# T$\_k$ML-AP: Adversarial Attacks to Top-$k$ Multi-Label Learning Source: [T$\_k$ML-AP: Adversarial Attacks to Top-$k$ Multi-Label Learning]() Collection index: [llms.txt]() Data updated: 2025-10-25T23:25:36.663Z Authors: Shu Hu, Lipeng Ke, Xin Wang, Siwei Lyu Published: 2021-07-31T04:38:19.000Z ## Abstract Top-$k$ multi-label learning, which returns the top-$k$ predicted labels from an input, has many practical applications such as image annotation, document analysis, and web search engine. However, the vulnerabilities of such algorithms with regards to dedicated adversarial perturbation attacks have not been extensively studied previously. In this work, we develop methods to create adversarial perturbations that can be used to attack top-$k$ multi-label learning-based image annotation systems (TkML-AP). Our methods explicitly consider the top-$k$ ranking relation and are based on novel loss functions. Experimental evaluations on large-scale benchmark datasets including PASCAL VOC and MS COCO demonstrate the effectiveness of our methods in reducing the performance of state-of-the-art top-$k$ multi-label learning methods, under both untargeted and targeted attacks. ## Recorded benchmark results A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage. ## Original sources and implementation [Original paper]() [PDF]()