{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/beyond-imagenet-attack-towards-crafting-1","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","arxiv_id":"2201.11528","date":"2022-01-27","proceeding":"ICLR 2022 4","authors":["Qilong Zhang","Xiaodan Li","Yuefeng Chen","Jingkuan Song","Lianli Gao","Yuan He","Hui Xue"],"abstract":"Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-model transferability, which mostly assume the substitute model is trained in the same domain as the target model. However, in reality, the relevant information of the deployed model is unlikely to leak. Hence, it is vital to build a more practical black-box threat model to overcome this limitation and evaluate the vulnerability of deployed models. In this paper, with only the knowledge of the ImageNet domain, we propose a Beyond ImageNet Attack (BIA) to investigate the transferability towards black-box domains (unknown classification tasks). Specifically, we leverage a generative model to learn the adversarial function for disrupting low-level features of input images. Based on this framework, we further propose two variants to narrow the gap between the source and target domains from the data and model perspectives, respectively. Extensive experiments on coarse-grained and fine-grained domains demonstrate the effectiveness of our proposed methods. Notably, our methods outperform state-of-the-art approaches by up to 7.71\\% (towards coarse-grained domains) and 25.91\\% (towards fine-grained domains) on average. Our code is available at \\url{https://github.com/qilong-zhang/Beyond-ImageNet-Attack}.","url_abs":"https://arxiv.org/abs/2201.11528v4","url_pdf":"https://arxiv.org/pdf/2201.11528v4.pdf","source":{"archive":"pwc-archive (Hugging Face), CC BY-SA 4.0","snapshot":"2025-07-28","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","row_kind":"abstracts"},"code_links":[{"paper_slug":"beyond-imagenet-attack-towards-crafting-1","repo_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":{"status":"ok","spdx":"MIT"}},{"paper_slug":"beyond-imagenet-attack-towards-crafting-1","repo_url":"https://github.com/qilong-zhang/beyond-imagenet-attack","is_official":1,"mentioned_in_paper":1,"mentioned_in_github":1,"framework":"pytorch","reach":null}],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2201.11528","atlas_url":"https://app.syntology.ai/?focus=2201.11528","mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2201.11528"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"provenance":"deterministic:regex_extraction","url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack","reach":{"status":"ok","spdx":"MIT"}},{"provenance":"external:paperswithcode_snapshot_2025-07-28","url":"https://github.com/qilong-zhang/beyond-imagenet-attack","reach":null}],"summary":{"ran":10,"ran_draft_wrong":1},"by_repo_kind":{"official":{"samples":11,"ran":11,"repositories":2}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"acddffe2ca275748","entry":"GeneratorResnet","repo":"qilong-zhang/beyond-imagenet-attack","repo_kind":"official","path":"generator.py","file_url":"https://github.com/qilong-zhang/beyond-imagenet-attack/blob/HEAD/generator.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"acddffe2ca275748"}},{"code_sha256_prefix":"fc5d9d84d0fa3f1a","entry":"ResidualBlock","repo":"qilong-zhang/beyond-imagenet-attack","repo_kind":"official","path":"generator.py","file_url":"https://github.com/qilong-zhang/beyond-imagenet-attack/blob/HEAD/generator.py","link_basis":"first_harvest_node","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":true,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"fc5d9d84d0fa3f1a"}},{"code_sha256_prefix":"2acf0497fa785363","entry":"alexnet","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/alexnet.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/alexnet.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"2acf0497fa785363"}},{"code_sha256_prefix":"e6436dcd699473d2","entry":"cifar10","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"cifar/model.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/cifar/model.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"e6436dcd699473d2"}},{"code_sha256_prefix":"3baa599c5d5d5bb5","entry":"cifar100","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"cifar/model.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/cifar/model.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"3baa599c5d5d5bb5"}},{"code_sha256_prefix":"583f9780bdd00a45","entry":"conv3x3","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/resnet.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/resnet.py","link_basis":"harvester_set","language":"python","status":"ran_draft_wrong","verification_level":1,"contract_check":"OUTPUT_MISDECLARED","metamorphic_tier":"deterministic","behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"583f9780bdd00a45"}},{"code_sha256_prefix":"c89d1e59cc2475a1","entry":"get","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/dataset.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/dataset.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"c89d1e59cc2475a1"}},{"code_sha256_prefix":"ac62432dc5134b0d","entry":"make_layers","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/vgg.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/vgg.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ac62432dc5134b0d"}},{"code_sha256_prefix":"ec2c08983ca02f3d","entry":"make_layers","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"cifar/model.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/cifar/model.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"ec2c08983ca02f3d"}},{"code_sha256_prefix":"935d064cdc5a56c6","entry":"vgg11","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/vgg.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/vgg.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"935d064cdc5a56c6"}},{"code_sha256_prefix":"f9a4c5c980953259","entry":"vgg13","repo":"Alibaba-AAIG/Beyond-ImageNet-Attack","repo_kind":"official","path":"imagenet/vgg.py","file_url":"https://github.com/Alibaba-AAIG/Beyond-ImageNet-Attack/blob/HEAD/imagenet/vgg.py","link_basis":"harvester_set","language":"python","status":"ran","verification_level":1,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"MIT","inline_ok":true,"mcp_get_code":{"code_sha256":"f9a4c5c980953259"}}]},"arxiv_metadata":null,"syntology_extracted_results":null}