Black-Box Query Attack

An adversarial attack paradigm in which the attacker cannot access model parameters and instead repeatedly queries the model and observes the returned probability vectors. Finite differences or random search are used to estimate gradients and thereby construct adversarial examples.