Transferable Learned Image Compression-Resistant Adversarial Perturbations
Adversarial attacks can readily disrupt the image classification system, revealing the vulnerability of DNN-based recognition tasks. While existing adversarial perturbations are primarily applied to uncompressed images or compressed images by the traditional image compression method, i.e., JPEG, limited studies have investigated the robustness of models for image classification in the context of DNN-based image compression. With the rapid evolution of advanced image compression, DNN-based learned image compression has emerged as the promising approach for transmitting images in many security-critical applications, such as cloud-based face recognition and autonomous driving, due to its superior performance over traditional compression. Therefore, there is a pressing need to fully investigate the robustness of a classification system post-processed by learned image compression. To bridge this research gap, we explore the adversarial attack on a new pipeline that targets image classification models that utilize learned image compressors as pre-processing modules. Furthermore, to enhance the transferability of perturbations across various quality levels and architectures of learned image compression models, we introduce a saliency score-based sampling method to enable the fast generation of transferable perturbation. Extensive experiments with popular attack methods demonstrate the enhanced transferability of our proposed method when attacking images that have been post-processed with different learned image compression models.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial AttackAutonomous DrivingClassificationFace Recognitionimage-classificationImage ClassificationImage CompressionSimilar Papers 제목 키워드 기반
JPEG-resistant Adversarial Images
Several papers have explored the use of JPEG compression as a defense against adversarial images. In this work, we show that we can generate adversarial images which survive JPEG compression, by including a differentiabl…
Compression-Resistant Backdoor Attack against Deep Neural Networks
In recent years, many backdoor attacks based on training data poisoning have been proposed. However, in practice, those backdoor attacks are vulnerable to image compressions. When backdoor instances are compressed, the f…
Backdoor AttackData PoisoningImage CompressionKeep It Real: Challenges in Attacking Compression-Based Adversarial Purification
Previous work has suggested that preprocessing images through lossy compression can defend against adversarial perturbations, but comprehensive attack evaluations have been lacking. In this paper, we construct strong whi…
Towards Model Resistant to Transferable Adversarial Examples via Trigger Activation
Adversarial examples, characterized by imperceptible perturbations, pose significant threats to deep neural networks by misleading their predictions. A critical aspect of these examples is their transferability, allowing…
A Training-Free Defense Framework for Robust Learned Image Compression
We study the robustness of learned image compression models against adversarial attacks and present a training-free defense technique based on simple image transform functions. Recent learned image compression models are…
Image Compression