arrow
返回

Implementing a Multitarget Backdoor Attack Algorithm Based on Procedural Noise Texture Features

delete2024-01-01
delete0
PRE
AI
Q
Q.B. Liu
C
Chunying Kang *
Q
Qian Zou
Q
Qiaochu Guan
DOI:10.1109/ACCESS.2024.3401848delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Recent studies have shown that deep neural networks (DNNs) may suffer from some security issues such as backdoor attacks. The triggers of backdoor attacks are dynamic and global. However, existing backdoor attack methods are laborious and time-consuming in hiding global triggers, and most of them focus on single-target attacks, with less research on multitarget backdoor attacks. In this work, we present a multitarget attack strategy using texture features of procedural noise. Specifically, we use the k-LSB steganography algorithm to hide the triggers in the image and use different texture features of procedural noise to trigger multiple targets for attack. Poisoned images can be generated more quickly using the k-LSB steganography algorithm without any training process. Multitarget backdoor attacks apply to more scenarios and are more difficult to defend against. We evaluate the effectiveness of the proposed attack method on GTSRB and ImageNet datasets, and the experiments show that the proposed attack can achieve a high attack success rate (up to 100.00% for GTSRB and up to 98.48% for ImageNet) without compromising the clean data's categorization performance, and thus is less likely to arouse the suspicion of administrators. In addition, the attack can bypass existing defense methods (STRIP defense and Neural Cleanse defense).
Keyword:
Noise
Steganography
Training
Artificial neural networks
Perturbation methods
Data models
Lattices
Deep learning
Backdoor attack
deep learning
procedural noise
LSB steganography

期刊

IEEE Access 封面图
IEEE Access
IF:
3.6
论文数:
9.8W
被引数:
29.4W

机构

H
Heilongjiang University
学者数:
8.5K
论文数: 5.2K
被引数: 6.8K
引用论文

引用论文

A Versatile One-pot Synthesis of Symmetrical N-Tosylazamacrocycles
err1985-01-01
err0
errOAAI
errSebastiano Pappalardo; Francesco Bottino; Michele Di Grazia; Paolo Finocchiaro; Antonino Mamo
err分享
err收藏
err分享
err收藏
Psychoonkologische Aspekte des malignen Melanoms
err2009-08-23
err0
PREAI
errM.E. Beutel; M. Blettner; S. Fischbeck; C. Loquay; A. Werner; H. Marian
err分享
err收藏
err分享
err收藏
The triggers that open the NLP model backdoors are hidden in the adversarial samples
err2022-07-01
err11
PREAI
errShao, Kun; Zhang, Yu; Yang, Junan; Li, Xiaoshuai; Liu, Hui
err分享
err收藏
学者 查看更多内容