arrow
返回

Minimally Distorted Structured Adversarial Attacks

delete2022-10-10
delete3
PRE
AI
E
Ehsan Kazemi *
T
Thomas Kerdreux
L
Liqiang Wang
DOI:10.1007/s11263-022-01701-wdelete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
White box adversarial perturbations are generated via iterative optimization algorithms most often by minimizing an adversarial loss on a l(p) neighborhood of the original image, the so-called distortion set. Constraining the adversarial search with different norms results in disparately structured adversarial examples. Here we explore several distortion sets with structure-enhancing algorithms. These new structures for adversarial examples might provide challenges for provable and empirical robust mechanisms. Because adversarial robustness is still an empirical field, defense mechanisms should also reasonably be evaluated against differently structured attacks. Besides, these structured adversarial perturbations may allow for larger distortions size than their l(p) counterpart while remaining imperceptible or perceptible as natural distortions of the image. We will demonstrate in this work that the proposed structured adversarial examples can significantly bring down the classification accuracy of adversarially trained classifiers while showing a low l(2) distortion rate. For instance, on ImagNet dataset the structured attacks drop the accuracy of the adversarial model to near zero with only 50% of l(2) distortion generated using white-box attacks like PGD. As a byproduct, our findings on structured adversarial examples can be used for adversarial regularization of models to make models more robust or improve their generalization performance on datasets that are structurally different.
Keyword:
Adversarial attacks
Blurriness
Group norm
Image classification

期刊

International Journal of Computer Vision 封面图
International Journal of Computer Vision
IF:
9.3
论文数:
3.9K
被引数:
2.8W

机构

State University System of Florida 封面图
State University System of Florida
学者数:
12.8W
论文数: 10.9W
被引数: 130
U
University of Central Florida
学者数:
8.7K
论文数: 6.8K
被引数: 1.4W
引用论文

引用论文

err分享
err收藏
The Yellow Excitonic Series of Cu2O Revisited by Lyman Spectroscopy
err2005-05-15
err0
errOAAI
errTakeshi Tayagaki; Andre Mysyrowicz; Makoto Kuwata-Gonokami
err分享
err收藏
Analysis of the TIMP‐1/FIB‐CL Complexa
err2006-12-17
err0
PREAI
errM. KIRBY BODDEN; L. JACK WINDSOR; NANCY C. M. CATERINA; AUDRA YERMOVSKY; BENTE BIRKEDAL‐HANSEN; GRAZYNA GALAZKA; JEFFREY A. ENGLER; HENNING BIRKEDAL‐HANSEN
err分享
err收藏
Mycoplasmas of Goats and Sheep
err1992-01-01
err0
errOAAI
errAl J. DaMassa; Patricia S. Wakenell; Dale L. Brooks
err分享
err收藏
Perceptual quality-preserving black-box attack against deep learning image classifiers
err2021-07-01
err20
errOAAI
errGragnaniello, Diego; Marra, Francesco; Verdoliva, Luisa; Poggi, Giovanni
err分享
err收藏
err分享
err收藏
学者 查看更多内容