通过功能规范抑制来提高对抗对通用补丁攻击的强度
IEEE transactions on neural networks and learning systems
|November 2, 2023
概括
全球对抗性补丁攻击威胁到计算机视觉系统. 一个新的特征规范抑制 (FNS) 层通过重新规范特征规范,提高稳定性而不会影响正常图像的性能,有效地防御这些攻击.
科学领域:
- 计算机视觉 计算机视觉
- 深度学习 (Deep Learning) 是一种深度学习.
- 网络安全 网络安全
背景情况:
- 全局对抗性补丁攻击对现实世界深层卷积神经网络 (CNN) 构成重大威胁.
- 现有的防御方法在适应性攻击,可扩展性和计算开销方面遇到了困难.
- 这些攻击利用分类器中的大型特征规范和检测器中的通道意识规范 (CA-Norm).
研究的目的:
- 调查CNN中普遍对抗性补丁攻击的潜在机制.
- 提出和评估一种新的防御机制来应对这些攻击.
- 提高计算机视觉系统对抗对手补丁操作的稳定性.
主要方法:
- 在CNN中对对抗性补丁成功因素的数学分析.
- 引入特征规范抑制 (FNS) 层作为防御机制.
- 在各种CNN架构中对FNS层进行自适应插入,以实现多级特征规范抑制.
主要成果:
- FNS层有效地重新规范功能规范,减轻对抗补丁攻击.
- 提议的防御方法在图像分类和物体检测任务中显著提高了对抗性强度.
- 在没有可训练参数和低计算开销的情况下,FNS证明了效率,对良性图像性能的影响最小.
结论:
- FNS层提供了一个简单,高效和有效的防御,以抵御普遍的对抗性补丁攻击.
- 这种方法可以提高实际计算机视觉系统的安全性,而不会影响性能.
- 这些发现为开发强大的CNN来抵御对手操纵提供了有希望的方向.
相关概念视频
Types of Errors: Detection and Minimization
1.6K
Error is the deviation of the obtained result from the true, expected value or the estimated central value. Errors are expressed in absolute or relative terms.
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
1.6K
Mismatch Repair
4.9K
Organisms are capable of detecting and fixing nucleotide mismatches that occur during DNA replication. This sophisticated process requires identifying the new strand and replacing the erroneous bases with correct nucleotides. Mismatch repair is coordinated by many proteins in both prokaryotes and eukaryotes.
The Mutator Protein Family Plays a Key Role in DNA Mismatch Repair
The human genome has more than 3 billion base pairs of DNA per cell. Prior to cell division, that vast amount of genetic...
The Mutator Protein Family Plays a Key Role in DNA Mismatch Repair
The human genome has more than 3 billion base pairs of DNA per cell. Prior to cell division, that vast amount of genetic...
4.9K
Improving Translational Accuracy
2.6K
2.6K
Censoring Survival Data
108
Survival analysis is a statistical method used to analyze time-to-event data, often employed in fields such as medicine, engineering, and social sciences. One of the key challenges in survival analysis is dealing with incomplete data, a phenomenon known as "censoring." Censoring occurs when the event of interest (such as death, relapse, or system failure) has not occurred for some individuals by the end of the study period or is otherwise unobservable, and it might have many different...
108
Propagation of Uncertainty from Random Error
703
An experiment often consists of more than a single step. In this case, measurements at each step give rise to uncertainty. Because the measurements occur in successive steps, the uncertainty in one step necessarily contributes to that in the subsequent step. As we perform statistical analysis on these types of experiments, we must learn to account for the propagation of uncertainty from one step to the next. The propagation of uncertainty depends on the type of arithmetic operation performed on...
703
Long-patch Base Excision Repair
7.0K
Since the discovery of the two BER pathways, there has been a debate about how a cell chooses one pathway over the other and the factors determining this selection. Numerous in vitro experiments have pointed out multiple determinants for the sub-pathway selection. These are:
7.0K


