Yang Wang, Meng Wang, Jinjia Peng, Huibing Wang, Zeze Tao
We lifted 2 functions out of this paper's own repositories and ran 1 of them in a sandbox. "Ran" means the function executed on a synthesized input and returned a value. It is not a reproduction of the paper's results.
| Repository | Role | Ran |
|---|---|---|
| copy not recorded | — | 1 of 1 |
| ZezeTao/ResPA | — | 0 of 1 |
| Function | Status | Where it lives |
|---|---|---|
| clip_by_tensor | Ran | this paper's copy was not recorded; identical code first harvested from trustworthy-ai-group/pgn pointer only · get_code("11d8e1b97b2f5801") |
| ResPA | Not yet run | ZezeTao/ResPA/Incv3_ResPA_Attack.py code served (permissive licence) · get_code("5c78e6d545af81d6") |
Some links come from the archived Papers with Code dataset (CC BY-SA 4.0): attribution and licence.
Deep neural networks are susceptible to adversarial examples while suffering from incorrect predictions via imperceptible perturbations. Transfer-based attacks create adversarial examples for surrogate models and transfer these examples to target models under black-box scenarios. Recent studies reveal that adversarial examples in flat loss landscapes exhibit superior transferability to alleviate overfitting on surrogate models. However, the prior arts overlook the influence of perturbation directions, resulting in limited transferability. In this paper, we propose a novel attack method, named Residual Perturbation Attack (ResPA), relying on the residual gradient as the perturbation direction to guide the adversarial examples toward the flat regions of the loss function. Specifically, ResPA conducts an exponential moving average on the input gradients to obtain the first moment as the reference gradient, which encompasses the direction of historical gradients. Instead of heavily relying on the local flatness that stems from the current gradients as the perturbation direction, ResPA further considers the residual between the current gradient and the reference gradient to capture the changes in the global perturbation direction. The experimental results demonstrate the better transferability of ResPA than the existing typical transfer-based attack methods, while the transferability can be further improved by combining ResPA with the current input transformation methods. The code is available at https://github.com/ZezeTao/ResPA.
The same record, over MCP at https://syntology.ai/mcp:
get_harvested_code_for_paper("2508.05689")
get_code_for_paper("2508.05689")
have("2508.05689")
Connect an agent — have() is free.