UM  > Faculty of Science and Technology
Residential Collegefalse
Status已發表Published
LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features
Yu, Yunrui1; Gao, Xitong2; Xu, Cheng Zhong1
2024
Source PublicationIEEE Transactions on Pattern Analysis and Machine Intelligence
ISSN0162-8828
Volume46Issue:1Pages:354-369
Abstract

Deep convolutional neural networks (CNNs) can be easily tricked to give incorrect outputs by adding tiny perturbations to the input that are imperceptible to humans. This makes them susceptible to adversarial attacks, and poses significant security risks to deep learning systems, and presents a great challenge in making CNNs robust against such attacks. An influx of defense strategies have thus been proposed to improve the robustness of CNNs. Current attack methods, however, may fail to accurately or efficiently evaluate the robustness of defending models. In this paper, we thus propose a unified ℓ p ℓp white-box attack strategy, LAFIT, to harness the defender's latent features in its gradient descent steps, and further employ a new loss function to normalize logits to overcome floating-point-based gradient masking. We show that not only is it more efficient, but it is also a stronger adversary than the current state-of-the-art when examined across a wide range of defense mechanisms. This suggests that adversarial attacks/defenses could be contingent on the effective use of the defender's hidden components, and robustness evaluation should no longer view models holistically.

KeywordAdversarial Robustness Latent Feature Attack White-box Attacks
DOI10.1109/TPAMI.2023.3323698
URLView the original
Indexed BySCIE
Language英語English
WOS Research AreaComputer Science ; Engineering
WOS SubjectComputer Science, Artificial Intelligence ; Engineering, Electrical & Electronic
WOS IDWOS:001123923900001
Scopus ID2-s2.0-85174850841
Fulltext Access
Citation statistics
Document TypeJournal article
CollectionFaculty of Science and Technology
DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE
Corresponding AuthorXu, Cheng Zhong
Affiliation1.University of Macau, State Key Lab of Iotsc, Macau, Taipa, 999078, Macao
2.Chinese Academy of Sciences, Shenzhen Institute of Advanced Technology, Shenzhen, 518055, China
First Author AffilicationUniversity of Macau
Corresponding Author AffilicationUniversity of Macau
Recommended Citation
GB/T 7714
Yu, Yunrui,Gao, Xitong,Xu, Cheng Zhong. LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024, 46(1), 354-369.
APA Yu, Yunrui., Gao, Xitong., & Xu, Cheng Zhong (2024). LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features. IEEE Transactions on Pattern Analysis and Machine Intelligence, 46(1), 354-369.
MLA Yu, Yunrui,et al."LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features".IEEE Transactions on Pattern Analysis and Machine Intelligence 46.1(2024):354-369.
Files in This Item:
There are no files associated with this item.
Related Services
Recommend this item
Bookmark
Usage statistics
Export to Endnote
Google Scholar
Similar articles in Google Scholar
[Yu, Yunrui]'s Articles
[Gao, Xitong]'s Articles
[Xu, Cheng Zhong]'s Articles
Baidu academic
Similar articles in Baidu academic
[Yu, Yunrui]'s Articles
[Gao, Xitong]'s Articles
[Xu, Cheng Zhong]'s Articles
Bing Scholar
Similar articles in Bing Scholar
[Yu, Yunrui]'s Articles
[Gao, Xitong]'s Articles
[Xu, Cheng Zhong]'s Articles
Terms of Use
No data!
Social Bookmark/Share
All comments (0)
No comment.
 

Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.