ACE: Artificial Checkerboard Enhancer to Induce and Evade Adversarial Attacks
The checkerboard phenomenon is one of the well-known visual artifacts in the computer vision field. The origins and solutions of checkerboard artifacts in the pixel space have been studied for a long time, but their effects on the gradient space have rarely been investigated. In this paper, we revisit the checkerboard artifacts in the gradient space which turn out to be the weak point of a network architecture. We explore image-agnostic property of gradient checkerboard artifacts and propose a simple yet effective defense method by utilizing the artifacts. We introduce our defense module, dubbed Artificial Checkerboard Enhancer (ACE), which induces adversarial attacks on designated pixels. This enables the model to deflect attacks by shifting only a single pixel in the image with a remarkable defense rate. We provide extensive experiments to support the effectiveness of our work for various attack scenarios using state-of-the-art attack methods. Furthermore, we show that ACE is even applicable to large-scale datasets including ImageNet dataset and can be easily transferred to various pretrained networks.
Code (0)
등록된 구현이 없습니다.
Similar Papers 제목 키워드 기반
CycleGAN without checkerboard artifacts for counter-forensics of fake-image detection
In this paper, we propose a novel CycleGAN without checkerboard artifacts for counter-forensics of fake-image detection. Recent rapid advances in image manipulation tools and deep image synthesis techniques, such as Gene…
Fake Image DetectionImage GenerationImage ManipulationIdentifying Predictions That Influence the Future: Detecting Performative Concept Drift in Data Streams
Concept Drift has been extensively studied within the context of Stream Learning. However, it is often assumed that the deployed model's predictions play no role in the concept drift the system experiences. Closer inspec…
Drift DetectionEnhancing Adversarial Robustness of IoT Intrusion Detection via SHAP-Based Attribution Fingerprinting
The rapid proliferation of Internet of Things (IoT) devices has transformed numerous industries by enabling seamless connectivity and data-driven automation. However, this expansion has also exposed IoT networks to incre…
Adversarial RobustnessIntrusion DetectionFixed smooth convolutional layer for avoiding checkerboard artifacts in CNNs
In this paper, we propose a fixed convolutional layer with an order of smoothness not only for avoiding checkerboard artifacts in convolutional neural networks (CNNs) but also for enhancing the performance of CNNs, where…
General Classificationimage-classificationImage ClassificationImage GenerationOn the Robustness of Malware Detectors to Adversarial Samples
Adversarial examples add imperceptible alterations to inputs with the objective to induce misclassification in machine learning models. They have been demonstrated to pose significant challenges in domains like image cla…
image-classificationImage ClassificationMalware Analysis