paper-with-me

Papers

Natias: Neuron Attribution based Transferable Image Adversarial Steganography

2024-09-08 · Zexin Fan, Kejiang Chen, Kai Zeng, Jiansong Zhang, Weiming Zhang, Nenghai Yu

Image steganography is a technique to conceal secret messages within digital images. Steganalysis, on the contrary, aims to detect the presence of secret messages within images. Recently, deep-learning-based steganalysis methods have achieved excellent detection performance. As a countermeasure, adversarial steganography has garnered considerable attention due to its ability to effectively deceive deep-learning-based steganalysis. However, steganalysts often employ unknown steganalytic models for detection. Therefore, the ability of adversarial steganography to deceive non-target steganalytic models, known as transferability, becomes especially important. Nevertheless, existing adversarial steganographic methods do not consider how to enhance transferability. To address this issue, we propose a novel adversarial steganographic scheme named Natias. Specifically, we first attribute the output of a steganalytic model to each neuron in the target middle layer to identify critical features. Next, we corrupt these critical features that may be adopted by diverse steganalytic models. Consequently, it can promote the transferability of adversarial steganography. Our proposed method can be seamlessly integrated with existing adversarial steganography frameworks. Thorough experimental analyses affirm that our proposed technique possesses improved transferability when contrasted with former approaches, and it attains heightened security in retraining scenarios.

📄 PDF Abstract BibTeX arXiv:2409.04968

Code (1)

van-zx/natias 공식 구현 pytorch

Tasks

AttributeImage SteganographySteganalysis

Methods 이 논문이 사용한 방법론

Softmax The Softmax output function transforms a previous layer's output into a vector of probabilities. It is commonly used for multiclass classification. Given an input vector $x$…
Attention 설명 없음

Similar Papers 제목 키워드 기반

Improving Adversarial Transferability via Neuron Attribution-Based Attacks

2022-03-31 · CVPR 2022 1 · Jianping Zhang, Weibin Wu, Jen-tse Huang, Yizhan Huang 외

Deep neural networks (DNNs) are known to be vulnerable to adversarial examples. It is thus imperative to devise effective attack algorithms to identify the deficiencies of DNNs beforehand in security-sensitive applicatio…

Attribute

DANAA: Towards transferable attacks with double adversarial neuron attribution

2023-10-16 · Zhibo Jin, Zhiyu Zhu, Xinyi Wang, Jiayu Zhang 외

While deep neural networks have excellent results in many fields, they are susceptible to interference from attacking samples resulting in erroneous judgments. Feature-level attacks are one of the effective attack types,…

Feature Importance

Attribution for Enhanced Explanation with Transferable Adversarial eXploration

2024-12-27 · Zhiyu Zhu, Jiayu Zhang, Zhibo Jin, Huaming Chen 외

The interpretability of deep neural networks is crucial for understanding model decisions in various applications, including computer vision. AttEXplore++, an advanced framework built upon AttEXplore, enhances attributio…

Adversarial AttackDiversity

NAT: Learning to Attack Neurons for Enhanced Adversarial Transferability

2025-08-23 · Krishna Kanth Nakka, Alexandre Alahi arxiv

The generation of transferable adversarial perturbations typically involves training a generator to maximize embedding separation between clean and adversarial images at a single mid-layer of a source model. In this work…

On the Relationship between Skill Neurons and Robustness in Prompt Tuning

2023-09-21 · Leon Ackermann, Xenia Ohmer

Prompt Tuning is a popular parameter-efficient finetuning method for pre-trained large language models (PLMs). Based on experiments with RoBERTa, it has been suggested that Prompt Tuning activates specific neurons in the…

Adversarial Robustness