走向对抗后门和对抗性攻击的统一稳固性
概括
这项研究揭示了深度神经网络 (DNN) 中的后门和对抗性攻击之间的联系. 一个新的进步统一防御 (PUD) 算法通过净化模型同时解决这两种问题,优于现有的防御.
科学领域:
- 人工智能的人工智能
- 机器学习安全 机器学习安全
- 深度神经网络 深度神经网络
背景情况:
- 深度神经网络 (DNN) 容易受到后门和对抗性攻击.
- 这些攻击通常被视为单独的问题,因为它们的时机不同 (训练与推理).
- 现有的防御系统经常独立解决这些漏洞,从而导致保护不足于最佳.
研究的目的:
- 调查DNN中后门和对抗性攻击之间的关系.
- 提出一个统一的防御战略,同时解决两种攻击类型.
- 开发一种利用这些攻击之间的连接来提高模型稳定性的方法.
主要方法:
- 这项研究建立了一个联系:后门植入改变了对立的例子,这些例子类似于受感染模型中的触发图像.
- 引入了一种新的进步统一防御 (PUD) 算法.
- PUD采用渐进式模型净化方案,使用对抗性示例去除后门,然后增强对抗性强度.
主要成果:
- 后门和对抗性攻击之间的联系被证明在各种后门攻击类型中无处不在.
- 该PUD算法有效地识别有毒图像,允许不完美的初始数据集.
- PUD显著超过了最先进的后门防御,并与先进的对抗防御方法竞争.
结论:
- 在DNN中,后门和对抗性攻击之间存在着重要的,以前未被识别的联系.
- 进步统一防御 (PUD) 提供了一种统一且有效的解决方案,可以同时防御两种攻击类型.
- PUD在保护DNN免受复杂威胁方面取得了重大进展.
相关概念视频
Masking and Demasking Agents
2.4K
EDTA titrations may necessitate masking and demasking agents to temporarily protect a particular metal ion in a mixture from the EDTA reaction. These agents facilitate the sequential analysis of the metal ions by forming stable complexes with some—but not all—metal ions during certain steps.
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
There are many masking agents, such as cyanide, fluoride, triethanolamine, thiourea, and 2,3-bis(sulfanyl)propan-1-ol (formerly 2,3-dimercapto-1-propanol), with the masking agent chosen based on...
2.4K
Propagation of Uncertainty from Systematic Error
517
The atomic mass of an element varies due to the relative ratio of its isotopes. A sample's relative proportion of oxygen isotopes influences its average atomic mass. For instance, if we were to measure the atomic mass of oxygen from a sample, the mass would be a weighted average of the isotopic masses of oxygen in that sample. Since a single sample is not likely to perfectly reflect the true atomic mass of oxygen for all the molecules of oxygen on Earth, the mass we obtain from this...
517
Propagation of Uncertainty from Random Error
681
An experiment often consists of more than a single step. In this case, measurements at each step give rise to uncertainty. Because the measurements occur in successive steps, the uncertainty in one step necessarily contributes to that in the subsequent step. As we perform statistical analysis on these types of experiments, we must learn to account for the propagation of uncertainty from one step to the next. The propagation of uncertainty depends on the type of arithmetic operation performed on...
681
Distribution Reliability and Automation
107
Distribution reliability in electrical power systems is critical for ensuring an uninterrupted power supply to consumers at minimal cost. According to IEEE Standard Terms, reliability is the probability that a device will function without failure over a specified time period or amount of usage. For electric power distribution, this translates to maintaining continuous power supply and addressing customer concerns over power outages. Several indices, as defined by IEEE Standard 1366-2012, are...
107
Types of Errors: Detection and Minimization
1.6K
Error is the deviation of the obtained result from the true, expected value or the estimated central value. Errors are expressed in absolute or relative terms.
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...
1.6K
Multi-input and Multi-variable systems
106
Cruise control systems in cars are designed as multi-input systems to maintain a driver's desired speed while compensating for external disturbances such as changes in terrain. The block diagram for a cruise control system typically includes two main inputs: the desired speed set by the driver and any external disturbances, such as the incline of the road. By adjusting the engine throttle, the system maintains the vehicle's speed as close to the desired value as possible.
In the absence...
In the absence...
106


