.png){kind=icon}
返回
Consensus Adversarial Defense Method Based on Augmented Examples
.png){kind=icon}
OA
AI
DOI：10.1109/TII.2022.3169973.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Deep learning has been used in many computer-vision-based industrial Internet of Things applications. However, deep neural networks are vulnerable to adversarial examples that have been crafted specifically to fool a system while being imperceptible to humans. In this article, we propose a consensus defense (Cons-Def) method to defend against adversarial attacks. Cons-Def implements classification and detection based on the consensus of the classifications of the augmented examples, which are generated based on an individually implemented intensity exchange on the red, green, and blue components of the input image. We train a CNN using augmented examples together with their original examples. For the test image to be assigned to a specific class, the class occurrence of the classifications on its augmented images should be the maximum and reach a defined threshold. Otherwise, it is detected as an adversarial example. The comparison experiments are implemented on MNIST, CIFAR-10, and ImageNet. The average defense success rate (DSR) against white-box attacks on the test sets of the three datasets is 80.3%. The average DSR against black-box attacks on CIFAR-10 is 91.4%. The average classification accuracies of Cons-Def on benign examples of the three datasets are 98.0%, 78.3%, and 66.1%. The experimental results show that Cons-Def shows a high classification performance on benign examples and is robust against white-box and black-box adversarial attacks.
Keyword:
Perturbation methods
Training
Industrial Internet of Things
Convolutional neural networks
Informatics
Task analysis
Computational modeling
Adversarial defense
consensus defense
data augmentation
industrial Internet of Things (IIoT)
期刊
IF:
9.9
论文数:
8.6K
被引数:
6.0W
机构
引用论文
Attacks on state-of-the-art face recognition using attentional adversarial attack generative network
OAAI
OAAI分享收藏Welding characteristics of aluminum, copper, nickel and aluminum alloy with alumina coating using ultrasonic complex vibration welding equipments铝、铜、镍及铝合金氧化铝涂层超声复合振动焊接特性研究
PREAI
分享收藏DeepFed: Federated Deep Learning for Intrusion Detection in Industrial Cyber-Physical SystemsDeepFed: 用于工业网络物理系统中入侵检测的联合深度学习
PREAI
分享收藏Gradient-based learning applied to document recognition基于梯度的学习在文档识别中的应用.png)
PROCEEDINGS OF THE IEEE
PROCEEDINGS OF THE IEEEIF25.9
PREAI
分享收藏RCA-SOC: A novel adversarial defense by refocusing on critical areas and strengthening object contoursCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏
查看更多内容