TY  - EJOU
AU  - Yi, Xiaoyin 
AU  - Chen, Long 
AU  - Huang, Jiacheng 
AU  - Yu, Ning 
AU  - Huang, Qian 

TI  - Enhancing Adversarial Example Transferability via Regularized Constrained Feature Layer
T2  - Computers, Materials \& Continua

PY  - 2025
VL  - 83
IS  - 1
SN  - 1546-2226

AB  - Transfer-based Adversarial Attacks (TAAs) can deceive a victim model even without prior knowledge. This is achieved by leveraging the property of adversarial examples. That is, when generated from a surrogate model, they retain their features if applied to other models due to their good transferability. However, adversarial examples often exhibit overfitting, as they are tailored to exploit the particular architecture and feature representation of source models. Consequently, when attempting black-box transfer attacks on different target models, their effectiveness is decreased. To solve this problem, this study proposes an approach based on a Regularized Constrained Feature Layer (RCFL). The proposed method first uses regularization constraints to attenuate the initial examples of low-frequency components. Perturbations are then added to a pre-specified layer of the source model using the back-propagation technique, in order to modify the original adversarial examples. Afterward, a regularized loss function is used to enhance the black-box transferability between different target models. The proposed method is finally tested on the ImageNet, CIFAR-100, and Stanford Car datasets with various target models, The obtained results demonstrate that it achieves a significantly higher transfer-based adversarial attack success rate compared with baseline techniques.
KW  - Adversarial examples; black-box transferability; regularized constrained; transfer-based adversarial attacks

DO  - 10.32604/cmc.2025.059863