arrow
返回

Consistent Valid Physically-Realizable Adversarial Attack Against Crowd-Flow Prediction Models

delete2024-06-01
delete0
delete
OA
AI
H
Hassan Ali
M
Muhammad Atif Butt
F
Fethi Filali
A
Ala Al‐Fuqaha
J
Junaid Qadir *
DOI:10.1109/TITS.2023.3343971delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Recent works have shown that deep learning (DL) models can effectively learn city-wide crowd-flow patterns, which can be used for more effective urban planning and smart city management. However, DL models have been known to perform poorly on inconspicuous adversarial perturbations. Although many works have studied these adversarial perturbations in general, the adversarial vulnerabilities of deep CFP models in particular have remained largely unexplored. In this paper, we perform a rigorous analysis of the adversarial vulnerabilities of DL-based CFP models under multiple threat settings, making three-fold contributions; 1) we propose by formally identifying two novel properties-Consistency and Validity-of the CFP inputs that enable the detection of standard adversarial inputs with 0% false acceptance rate (FAR); 2) we leverage universal adversarial perturbations and an adaptive adversarial loss to present adaptive adversarial attacks to evade defense; 3) we propose, a Consistent, Valid and Physically-realizable adversarial attack, that explicitly inducts the consistency and validity priors in the perturbation generation mechanism. We find out that although the crowd-flow models are vulnerable to adversarial perturbations, it is extremely challenging to simulate these perturbations in physical settings, notably when is in place. We also show that attack considerably outperforms the adaptively modified standard attacks in FAR and adversarial loss metrics. We conclude with useful insights emerging from our work and highlight promising future research directions.
Keyword:
Perturbation methods
Standards
Adaptation models
Computer architecture
Analytical models
History
Data models
Deep neural networks
CFP
adversarial ML

期刊

IEEE Transactions on Intelligent Transportation Systems 封面图
IEEE Transactions on Intelligent Transportation Systems
IF:
8.4
论文数:
9.7K
被引数:
6.3W

机构

Q
qatar mobility innovations center (qmic)
学者数:
94
论文数: 78
被引数: 0
Q
Qatar University
学者数:
8.9K
论文数: 9.0K
被引数: 16
H
Hamad Bin Khalifa University-Qatar
学者数:
2.2K
论文数: 2.0K
被引数: 33
Q
qatar foundation (qf)
学者数:
6.3K
论文数: 7.0K
被引数: 8
学者 查看更多机构
引用论文

引用论文

err分享
err收藏
Competitive redox-catalyzed migratory carbonyl insertion and .beta.-elimination in iron alkyl complexes
err2002-05-01
err0
PREAI
errRobert S. Bly; Gary S. Silverman; M. Mahmun Hossain; Ruta K. Bly
err分享
err收藏
A Quality Improvement Project to Reduce Combination Acetaminophen-opioid Prescriptions to Pediatric Orthopedic Patients
err2020-05-01
err0
errOAAI
errThomas J. Caruso; Sunny Trivedi; Whitney Chadwick; Shabnam Gaskari; Ellen Wang; Juan Marquez; Sara Lagasse; Madison Bailey; Kevin Shea
err分享
err收藏
err分享
err收藏
Knowledge and awareness toward cervical cancer screening and prevention among the professional college female students
err2019-01-01
err0
errOAAI
errSaranya Manikandan; Subasish Behera; NageswaraoMadhulika Naidu; Vignesswary Angamuthu; OmarFarooq Burhanuddin Mohammed; Abhitosh Debata
err分享
err收藏
err分享
err收藏
err
IF0
err
err0
PREAI
err
err分享
err收藏
学者 查看更多内容