转基因不变性防御向通用化的稳定性向未知的对手攻击
概括
本研究介绍了Meta Invariance Defense (MID),一种攻击不可知的方法,可以增强深度神经网络 (DNN) 对未知对手攻击的稳定性. MID通过meta-learning和多一致性蒸来学习攻击不变的特性,以提高计算机视觉安全性.
科学领域:
- 计算机视觉 计算机视觉
- 机器学习安全 机器学习安全
- 深度神经网络 深度神经网络
背景情况:
- 深度神经网络 (DNN) 在计算机视觉方面表现出色,但容易受到对抗性攻击.
- 现有的防御通常会在未知的或新的对抗性攻击中失败.
- 适应式学习方法不适合于现实世界的对抗防御,因为它的零射击性质.
研究的目的:
- 提出一种攻击不可知的防御方法,以提高DNN对未知对手攻击的稳定性.
- 开发一种防御机制,解决当前对抗性防御策略的局限性.
- 在计算机视觉模型中实现可概括的对抗性稳定性.
主要方法:
- 介绍了Meta Invariance Defense (MID),一种攻击不可知的防御策略.
- 采用元学习原则,与一个学生编码器训练在各种对抗性攻击任务.
- 在良性和敌对样本之间利用跨像素,特征和预测水平的多一致性蒸.
- 从攻击者池中随机抽取对立攻击组合,以模拟未知的攻击场景.
主要成果:
- MID证明了能够有效地学习攻击不变特征的能力.
- 该方法在图像分类中实现了对不可察觉的对抗性干扰的稳定性.
- MID在抑制敌对攻击以实现强大的图像再生方面表现出有效性.
- 在各种攻击下,在包括ImageNet在内的各种基准中验证了可概括的稳定性和优越性.
结论:
- MID提供了一种新且有效的方法来对抗对未知攻击的防御.
- 拟议的方法提高了计算机视觉中的深度神经网络的安全性和可靠性.
- MID为高级分类和低级图像再生任务提供了强大的解决方案.
相关概念视频
Generalization, Discrimination, and Extinction
545
Generalization, discrimination, and extinction are key concepts in operant conditioning that influence how behaviors are learned and maintained.
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
Generalization occurs when a behavior reinforced in one context is performed in similar situations. For instance, a student who studies diligently for calculus and receives excellent grades might apply the same study habits to psychology and history, expecting similar results. Generalization shows how learning in one setting can influence behavior in...
545
Randomized Experiments
6.9K
The randomization process involves assigning study participants randomly to experimental or control groups based on their probability of being equally assigned. Randomization is meant to eliminate selection bias and balance known and unknown confounding factors so that the control group is similar to the treatment group as much as possible. A computer program and a random number generator can be used to assign participants to groups in a way that minimizes bias.
Simple randomization
Simple...
Simple randomization
Simple...
6.9K
Stereotype Content Model
14.7K
The Stereotype Content Model (SCM) was first proposed by Susan Fiske and her colleagues (Fiske, Cuddy, Glick & Xu, 2002; see also Fiske, 2012 and Fiske, 2017). The SCM specifies that when someone encounters a new group, they will stereotype them based on two metrics: warmth—or that group’s perceived intent, and how likely they are to provide help or inflict harm—and competence—or their ability to carry out that objective. Depending on the warmth-competence...
14.7K
Propagation of Uncertainty from Systematic Error
517
The atomic mass of an element varies due to the relative ratio of its isotopes. A sample's relative proportion of oxygen isotopes influences its average atomic mass. For instance, if we were to measure the atomic mass of oxygen from a sample, the mass would be a weighted average of the isotopic masses of oxygen in that sample. Since a single sample is not likely to perfectly reflect the true atomic mass of oxygen for all the molecules of oxygen on Earth, the mass we obtain from this...
517
Types of Errors: Detection and Minimization
1.6K
Error is the deviation of the obtained result from the true, expected value or the estimated central value. Errors are expressed in absolute or relative terms.
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
1.6K
Propagation of Uncertainty from Random Error
681
An experiment often consists of more than a single step. In this case, measurements at each step give rise to uncertainty. Because the measurements occur in successive steps, the uncertainty in one step necessarily contributes to that in the subsequent step. As we perform statistical analysis on these types of experiments, we must learn to account for the propagation of uncertainty from one step to the next. The propagation of uncertainty depends on the type of arithmetic operation performed on...
681


