.png){kind=icon}
返回
Visually imperceptible adversarial patch attacks
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.102943.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The vulnerability of deep neural networks (DNNs) to adversarial examples has attracted more attention. Many algorithms have been proposed to craft powerful adversarial examples. However, most of these algorithms modified the global or local region of pixels without taking network explanations into account. Hence, the perturbations are redundant, which are easily detected by human eyes. In this paper, we propose a novel method to generate local region perturbations. The main idea is to find a contributing feature region (CFR) of an image by simulating the human attention mechanism and then add perturbations to CFR. Furthermore, a soft mask matrix is designed on the basis of an activation map to finely represent the contributions of each pixel in CFR. With this soft mask, we develop a new loss function with inverse temperature to search for optimal perturbations in CFR. Due to the network explanations, the perturbations added to CFR are more effective than those added to other regions. Extensive experiments conducted on CIFAR-10 and ILSVRC2012 demonstrate the effectiveness of the proposed method, including attack success rate, imperceptibility, and transferability. (c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Deep neural network
Adversarial example
Contributing feature region
Adversarial patch
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
查看更多机构
引用论文
FineFool: A novel DNN object contour attack on image recognition based on the attention perturbation adversarial technique.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey计算机视觉中对抗性攻击对深度学习的威胁: 一项调查IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏分享收藏 没有更多内容