Semantic Preserving Adversarial Attack Generation with Autoencoder and Genetic Algorithm
Widely used deep learning models are found to have poor robustness. Little noises can fool state-of-the-art models into making incorrect predictions. While there is a great deal of high-performance attack generation methods, most of them directly add perturbations to original data and measure them using L_p norms; this can break the major structure of data, thus, creating invalid attacks. In this paper, we propose a black-box attack, which, instead of modifying original data, modifies latent features of data extracted by an autoencoder; then, we measure noises in semantic space to protect the semantics of data. We trained autoencoders on MNIST and CIFAR-10 datasets and found optimal adversarial perturbations using a genetic algorithm. Our approach achieved a 100% attack success rate on the first 100 data of MNIST and CIFAR-10 datasets with less perturbation than FGSM.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackSimilar Papers 제목 키워드 기반
DAPAS : Denoising Autoencoder to Prevent Adversarial attack in Semantic Segmentation
Nowadays, Deep learning techniques show dramatic performance on computer vision area, and they even outperform human. But it is also vulnerable to some small perturbation called an adversarial attack. This is a problem c…
Adversarial AttackDenoisingimage-classificationImage Classification+4Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection
As an increasing number of deep-learning-based malware scanners have been proposed, the existing evasion techniques, including code obfuscation and polymorphic malware, are found to be less effective. In this work, we pr…
Malware Detectionreinforcement-learningReinforcement LearningReinforcement Learning (RL)Understanding Adversarial Attacks on Autoencoders
Adversarial vulnerability is a fundamental limitation of deep neural networks which remains poorly understood. Recent work suggests that adversarial attacks on deep neural network classifiers exploit the …
Compressive SensingKnowledge DistillationSemantic Autoencoder and Its Potential Usage for Adversarial Attack
Autoencoder can give rise to an appropriate latent representation of the input data, however, the representation which is solely based on the intrinsic property of the input data, is usually inferior to express some sema…
Adversarial AttackPreserving Semantics in Textual Adversarial Attacks
The growth of hateful online content, or hate speech, has been associated with a global increase in violent crimes against minorities [23]. Harmful online content can be produced easily, automatically and anonymously. Ev…
Adversarial AttackSentenceSentence EmbeddingSentence-Embedding