返回
Attention-SA: Exploiting Model-Approximated Data Semantics for Adversarial Attack
DOI:10.1109/TIFS.2024.3409945.png)
摘要
En 中文
Adversarial Defense of deep neural networks have gained significant attention and there have been active research efforts on model vulnerabilities for attacking such as gradient-based attack and pre-defined semantic manipulation. However, they often lack clear adversarial pattern connecting model extracted notion and are restricted to fixed constraint, making the gradual inability to proposed robust defense. In this paper, we propose to utilize the learned semantics of model, possibly not be the true one for the correct prediction, as inspiring clue in adversarial example construction. And we propose a new attention-based semantic oriented adversarial attack without any prior constraint about semantic preservation, dubbed Attention-SA from the learned task-related decision factors perspective. Specifically, to capture the learned factor, we introduce a post-hoc soft attention with a gradient-sensitivity activation consistency to probe the information of latent representation that bridge the input and prediction. With the attention guidance, we perturb the separated and semantic units, then back-propagate the variation onto input to discover expanded adversarial examples. Finally, extensive performance evaluations on CIFAR-10 and ImageNet datasets demonstrate the superiority of our proposed method. And we verify the effectiveness of our method on various robust defenses.
Keyword:
Semantics
Perturbation methods
Robustness
Predictive models
Artificial neural networks
Task analysis
Closed box
Unrestricted adversarial attack
semantic coupling
deep neural networks
期刊
IF:
8
论文数:
5.3K
被引数:
2.3W
机构
引用论文
A Survey of Robustness and Safety of 2D and 3D Deep Learning Models against Adversarial Attacks针对对抗性攻击的2D和3D深度学习模型的鲁棒性和安全性综述
Welding characteristics of aluminum, copper, nickel and aluminum alloy with alumina coating using ultrasonic complex vibration welding equipments铝、铜、镍及铝合金氧化铝涂层超声复合振动焊接特性研究

