.png){kind=icon}
.png){kind=icon}
Return
Evolving Architectures With Gradient Misalignment Toward Low Adversarial Transferability
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2021.3134840.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Deep neural network image classifiers are known to be susceptible, not only to adversarial examples created for them, but also to those created for others. This phenomenon poses a potential security risk in various black-box systems that rely on image classifiers. One of the observations on networks that have transferability of adversarial examples between them is the similarity of their architectures. Networks with high architectural similarity tend to share high transferability as well. Thus, in this study, we address this problem from a novel perspective by investigating the contribution of network architecture to transferability. Specifically, we propose an architecture searching framework that employs neuroevolution to evolve network architectures and gradient misalignment loss to encourage networks to converge into dissimilar functions after training. Our findings indicate that the proposed framework successfully discovers architectures that reduce transferability from four standard networks, including ResNet and VGG, while maintaining good accuracy on unperturbed images. In addition, the evolved networks trained with gradient misalignment exhibit significantly lower transferability than a standard network trained with gradient misalignment, which indicates that network architecture plays an important role in reducing transferability. We demonstrate that designing or exploring proper network architectures is a promising approach to tackle the transferability issue and train adversarially robust image classifiers.
Keywords:
Training
Network architecture
Computer architecture
Perturbation methods
Standards
Task analysis
Robustness
Neuroevolution
adversarial examples
transferability
gradient misalignment
Journal
IF:
3.6
Papers:
9.8W
Citations:
29.4W
View more organizations