{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/a-frank-wolfe-framework-for-efficient-and","title":"A Frank-Wolfe Framework for Efficient and Effective Adversarial Attacks","arxiv_id":"1811.10828","date":"2018-11-27","proceeding":"ICLR 2019 5","authors":["Jinghui Chen","Dongruo Zhou","Jin-Feng Yi","Quanquan Gu"],"abstract":"Depending on how much information an adversary can access to, adversarial attacks can be classified as white-box attack and black-box attack. For white-box attack, optimization-based attack algorithms such as projected gradient descent (PGD) can achieve relatively high attack success rates within moderate iterates. However, they tend to generate adversarial examples near or upon the boundary of the perturbation set, resulting in large distortion. Furthermore, their corresponding black-box attack algorithms also suffer from high query complexities, thereby limiting their practical usefulness. In this paper, we focus on the problem of developing efficient and effective optimization-based adversarial attack algorithms. In particular, we propose a novel adversarial attack framework for both white-box and black-box settings based on a variant of Frank-Wolfe algorithm. We show in theory that the proposed attack algorithms are efficient with an $O(1/\\sqrt{T})$ convergence rate. The empirical results of attacking the ImageNet and MNIST datasets also verify the efficiency and effectiveness of the proposed algorithms. More specifically, our proposed algorithms attain the best attack performances in both white-box and black-box attacks among all baselines, and are more time and query efficient than the state-of-the-art.","url_abs":"https://arxiv.org/abs/1811.10828v2","url_pdf":"https://arxiv.org/pdf/1811.10828v2.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"a-frank-wolfe-framework-for-efficient-and","repo_url":"https://github.com/uclaml/Frank-Wolfe-AdvML","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"tf","reach":{"status":"ok","spdx":"Apache-2.0"}},{"paper_slug":"a-frank-wolfe-framework-for-efficient-and","repo_url":"https://github.com/sipka/fw-adversarial-imagenet","is_official":0,"mentioned_in_paper":0,"mentioned_in_github":1,"framework":"none","reach":{"status":"ok"}}],"tasks":[{"task_slug":"adversarial-attack","task_name":"Adversarial Attack"}],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"atlas_url":"https://app.syntology.ai/?focus=1811.10828","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"1811.10828"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/sipka/fw-adversarial-imagenet","reach":{"status":"ok"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/uclaml/Frank-Wolfe-AdvML","reach":{"status":"ok","spdx":"Apache-2.0"}}],"summary":{"ran_honours":2,"unverified":4},"by_repo_kind":{"official":{"samples":6,"ran":2,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"86c9fa246614e9a9","entry":"extract_data","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"setup_mnist.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/setup_mnist.py","link_basis":"harvester_set","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"86c9fa246614e9a9"}},{"code_sha256_prefix":"a0cf6bb81ff7819e","entry":"extract_labels","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"setup_mnist.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/setup_mnist.py","link_basis":"harvester_set","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"a0cf6bb81ff7819e"}},{"code_sha256_prefix":"b4c7644e1b1e681f","entry":"eps_search","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"utils.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"b4c7644e1b1e681f"}},{"code_sha256_prefix":"96e15e0fac0eea27","entry":"grad_normalization","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"utils.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"96e15e0fac0eea27"}},{"code_sha256_prefix":"f82301bf2c63f02f","entry":"load_image","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"setup_resnet.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/setup_resnet.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"f82301bf2c63f02f"}},{"code_sha256_prefix":"e5bdc9bf6b15b688","entry":"norm_ball_proj_inner","repo":"uclaml/Frank-Wolfe-AdvML","repo_kind":"official","path":"utils.py","file_url":"https://github.com/uclaml/Frank-Wolfe-AdvML/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"e5bdc9bf6b15b688"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}