The application provides a
black box confrontation evaluation method based on strategy driving and frequency-space residual remodeling, belongs to the technical field of confrontation
attack, selects neural networks with multiple different network architectures to construct a heterogeneous agent model matrix, obtains a source detection
tensor and a calibrated true value and extracts a benchmark response gradient; the current evolution state
tensor, the benchmark response gradient, the
frequency domain amplitude spectrum feature and the iteration progress scalar are spliced to form a multi-dimensional joint
state vector; a
frequency domain attenuation barrier and a space domain remodeling
tensor are generated through a strategy decision network, the
frequency domain filtering denoising and the space domain nonlinear residual remodeling are sequentially performed on the benchmark response gradient, and the evolution state tensor is updated in the residual fusion remodeling direction. After the multi-round iteration and the composite feedback
signal optimization strategy
network parameter, the tensor with the optimal comprehensive
threat effectiveness is selected as the confrontation evaluation carrier output. The application can effectively strip high-frequency
overfitting noise, solve the cross-model response offset problem, and improve the cross-
model migration and evaluation stability of the
black box confrontation evaluation carrier.