.png){kind=icon}
.png){kind=icon}
Return
LIGAA: Generative adversarial attack method based on low-frequency information
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.103057.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
Recent studies have shown that the performance of deep neural network is extremely susceptible to ad-versarial examples. Slightly perturbation of the input that are not perceptible to the model may generate incorrect prediction results. Most existing attack methods with gradient or optimization operation cannot generate adversarial examples immediately, the robustness and imperceptibility of the adversarial exam-ples are also not very good. To address this limitation, we propose a novel generative adversarial attack method with low-frequency information called LIGAA, which can achieve end-to-end real-time generation of adversarial examples. It mainly consists of a low-frequency information extractors and two symmetric decoders including a noise decoder and a saliency map decoder. The low-frequency information extractor eliminates the useless features in the original input. The noise decoder is used to generate perturbation noise for the entire image region that can be misclassified. The saliency map decoder limits the added noise to the specific areas that have a strong impact on classification, which can effectively enhance the imperceptibility of adversarial examples. Experimental results on CIFAR-10, Imagenette and CIFAR-100 of MobileNetv2 illustrate that the proposed LIGAA has obtained an attack success rate of 86.51%, 88.72% and 60.38%, and the time consumption is 0.0 01107s, 0.0 01706s and 0.004125s respectively, which are the best performance in all comparable methods. Particularly, the classification accuracy rate of LIGAA on ResNet-18 doesn't increase even with the JPEG compress defense, but decreases to 3.11%, which also significantly verifies the attack performance and robustness against the defense method.(c) 2022 Elsevier Ltd. All rights reserved.
Keywords:
Generative adversarial attack
Adversarial example
Low-frequency information
Noise decoder
Saliency map decoder
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W