通过翻转有限位的多功能重量攻击
概括
我们在部署期间为深度神经网络引入了一种新的位翻转权重攻击. 这种方法有效地针对特定样本或触发样本,以隐蔽的重量修改.
科学领域:
- 计算机科学 计算机科学
- 人工智能的人工智能
- 机器学习安全 机器学习安全
背景情况:
- 深度神经网络容易受到各种攻击,如后门和对抗性攻击.
- 现有的攻击主要针对训练或推断阶段.
- 在模型部署阶段理解和减轻攻击方面存在差距.
研究的目的:
- 引入和正式化一种新的基于比特翻转的重量攻击范式.
- 为不同的攻击目标 (有效性,隐形性,位翻转约束) 开发灵活的配方.
- 为了展示特定的攻击策略:单个样本攻击 (SSA) 和触发样本攻击 (TSA).
主要方法:
- 提出了一种对比特翻转重量攻击的一般配方,其目标是有效性和隐蔽性.
- 开发了SSA作为一个二进制优化问题.
- 开发了TSA作为一个混合整数编程 (MIP) 问题,具有可学习触发器.
- 通过使用先进的整数编程技术,将MIP问题改编为持续优化.
- 应用了乘数的交替方向方法 (ADMM) 进行高效的解决方案近似.
主要成果:
- 通过广泛的实验证明了拟议的比特翻转权重攻击方法的有效性.
- 展示了开发的攻击策略在现有范式上的优越性.
- 验证了基于ADMM的解决方案方法的灵活性和效率.
结论:
- 基于位翻转的权重攻击在模型部署期间是一个可行的和强大的威胁.
- 拟议的灵活配方和基于ADMM的优化有效地解决了SSA和TSA.
- 这项研究强调了加强安全措施的必要性,以防止对深度神经网络的部署阶段攻击.
相关概念视频
Apparent Weight
8.3K
True weight is the measure of the gravitational force acting on an object. However, if the object accelerates, its measured weight is different from its true weight. Similar observations can be made when the object is submerged in water. An object's weight in water is its apparent weight, which is equal to the difference between its true weight and the buoyant forces.
Consider a person standing on a bathroom scale inside an elevator. If the scale is accurate at rest, its reading equals the...
Consider a person standing on a bathroom scale inside an elevator. If the scale is accurate at rest, its reading equals the...
8.3K
Eccentric Loading
433
Eccentric loading is a crucial concept in the study of structural engineering and mechanics, particularly when analyzing the stability and stress distribution in columns. Unlike centric loading, where the force is applied along the centroidal axis, causing uniform compression, eccentric loading occurs when a force is applied off-center. This off-center application introduces not only direct compressive stress but also bending stress, significantly influencing the column's behavior under...
433
Flail Chest-II
210
Managing flail chest, a condition characterized by a segment of the chest wall moving independently from the rest of the thoracic cage, requires a comprehensive approach. It includes a thorough assessment of the patient's condition, a diagnostic evaluation to determine the extent of the injury, and the implementation of appropriate medical interventions tailored to the individual's needs.
Assessment:
1. Clinical Evaluation:
History:
Assessment:
1. Clinical Evaluation:
History:
210
Wedges
1.2K
A wedge is a simple machine that serves various purposes, such as adjusting the elevation of structural or mechanical parts, providing stability for heavy objects, and splitting a body into two parts. This versatile tool can amplify an applied force, making it easier to manipulate large or heavy objects.
Consider using a wedge to lift a heavy slab. Here, the wedge functions by converting the applied force into a much larger force directed almost perpendicular to the initial force. This...
Consider using a wedge to lift a heavy slab. Here, the wedge functions by converting the applied force into a much larger force directed almost perpendicular to the initial force. This...
1.2K
Accelerators
95
Accelerators in concrete serve as admixtures to speed up the hardening process, enabling the concrete to achieve early strength faster. Although accelerators do not necessarily impact the time it takes concrete to set, they reduce this time in practice. A common accelerator is calcium chloride, which is particularly useful for hastening early strength development in cold weather or for rapid repair jobs that require quick heat generation after mixing.
The effectiveness of calcium chloride can...
The effectiveness of calcium chloride can...
95
Power Expended by a Constant Force
7.6K
The relationship between work done and the time taken to do it can be explained using the concept of power. For example, several sprinters in a race may have the same velocity when they reach the finish line, therefore doing the same amount of work, but the winner does it in the least amount of time. Thus, power is defined as the rate of doing work. Since work can vary as a function of time, the average power is defined as the work done during a time interval, divided by the time interval.
7.6K


