Q&A: Phase 41.1 — AdversarialAttackSimulator

[web3guru888]

Q&A: Phase 41.1 — AdversarialAttackSimulator

Ask questions about the AdversarialAttackSimulator component — covering FGSM, PGD, C&W, AutoAttack, adversarial example generation, transferability analysis, and attack evaluation.

Topics

• Attack method selection (when to use FGSM vs PGD vs C&W vs AutoAttack)
• Perturbation budget selection (ε values for different domains)
• Norm selection (L∞ vs L2 vs L1 vs L0)
• Targeted vs untargeted attacks
• Black-box vs white-box threat models
• Transferability and ensemble attacks
• Integration with RobustnessVerifier (41.2) and AdversarialTrainer (41.3)

Resources

• Issue Phase 41.1 — AdversarialAttackSimulator: FGSM, PGD, C&W, AutoAttack Attack Suite #825 — Full specification
• Discussion Phase 41 Planning — Adversarial Robustness & Security Intelligence #824 — Phase 41 planning
• Goodfellow et al. (2015) — FGSM paper
• Madry et al. (2018) — PGD paper
• Carlini & Wagner (2017) — C&W paper
• Croce & Hein (2020) — AutoAttack paper