.png){kind=icon}
返回
Sample-analysis based adversarial attack with saliency map
.png){kind=icon}
PRE
AI
DOI：10.1016/j.asoc.2024.111733.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
With the widespread application of deep learning, the vulnerability of neural networks has attracted considerable attention, raising reliability and security concerns. Therefore, research on the robustness of neural networks has become increasingly critical. In this paper, we propose a novel sample-analysis based robustness evaluation method that overcomes the drawbacks of existing techniques, such as solving difficulty, single strategy, and loose radius. Our algorithm comprises two parts: robustness evaluation and adversarial attacks. Specifically, we introduce formal definitions of multiple sample types and a general solution to the problem of adversarial samples. We formulate a disturbance model-based description of adversarial samples in the adversarial attack algorithm and utilize saliency map to solve them. Our experimental results demonstrate that our adversarial attack algorithm not only achieves a high attack success rate in a relatively small disturbance range but also generates multiple adversarial examples for each clean example. Our algorithm can evaluate the robustness of complex datasets and models, overcome the lack of a single strategy in solving adversarial examples, and provide a more accurate radius of robustness.
Keyword:
Deep learning
Vulnerability
Robustness evaluation
Sample analysis
Adversarial examples
期刊
IF:
6.6
论文数:
1.4W
被引数:
4.8W
机构
引用论文
Deep learning-based fusion networks with high-order attention mechanism for 3D object detection in autonomous driving scenarios基于深度学习的高阶注意力融合网络在自动驾驶场景下的三维目标检测
PREAI
分享收藏Gradient-based learning applied to document recognition基于梯度的学习在文档识别中的应用.png)
PROCEEDINGS OF THE IEEE
PROCEEDINGS OF THE IEEEIF25.9
PREAI
分享收藏
查看更多内容