Defense against adversarial attacks on deep convolutional neural networks through nonlocal denoising
Despite substantial advances in network architecture performance, the susceptibility of adversarial attacks makes deep learning challenging to implement in safety-critical applications. This paper proposes a data-centric approach to addressing this problem. A nonlocal denoising method with different luminance values has been used to generate adversarial examples from the Modified National Institute of Standards and Technology database (MNIST) and Canadian Institute for Advanced Research (CIFAR-10) data sets. Under perturbation, the method provided absolute accuracy improvements of up to 9.3% in the MNIST data set and 13% in the CIFAR-10 data set. Training using transformed images with higher luminance values increases the robustness of the classifier. We have shown that transfer learning is disadvantageous for adversarial machine learning. The results indicate that simple adversarial examples can improve resilience and make deep learning easier to apply in various applications.
Code (0)
등록된 구현이 없습니다.
Tasks
Deep LearningDenoisingTransfer LearningSimilar Papers 제목 키워드 기반
An Analysis of Adversarial Attacks and Defenses on Autonomous Driving Models
Nowadays, autonomous driving has attracted much attention from both industry and academia. Convolutional neural network (CNN) is a key component in autonomous driving, which is also increasingly adopted in pervasive comp…
Autonomous DrivingTensorShield: Tensor-based Defense Against Adversarial Attacks on Images
Recent studies have demonstrated that machine learning approaches like deep neural networks (DNNs) are easily fooled by adversarial attacks. Subtle and imperceptible perturbations of the data are able to change the resul…
BIG-bench Machine Learningimage-classificationImage ClassificationTensor DecompositionRobust Tracking against Adversarial Attacks
While deep convolutional neural networks (CNNs) are vulnerable to adversarial attacks, considerably few efforts have been paid to construct robust deep tracking algorithms against adversarial attacks. Current studies on …
Adversarial AttackAutoencoder-based Denoising Defense against Adversarial Attacks on Object Detection
Deep learning-based object detection models play a critical role in real-world applications such as autonomous driving and security surveillance systems, yet they remain vulnerable to adversarial examples. In this work, …
Autonomous DrivingObject DetectionAdversarial Robustness by Design through Analog Computing and Synthetic Gradients
We propose a new defense mechanism against adversarial attacks inspired by an optical co-processor, providing robustness without compromising natural accuracy in both white-box and black-box settings. This hardware co-pr…
Adversarial RobustnessBinarization