Abstract
Adversarial examples represent a serious issue for the application of machinelearning models in many sensitive domains. For generating adversarial examples,decision based black-box attacks are one of the most practical techniques asthey only require query access to the model. One of the most recently proposedstate-of-the-art decision based black-box attacks is Triangle Attack (TA). Inthis paper, we offer a high-level description of TA and explain potentialtheoretical limitations. We then propose a new decision based black-box attack,Triangle Attack with Reinforcement Learning (TARL). Our new attack addressesthe limits of TA by leveraging reinforcement learning. This creates an attackthat can achieve similar, if not better, attack accuracy than TA with half asmany queries on state-of-the-art classifiers and defenses across ImageNet andCIFAR-10.