.png){kind=icon}
返回
Adversarial examples generated from sample subspace
.png){kind=icon}
PRE
AI
DOI：10.1016/j.csi.2022.103634.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Attacks and defenses have been a hot issue in the field of deep learning. Because of the vulnerability of deep learning models, it is easy to attack them by adversarial examples. Adversarial examples are carefully added perturbations to fool the deep learning model. For such samples, humans are able to classify correctly, while deep learning models are prone to give a high confidence false output. The working mechanism of adversarial samples has always been a difficult point and focus of research. In this work, the nature of the attack from the adversarial samples is studied accordingly from the perspective of the main and minor features of PCA (principal component analysis). Firstly, we find that the deep learning model mainly learns the main features of the data, rather than the minor features. Secondly, we discover that perturbations on the main features are more likely to lead to misclassification of the deep learning model, while perturbations on the minor features have little effect. Finally, we propose a method to generate adversarial samples in the sample subspace. Experimental results on both MNIST and CIFAR10 show that the proposed method generates smaller adversarial sample perturbations, which are more difficult to detect by human eyes and more aggressive against white-box attacks on deep learning models.
Keyword:
Adversarial examples
PCA
Defense
Deep learning
期刊
C
IF:
3.1
论文数:
2.3K
被引数:
2.0K
机构
引用论文
.png){kind=icon}
A new control mark for photogrammetry and its localization from single image using computer vision
PREAI
分享收藏A portable HCI system-oriented EEG feature extraction and channel selection for emotion recognition面向情感识别的便携式HCI系统脑电特征提取与通道选择
OAAI
OAAI分享收藏
查看更多内容