.png){kind=icon}
返回
Revisiting ensemble adversarial attack
.png){kind=icon}
PRE
AI
DOI：10.1016/j.image.2022.116747.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Deep neural networks have shown vulnerability to adversarial attacks. Adversarial examples generated with an ensemble of source models can effectively attack unseen target models, posing a security threat to practical applications. In this paper, we investigate the manner of ensemble adversarial attacks from the viewpoint of network gradients with respect to inputs. We observe that most ensemble adversarial attacks simply average gradients of the source models, ignoring their different contributions in the ensemble. To remedy this problem, we propose two novel ensemble strategies, the Magnitude-Agnostic Bagging Ensemble (MABE) strategy and Gradient-Grouped Bagging And Stacking Ensemble (G2BASE) strategy. The former builds on a bagging ensemble and leverages a gradient normalization module to rebalance the ensemble weights. The latter divides diverse models into different groups according to the gradient magnitudes and combines an intragroup bagging ensemble with an intergroup stacking ensemble. Experimental results show that the proposed methods enhance the success rate in white-box attacks and further boost the transferability in black-box attacks.
Keyword:
Adversarial attack
Ensemble strategies
Gradient-based methods
Deep neural networks
Image classification
期刊
S
IF:
2.7
论文数:
2.8K
被引数:
4.2K
机构
引用论文
.png){kind=icon}
分享收藏分享收藏
分享收藏
查看更多内容