arrow
Return

Backpack: A Backpropagable Adversarial Embedding Scheme

delete2022-01-01
delete8
delete
OA
AI
S
Solène Bernard
P
Patrick Bas *
J
John Klein
T
Tomáš Pevný
DOI:10.1109/TIFS.2022.3204218delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
A minmax protocol offers a general method to automatically optimize steganographic algorithm against a wide class of steganalytic detectors. The quality of the resulting steganograhic algorithm depends on the ability to find an adversarial stego image undetectable by a set of detectors while communicating a given message. Despite minmax protocol instantiated with ADV-EMB scheme leading to unexpectedly good results, we show it suffers a significant flaw and we present a theoretically sound solution called Backpack. Extensive experimental verification of minmax protocol with Backpack shows superior performance to ADV-EMB, the generality of the tool by targeting a new JPEG QF100 compatibility attack and further improves the security of steganographic algorithms.
Keywords:
Protocols
Detectors
Games
Costs
Steganography
Security
Distortion
Steganography
steganalysis
distortion function
adversarial attacks

Journal

IEEE Transactions on Information Forensics and Security cover
IEEE Transactions on Information Forensics and Security
IF:
8
Papers:
5.2K
Citations:
2.3W

Organization

C
centre national de la recherche scientifique (cnrs)
Scholars:
24.5W
Papers: 18.2W
Citations: 279
U
universite de lille
Scholars:
2.7W
Papers: 2.0W
Citations: 15