{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2602-08679","title":"Dashed Line Defense: Plug-And-Play Defense Against Adaptive Score-Based Query Attacks","arxiv_id":"2602.08679","date":"2026-02-09","proceeding":null,"authors":["Yanzhang Fu","Zizheng Guo","Jizhou Luo"],"abstract":"Score-based query attacks pose a serious threat to deep learning models by crafting adversarial examples (AEs) using only black-box access to model output scores, iteratively optimizing inputs based on observed loss values. While recent runtime defenses attempt to disrupt this process via output perturbation, most either require access to model parameters or fail when attackers adapt their tactics. In this paper, we first reveal that even the state-of-the-art plug-and-play defense can be bypassed by adaptive attacks, exposing a critical limitation of existing runtime defenses. We then propose Dashed Line Defense (DLD), a plug-and-play post-processing method specifically designed to withstand adaptive query strategies. By introducing ambiguity in how the observed loss reflects the true adversarial strength of candidate examples, DLD prevents attackers from reliably analyzing and adapting their queries, effectively disrupting the AE generation process. We provide theoretical guarantees of DLD's defense capability and validate its effectiveness through experiments on ImageNet, demonstrating that DLD consistently outperforms prior defenses--even under worst-case adaptive attacks--while preserving the model's predicted labels.","url_abs":"https://arxiv.org/abs/2602.08679","url_pdf":"https://arxiv.org/pdf/2602.08679","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":null,"atlas_url":"https://app.syntology.ai/?focus=2602.08679","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2602.08679"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-24T18:15:14+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/fyzdalao/Dashed-Line-Defense","reach":null}],"summary":{"ran_honours":3,"unverified":3},"by_repo_kind":{"found_in_text":{"samples":6,"ran":3,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":6,"samples":[{"code_sha256_prefix":"4ca7ef6d76dc7319","entry":"meta_pseudo_gaussian_pert","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"square.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/square.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"4ca7ef6d76dc7319"}},{"code_sha256_prefix":"053d874dd6c8872d","entry":"p_selection","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"square.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/square.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"053d874dd6c8872d"}},{"code_sha256_prefix":"c7544861060c462d","entry":"pseudo_gaussian_pert_rectangles","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"square.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/square.py","link_basis":"plan_row","language":"python","status":"ran_honours","verification_level":1,"contract_check":"HONOURS","metamorphic_tier":"well_formed","behaviour_fingerprint":true,"licence":"NONE","inline_ok":false,"mcp_get_code":{"code_sha256":"c7544861060c462d"}},{"code_sha256_prefix":"07bc6355b124a3c5","entry":"margin_loss_n","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"utils.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NOASSERTION","inline_ok":false,"mcp_get_code":{"code_sha256":"07bc6355b124a3c5"}},{"code_sha256_prefix":"4834e43c0dd5ab07","entry":"sample_imagenet","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"utils.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NOASSERTION","inline_ok":false,"mcp_get_code":{"code_sha256":"4834e43c0dd5ab07"}},{"code_sha256_prefix":"06c49272cd2baa4a","entry":"sample_imagenet_every_class","repo":"fyzdalao/Dashed-Line-Defense","repo_kind":"found_in_text","path":"utils.py","file_url":"https://github.com/fyzdalao/Dashed-Line-Defense/blob/HEAD/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"NOASSERTION","inline_ok":false,"mcp_get_code":{"code_sha256":"06c49272cd2baa4a"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.LG","source":"arxiv_2026.jsonl"},"syntology_extracted_results":null}