.png){kind=icon}
返回
Invisible Intruders: Label-Consistent Backdoor Attack Using Re-Parameterized Noise Trigger
.png){kind=icon}
PRE
AI
DOI：10.1109/TMM.2024.3412388.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Aremarkable number of backdoor attack methods have been proposed in the literature on deep neural networks (DNNs). However, it hasn't been sufficiently addressed in the existing methods of achieving true senseless backdoor attacks that are visually invisible and label-consistent. In this paper, we propose a new backdoor attack method where the labels of the backdoor images are perfectly aligned with their content, ensuring label consistency. Additionally, the backdoor trigger is meticulously designed, allowing the attack to evade DNN model checks and human inspection. Our approach employs an auto-encoder (AE) to conduct representation learning of benign images and interferes with salient classification features to increase the dependence of backdoor image classification on backdoor triggers. To ensure visual invisibility, we implement a method inspired by image steganography that embeds trigger patterns into the image using the DNN and enable sample-specific backdoor triggers. We conduct comprehensive experiments on multiple benchmark datasets and network architectures to verify the effectiveness of our proposed method under the metric of attack success rate and invisibility. The results also demonstrate satisfactory performance against a variety of defense methods.
Keyword:
Backdoor attack
image steganography
label consistency
label consistency
Re-parameterized noise
Re-parameterized noise
label consistency
Re-parameterized noise
期刊
IF:
9.7
论文数:
4.5K
被引数:
2.4W
机构
引用论文
BadNets: Evaluating Backdooring Attacks on Deep Neural NetworksBadNets: 评估对深度神经网络的后台攻击.png)
IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏Recent Advances in Multi-Drug Resistance (MDR) Efflux Pump Inhibitors of Gram-Positive Bacteria S. aureusAntibiotics
OAAI
AntibioticsIF0
OAAI分享收藏
查看更多内容