强大的和可转移的后门攻击对深度图像压缩具有选择性的频率先前的攻击
概括
这项研究引入了一种基于频率的新型后门攻击,针对深度学习图像压缩模型. 该攻击在DCT域内注入多个触发器,损害了压缩质量和下游任务.
科学领域:
- 计算机视觉 计算机视觉
- 机器学习安全 机器学习安全
- 图像压缩 图像压缩
背景情况:
- 深度学习模型擅长图像压缩,但容易受到后门攻击.
- 后门攻击使用触发模式来操纵模型行为.
研究的目的:
- 提出一种新的多触发器后门攻击,以对抗已知的图像压缩模型.
- 为了证明攻击在降低压缩质量和影响下游任务方面的有效性.
- 为了增强攻击的稳定性和可转移性.
主要方法:
- 开发了一种基于频率的触发器注入模型,使用离散等号变换 (DCT) 域.
- 设计了动态损失功能,以实现高效的训练和优化攻击目标.
- 实施了两阶段的训练计划,并进行了强大的频率选择,以提高抵抗力.
- 整合了分类边界的转移,以改善跨模型和跨域的可转移性.
主要成果:
- 成功地将多个后门与相应的触发器注入到单个图像压缩模型中.
- 对压缩质量 (比特率,重建质量) 的攻击有效性得到证明.
- 展示了攻击对下游计算机视觉任务的影响,例如面部识别和语义细分.
- 对防御性预处理方法的验证攻击阻力.
结论:
- 提出的基于频率的后门攻击对学习的图像压缩模型有效.
- 这种攻击可以损害压缩性能和下游任务准确性.
- 该方法显示出稳定性和可转移性,构成重大安全威胁.
相关概念视频
Difference from Background: Limit of Detection
5.4K
The limit of detection (LOD) is the smallest amount of analyte that can be distinguished from the background noise. The LOD value corresponds to the concentration at which the analyte signal is three times larger than the standard deviation of the blank signal. Below this value, the analyte signal cannot be differentiated from the background noise. It is calculated by dividing the calibration slope by 3 times the standard deviation of the blank signals.
The LOD indicates the presence or absence...
The LOD indicates the presence or absence...
5.4K
Upsampling
188
Managing signal sampling rates is essential in digital signal processing to maintain signal integrity. A decimated signal, characterized by a reduced frequency range due to its lower sampling rate, can be upsampled by inserting zeros between each sample. This upsampling process expands the original spectrum and introduces repeated spectral replicas at intervals dictated by the new Nyquist frequency. To refine this zero-inserted sequence, it is passed through a lowpass filter with a cutoff...
188
Downsampling
121
When considering a sampled sequence with zero values between sampling instants, one can replace it by taking every N-th value of the sequence. At these integer multiples of N, the original and sampled sequences coincide. This process, known as decimation, involves extracting every N-th sample from a sequence, thereby creating a more efficient sequence.
The Fourier transform of the decimated sequence reveals a combination of scaled and shifted versions of the original spectrum. This...
The Fourier transform of the decimated sequence reveals a combination of scaled and shifted versions of the original spectrum. This...
121
Aliasing
107
Accurate signal sampling and reconstruction are crucial in various signal-processing applications. A time-domain signal's spectrum can be revealed using its Fourier transform. When this signal is sampled at a specific frequency, it results in multiple scaled replicas of the original spectrum in the frequency domain. The spacing of these replicas is determined by the sampling frequency.
If the sampling frequency is below the Nyquist rate, these replicas overlap, preventing the original...
If the sampling frequency is below the Nyquist rate, these replicas overlap, preventing the original...
107
Discrete Fourier Transform
205
The Discrete Fourier Transform (DFT) is a fundamental tool in signal processing, extending the discrete-time Fourier transform by evaluating discrete signals at uniformly spaced frequency intervals. This transformation converts a finite sequence of time-domain samples into frequency components, each representing complex sinusoids ordered by frequency. The DFT translates these sequences into the frequency domain, effectively indicating the magnitude and phase of each frequency component present...
205
Extraction: Advanced Methods
398
Metal ions can be separated from one another by complexation with organic ligands–the chelating agent– to form uncharged chelates. Here, the chelating agent must contain hydrophobic groups and behave as a weak acid, losing a proton to bind with the metal. Since most organic ligands used in this process are insoluble or undergo oxidation in the aqueous phase, the chelating agent is initially added to the organic phase and extracted into the aqueous phase. The metal-ligand complex is...
398


