Random Noise Defense Against Query-Based Black-Box Attacks Zeyu Qin 1 Y anbo Fan

DNN model as well as the training dataset, are often hidden from users. Instead, only the model feedback for each query ( e.g ., labels or confidence scores) is accessible. In this case, the product providers mainly face severe threats from query-based black-box attacks, which don't require any