Effects of Image Processing Operations on Adversarial Noise and Their Use in Detecting and Correcting Adversarial Images

DOI Web Site 被引用文献1件 参考文献24件 オープンアクセス
  • NGUYEN Huy H.
    The Graduate University for Advanced Studies
  • KURIBAYASHI Minoru
    Graduate School of Natural Science and Technology, Okayama University
  • YAMAGISHI Junichi
    The Graduate University for Advanced Studies National Institute of Informatics
  • ECHIZEN Isao
    The Graduate University for Advanced Studies National Institute of Informatics University of Tokyo

説明

<p>Deep neural networks (DNNs) have achieved excellent performance on several tasks and have been widely applied in both academia and industry. However, DNNs are vulnerable to adversarial machine learning attacks in which noise is added to the input to change the networks' output. Consequently, DNN-based mission-critical applications such as those used in self-driving vehicles have reduced reliability and could cause severe accidents and damage. Moreover, adversarial examples could be used to poison DNN training data, resulting in corruptions of trained models. Besides the need for detecting adversarial examples, correcting them is important for restoring data and system functionality to normal. We have developed methods for detecting and correcting adversarial images that use multiple image processing operations with multiple parameter values. For detection, we devised a statistical-based method that outperforms the feature squeezing method. For correction, we devised a method that uses for the first time two levels of correction. The first level is label correction, with the focus on restoring the adversarial images' original predicted labels (for use in the current task). The second level is image correction, with the focus on both the correctness and quality of the corrected images (for use in the current and other tasks). Our experiments demonstrated that the correction method could correct nearly 90% of the adversarial images created by classical adversarial attacks and affected only about 2% of the normal images.</p>

収録刊行物

被引用文献 (1)*注記

もっと見る

参考文献 (24)*注記

もっと見る

関連プロジェクト

もっと見る

キーワード

詳細情報 詳細情報について

問題の指摘

ページトップへ