On the Adversarial Transferability of ConvMixer Models
Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model (target model) with a non-trivial probability. In this paper, we investigate the property of adversarial transferability between models including ConvMixer, which is an isotropic network, for the first time. To objectively verify the property of transferability, the robustness of models is evaluated by using a benchmark attack method called AutoAttack. In an image classification experiment, ConvMixer is confirmed to be weak to adversarial transferability.
Code (0)
등록된 구현이 없습니다.
Tasks
image-classificationImage ClassificationSimilar Papers 제목 키워드 기반
A Random Ensemble of Encrypted models for Enhancing Robustness against Adversarial Examples
Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model …
Enhanced Security against Adversarial Examples Using a Random Ensemble of Encrypted Vision Transformer Models
Deep neural networks (DNNs) are well known to be vulnerable to adversarial examples (AEs). In addition, AEs have adversarial transferability, which means AEs generated for a source model can fool another black-box model …
An Encryption Method of ConvMixer Models without Performance Degradation
In this paper, we propose an encryption method for ConvMixer models with a secret key. Encryption methods for DNN models have been studied to achieve adversarial defense, model protection and privacy-preserving image cla…
Adversarial DefenseClassificationimage-classificationImage Classification+1A Privacy Preserving Method with a Random Orthogonal Matrix for ConvMixer Models
In this paper, a privacy preserving image classification method is proposed under the use of ConvMixer models. To protect the visual information of test images, a test image is divided into blocks, and then every block i…
Classificationimage-classificationImage ClassificationPrivacy PreservingPrivacy-Preserving Image Classification Using ConvMixer with Adaptive Permutation Matrix
In this paper, we propose a privacy-preserving image classification method using encrypted images under the use of the ConvMixer structure. Block-wise scrambled images, which are robust enough against various attacks, ha…
Classificationimage-classificationImage ClassificationPrivacy Preserving