Backdoor Attack on Hash-based Image Retrieval via Clean-label Data Poisoning
A backdoored deep hashing model is expected to behave normally on original query images and return the images with the target label when a specific trigger pattern presents. To this end, we propose the confusing perturbations-induced backdoor attack (CIBA). It injects a small number of poisoned images with the correct label into the training data, which makes the attack hard to be detected. To craft the poisoned images, we first propose the confusing perturbations to disturb the hashing code learning. As such, the hashing model can learn more about the trigger. The confusing perturbations are imperceptible and generated by optimizing the intra-class dispersion and inter-class shift in the Hamming space. We then employ the targeted adversarial patch as the backdoor trigger to improve the attack performance. We have conducted extensive experiments to verify the effectiveness of our proposed CIBA. Our code is available at https://github.com/KuofengGao/CIBA.
Code (1)
Tasks
Backdoor AttackData PoisoningDeep HashingImage RetrievalRetrievalSimilar Papers 제목 키워드 기반
BadHash: Invisible Backdoor Attacks against Deep Hashing with Clean Label
Due to its powerful feature learning capability and high efficiency, deep hashing has achieved great success in large-scale image retrieval. Meanwhile, extensive works have demonstrated that deep neural networks (DNNs) a…
Adversarial AttackBackdoor AttackContrastive LearningDeep Hashing+5Clean Image May be Dangerous: Data Poisoning Attacks Against Deep Hashing
Large-scale image retrieval using deep hashing has become increasingly popular due to the exponential growth of image data and the remarkable feature extraction capabilities of deep neural networks (DNNs). However, deep …
Data PoisoningDeep HashingImage RetrievalRetrievalDarkHash: A Data-Free Backdoor Attack Against Deep Hashing
Benefiting from its superior feature learning capabilities and efficiency, deep hashing has achieved remarkable success in large-scale image retrieval. Recent studies have demonstrated the vulnerability of deep hashing m…
Image RetrievalEnhancing Clean Label Backdoor Attack with Two-phase Specific Triggers
Backdoor attacks threaten Deep Neural Networks (DNNs). Towards stealthiness, researchers propose clean-label backdoor attacks, which require the adversaries not to alter the labels of the poisoned training datasets. Clea…
Backdoor Attackbackdoor defenseVocal Bursts Valence PredictionClean-Label Backdoor Attacks on Video Recognition Models
Deep neural networks (DNNs) are vulnerable to backdoor attacks which can hide backdoor triggers in DNNs by poisoning training data. A backdoored model behaves normally on clean test images, yet consistently predicts a pa…
Backdoor Attackbackdoor defenseimage-classificationImage Classification+1