WPDA:基于频率的后门攻击,使用波形数据包分解
Zhengyao Song1, Yongqiang Li1, Danni Yuan2
1School of Instrument Science and Engineering, Harbin Institute of Technology, Harbin, 150000, Heilongjiang, China.
概括
这项研究引入了一种基于频率的新型后门攻击,用于深度神经网络 (DNN). 该方法在最小的中毒训练数据下实现了高攻击成功率,避免了先进的防御.
科学领域:
- 人工智能的人工智能
- 网络安全 网络安全
- 机器学习 机器学习
背景情况:
- 深度神经网络 (DNN) 面临着诸如后门攻击等新出现的安全威胁.
- 现有的攻击需要高的中毒比率,使其可检测.
- 低比例的后门攻击具有挑战性,但对于隐身而言至关重要.
研究的目的:
- 开发一种有效的后门攻击方法,在极低的毒性比率下运行.
- 为了增强后门攻击对防御的隐形性和抵抗力.
- 调查频域分析用于后门注射的潜力.
主要方法:
- 提出了一个基于频率的后门攻击,使用波段包分解 (WPD).
- WPD将图像细细分解成子谱图,以确定用于触发器插入的关键频率区域.
- 触发器有效地嵌入这些关键区域,形成后门.
主要成果:
- 在CIFAR-10上取得了98.12%的攻击成功率,中毒率为0.004% (在50,000个样本中2个).
- 这次袭击表现出了卓越的有效性,隐形性和抵抗力.
- 成功绕过了几个先进的后门防御.
结论:
- 提出的基于频率的后门攻击非常有效,即使在极低的中毒率下也是如此.
- 波段包分解为DNN隐蔽后门注入提供了一个有前途的方法.
- 这种方法在了解和应对后门漏洞方面取得了重大进展.
相关概念视频
Bandpass Sampling
475
In signal processing, bandpass sampling is an effective technique for sampling signals that have most of their energy concentrated within a narrow frequency band. This type of signal is known as a bandpass signal. The key principle of bandpass sampling involves sampling the signal at a rate that is greater than twice the signal's bandwidth to prevent aliasing.
A bandpass signal has a spectrum with a lower frequency limit, denoted as ω1, and an upper frequency limit, denoted as ω2....
A bandpass signal has a spectrum with a lower frequency limit, denoted as ω1, and an upper frequency limit, denoted as ω2....
475
Discrete Fourier Transform
853
The Discrete Fourier Transform (DFT) is a fundamental tool in signal processing, extending the discrete-time Fourier transform by evaluating discrete signals at uniformly spaced frequency intervals. This transformation converts a finite sequence of time-domain samples into frequency components, each representing complex sinusoids ordered by frequency. The DFT translates these sequences into the frequency domain, effectively indicating the magnitude and phase of each frequency component present...
853
Aliasing
567
Accurate signal sampling and reconstruction are crucial in various signal-processing applications. A time-domain signal's spectrum can be revealed using its Fourier transform. When this signal is sampled at a specific frequency, it results in multiple scaled replicas of the original spectrum in the frequency domain. The spacing of these replicas is determined by the sampling frequency.
If the sampling frequency is below the Nyquist rate, these replicas overlap, preventing the original...
If the sampling frequency is below the Nyquist rate, these replicas overlap, preventing the original...
567
Properties of Fourier Transform I
610
The application of Fourier Transform properties in radio broadcasting is multifaceted, enabling significant advancements in the way signals are transmitted and received. Key areas where these properties are utilized include simultaneous multi-channel transmission, audio clip speed adjustments, live broadcast delays for different time zones, audio frequency adjustments, and signal demodulation.
In radio broadcasting, multiple audio signals often need to be transmitted simultaneously. The Fourier...
In radio broadcasting, multiple audio signals often need to be transmitted simultaneously. The Fourier...
610
Discrete-Time Fourier Series
663
The Discrete-Time Fourier Series (DTFS) is a fundamental concept in signal processing, serving as the discrete-time counterpart to the continuous-time Fourier series. It allows for the representation and analysis of discrete-time periodic signals in terms of their frequency components. Unlike its continuous counterpart, which utilizes integrals, the calculation of DTFS expansion coefficients involves summations due to the discrete nature of the signal.
For a discrete-time periodic signal x[n]...
For a discrete-time periodic signal x[n]...
663
Upsampling
588
Managing signal sampling rates is essential in digital signal processing to maintain signal integrity. A decimated signal, characterized by a reduced frequency range due to its lower sampling rate, can be upsampled by inserting zeros between each sample. This upsampling process expands the original spectrum and introduces repeated spectral replicas at intervals dictated by the new Nyquist frequency. To refine this zero-inserted sequence, it is passed through a lowpass filter with a cutoff...
588


