the generated images at every iteration?

Also, what is the k used in the attacking the google cloud vision api?

andrewilyas commented 4 years ago

Hi, the only reason the dog doesn't appear in the video is because the number of labels exceeds the size of the scroll bar (so the dog label is just cut off). The dog label is actually maintained throughout classification.

Eric-mingjie commented 4 years ago

Thanks for the timely reply. But what about 9.png and 19.png? Clearly for these two images the label dog does not appear in the predicted labels.