We consider the zeroth-order optimization problem in the huge-scale setting, where the dimension of the problem is so large that performing even basic vector operations on the decision variables is infeasible. In this paper, we propose a novel algorithm, coined ZO-BCD, that exhibits favorable overall query complexity and has a much smaller per-iteration computational complexity. In addition, we discuss how the memory footprint of ZO-BCD can be reduced even further by the clever use of circulant measurement matrices. As an application of our new method, we propose the idea of crafting adversarial attacks on neural network based classifiers in a wavelet domain, which can result in problem dimensions of over 1.7 million. In particular, we show that crafting adversarial examples to audio classifiers in a wavelet domain can achieve the state-of-the-art attack success rate of 97.9%.
翻译:我们认为,在大规模环境下,零级优化问题非常大,以至于无法在决定变量上进行甚至基本的矢量操作。在本文中,我们提出一个新型算法,即创出ZO-BCD,显示有利于整体查询的复杂程度,并且每个字母的计算复杂性要小得多。此外,我们讨论了如何通过聪明地使用螺旋测量矩阵来进一步减少ZO-BCD的记忆足迹。作为我们新方法的一种应用,我们提出了在波盘域内对以神经网络为基础的分类器进行对抗性攻击的想法,这可能造成170万个以上的问题尺寸。特别是,我们表明,在波盘域内为音频分类器设计对抗性例子可以达到97.9%的打击成功率。