paper-with-me

Papers

Explainable Adversarial Attacks on Coarse-to-Fine Classifiers

2025-01-19 · Akram Heidarizadeh, Connor Hatfield, Lorenzo Lazzarotto, HanQin Cai, George Atia

Traditional adversarial attacks typically aim to alter the predicted labels of input images by generating perturbations that are imperceptible to the human eye. However, these approaches often lack explainability. Moreover, most existing work on adversarial attacks focuses on single-stage classifiers, but multi-stage classifiers are largely unexplored. In this paper, we introduce instance-based adversarial attacks for multi-stage classifiers, leveraging Layer-wise Relevance Propagation (LRP), which assigns relevance scores to pixels based on their influence on classification outcomes. Our approach generates explainable adversarial perturbations by utilizing LRP to identify and target key features critical for both coarse and fine-grained classifications. Unlike conventional attacks, our method not only induces misclassification but also enhances the interpretability of the model's behavior across classification stages, as demonstrated by experimental results.

📄 PDF Abstract BibTeX arXiv:2501.10906

Code (0)

등록된 구현이 없습니다.

Similar Papers 제목 키워드 기반

Explainable and Trustworthy Traffic Sign Detection for Safe Autonomous Driving: An Inductive Logic Programming Approach

2023-08-30 · Zahra Chaghazardi, Saber Fallah, Alireza Tamaddoni-Nezhad

Traffic sign detection is a critical task in the operation of Autonomous Vehicles (AV), as it ensures the safety of all road users. Current DNN-based sign classification systems rely on pixel-level features to detect tra…

Autonomous DrivingAutonomous VehiclesInductive logic programmingTraffic Sign Detection

Pre-trained Multiple Latent Variable Generative Models are good defenders against Adversarial Attacks

2024-12-04 · Dario Serez, Marco Cristani, Alessio Del Bue, Vittorio Murino 외

Attackers can deliberately perturb classifiers' input with subtle noise, altering final predictions. Among proposed countermeasures, adversarial purification employs generative networks to preprocess input images, filter…

Adversarial Purification

On the exploitative behavior of adversarial training against adversarial attacks

2021-09-29 · Ali Rahmati, Seyed-Mohsen Moosavi-Dezfooli, Huaiyu Dai

Adversarial attacks have been developed as intentionally designed perturbations added to the inputs in order to fool deep neural network classifiers. Adversarial training has been shown to be an effective approach to imp…

Adversarial Doodles: Interpretable and Human-drawable Attacks Provide Describable Insights

2023-11-27 · Ryoya Nara, Yusuke Matsui

DNN-based image classifiers are susceptible to adversarial attacks. Most previous adversarial attacks do not have clear patterns, making it difficult to interpret attacks' results and gain insights into classifiers' mech…

Image Classification

Aliasing is a Driver of Adversarial Attacks

2022-12-22 · Adrián Rodríguez-Muñoz, Antonio Torralba

Aliasing is a highly important concept in signal processing, as careful consideration of resolution changes is essential in ensuring transmission and processing quality of audio, image, and video. Despite this, up until …