.png){kind=icon}
Return
Mitigating adversarial attacks uncertainty through interval analysis
.png){kind=icon}
PRE
AI
DOI：10.1007/s11760-025-04865-3.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The adversarial attack is characterized by a high attack success rate and a fast generation of examples. It is widely used in neural network robustness evaluation and adversarial training. Restricted by the randomness of the initialization of the attack point and the iterative finding algorithm can not guarantee that it can reach the global optimal solution, the existing adversarial attack methods have attack uncertainty in a single attack and need to increase the number of attacks in order to improve the attack success rate. This paper defines the label susceptibility to analyze the attack effect. For adversarial data with high label susceptibility, using interval analysis to find the adversarial examples in its neighbourhood can effectively alleviate the attack uncertainty and improve the attack success rate. The experimental results demonstrate that our method achieves comparable or superior attack success rates with fewer attack iterations compared to other approaches requiring more iterations. When applied to smaller datasets and with reduced attack scopes, our method exhibits even higher attack efficiency.
Keywords:
Neural network robustness
Interval analysis
Adversarial attack uncertainty
Adversarial example
Journal
IF:
2.1
Papers:
908
Citations:
4.6K
Organization
Cited Papers
.png){kind=icon}
ShareSave
ShareSaveShareSave
View more