Test-time Adversarial Defense with Opposite Adversarial Path and High Attack Time Cost
Deep learning models are known to be vulnerable to adversarial attacks by injecting sophisticated designed perturbations to input data. Training-time defenses still exhibit a significant performance gap between natural accuracy and robust accuracy. In this paper, we investigate a new test-time adversarial defense method via diffusion-based recovery along opposite adversarial paths (OAPs). We present a purifier that can be plugged into a pre-trained model to resist adversarial attacks. Different from prior arts, the key idea is excessive denoising or purification by integrating the opposite adversarial direction with reverse diffusion to push the input image further toward the opposite adversarial direction. For the first time, we also exemplify the pitfall of conducting AutoAttack (Rand) for diffusion-based defense methods. Through the lens of time complexity, we examine the trade-off between the effectiveness of adaptive attack and its computation complexity against our defense. Experimental evaluation along with time cost analysis verifies the effectiveness of the proposed method.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial DefenseDenoisingMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Output Randomization: A Novel Defense for both White-box and Black-box Adversarial Models
Adversarial examples pose a threat to deep neural network models in a variety of scenarios, from settings where the adversary has complete knowledge of the model in a "white box" setting and to the opposite in a "black b…
Survey on Adversarial Attack and Defense for Medical Image Analysis: Methods and Challenges
Deep learning techniques have achieved superior performance in computer-aided medical image analysis, yet they are still vulnerable to imperceptible adversarial attacks, resulting in potential misdiagnosis in clinical pr…
Adversarial AttackMedical DiagnosisMedical Image AnalysisSurveyAdversarial Defense in Vision-Language Models: An Overview
The widespread use of Vision Language Models (VLMs, e.g. CLIP) has raised concerns about their vulnerability to sophisticated and imperceptible adversarial attacks. These attacks could compromise model performance and sy…
Test-time AdaptationAdversarial DefenseTest-time Detection and Repair of Adversarial Samples via Masked Autoencoder
Training-time defenses, known as adversarial training, incur high training costs and do not generalize to unseen attacks. Test-time defenses solve these issues but most existing test-time defenses require adapting the mo…
Contrastive LearningManagementRobust Overfitting Does Matter: Test-Time Adversarial Purification With FGSM
Numerous studies have demonstrated the susceptibility of deep neural networks (DNNs) to subtle adversarial perturbations, prompting the development of many advanced adversarial defense methods aimed at mitigating adversa…
Adversarial AttackAdversarial DefenseAdversarial PurificationAdversarial Robustness