.png){kind=icon}
返回
Learning relationship-preserving representation for multi-task adversarial attacks
.png){kind=icon}
PRE
AI
DOI：10.1016/j.neucom.2023.126580.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Deep neural networks (DNNs) are susceptible to adversarial samples that are carefully crafted to mislead the DNNs with imperceptible perturbations. To test the robustness of DNNs, attack methods based on adversarial samples have gained popularity due to their practicality and effectiveness in achieving encouraging attack results. However, most of these methods do not consider the more realistic multi-task attacks. The main challenge of multi-task attacks is that different tasks have different objective functions, making it difficult to find an optimal optimization goal to generate adversarial samples. To address this issue, we propose a new multi-task adversarial attack paradigm called Multi-Task Adversarial Attacks (MTAA) that uses a relationship preserving representation to learn adversarial patterns. Unlike previous methods, our attack method does not rely on a task-specific loss function or an attack agent model. Instead, we design a relationship-preserving module that projects samples into a low-dimensional embedding space while preserving their intrinsic geometric structure for adversarial pattern reasoning. This module effectively removes redundant information from high-dimensional features, providing an effective latent space for adversarial pattern reasoning. To learn adversarial representation in the latent space, we introduce a novel adversarial mechanism. Our attack method can deceive different networks on multiple tasks since it is independent of task-specific loss functions and the attack agent. Extensive experimental results show that our attack approach outperforms state-of-theart universal and transferable attack strategies on multi-task attacks. The codes for MTAA are available at https://github.com/antachen/MTAA.
Keyword:
Multi-task attack
Adversarial sample
Relationship-preserving representation
期刊
IF:
6.5
论文数:
2.5W
被引数:
6.5W
机构
引用论文
Diminishing-feature attack: The adversarial infiltration on visual tracking递减特征攻击: 视觉跟踪的对抗性渗透.png)
NEUROCOMPUTING
NEUROCOMPUTINGIF6.5
PREAI
分享收藏A novel and synthetically facile coumarin-thiophene-derived Schiff base for selective fluorescent detection of cyanide anions in aqueous solution: Synthesis, anion interactions, theoretical study and DNA-binding propertiesTetrahedron
TetrahedronIF0
PREAI
分享收藏
Electrochemically assisted micro localized grafting of aptamers in a microchannel engraved in fluorinated thermoplastic polymer Dyneon THVRSC Advances
RSC AdvancesIF0
PREAI
分享收藏Comparative study of layer by layer assembled multilayer films based on graphene oxide and reduced graphene oxide on flexible polyurethane foam: flame retardant and smoke suppression propertiesRSC Advances
RSC AdvancesIF0
PREAI
分享收藏
查看更多内容