Perturbing the Phase: Analyzing Adversarial Robustness of Complex-Valued Neural Networks
Complex-valued neural networks (CVNNs) are rising in popularity for all kinds of applications. To safely use CVNNs in practice, analyzing their robustness against outliers is crucial. One well known technique to understand the behavior of deep neural networks is to investigate their behavior under adversarial attacks, which can be seen as worst case minimal perturbations. We design Phase Attacks, a kind of attack specifically targeting the phase information of complex-valued inputs. Additionally, we derive complex-valued versions of commonly used adversarial attacks. We show that in some scenarios CVNNs are more robust than RVNNs and that both are very susceptible to phase changes with the Phase Attacks decreasing the model performance more, than equally strong regular attacks, which can attack both phase and magnitude.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial RobustnessSimilar Papers 제목 키워드 기반
Better Generalization with Adaptive Adversarial Training
An effective method to obtain an adversarial robust network is to train the network with adversarially perturbed samples. Perturbing all the samples adversarially has shown to increase the robustness of the networks sign…
Adversarial RobustnessNETWORK ROBUSTNESS TO PCA PERTURBATIONS
A key challenge in analyzing neural networks' robustness is identifying input features for which networks are robust to perturbations. Existing work focuses on direct perturbations to the inputs, thereby studies network …
Regularizing deep networks using efficient layerwise adversarial training
Adversarial training has been shown to regularize deep neural networks in addition to increasing their robustness to adversarial examples. However, its impact on very deep state of the art networks has not been fully inv…
Adversarial Robustness of Bottleneck Injected Deep Neural Networks for Task-Oriented Communication
This paper investigates the adversarial robustness of Deep Neural Networks (DNNs) using Information Bottleneck (IB) objectives for task-oriented communication systems. We empirically demonstrate that while IB-based appro…
Adversarial RobustnessAdversarial Attacks on Graph Neural Networks based Spatial Resource Management in P2P Wireless Communications
This paper introduces adversarial attacks targeting a Graph Neural Network (GNN) based radio resource management system in point to point (P2P) communications. Our focus lies on perturbing the trained GNN model during th…
CPUGraph Neural NetworkManagement