Papers on black box attacks on hard label models
DECISION-BASED ADVERSARIAL ATTACKS: RELIABLE ATTACKS AGAINST BLACK-BOX MACHINE LEARNING MODELS
Wieland Brendel∗, Jonas Rauber∗ & Matthias Bethge
https://openreview.net/forum?id=SyZI0GWCZ
Black-box Adversarial Attacks with Limited Queries and Information
Andrew Ilyas, Logan Engstrom, Anish Athalye, Jessy Lin
http://proceedings.mlr.press/v80/ilyas18a.html
Query-Efficient Hard-label Black-box Attack:An Optimization-based Approach
Minhao Cheng, Thong Le, Pin-Yu Chen, Jinfeng Yi, Huan Zhang, Cho-Jui Hsieh
https://openreview.net/forum?id=rJlk6iRqKX
SIGN-OPT: A QUERY-EFFICIENT HARD-LABEL ADVERSARIAL ATTACK
Minhao Cheng*, Simranjit Singh∗, Patrick Chen, Pin-Yu Cheng, Sijia Liu, Cho-Jui Hsieh