Residential College | false |
Status | 已發表Published |
LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features | |
Yu, Yunrui1; Gao, Xitong2; Xu, Cheng Zhong1 | |
2024 | |
Source Publication | IEEE Transactions on Pattern Analysis and Machine Intelligence |
ISSN | 0162-8828 |
Volume | 46Issue:1Pages:354-369 |
Abstract | Deep convolutional neural networks (CNNs) can be easily tricked to give incorrect outputs by adding tiny perturbations to the input that are imperceptible to humans. This makes them susceptible to adversarial attacks, and poses significant security risks to deep learning systems, and presents a great challenge in making CNNs robust against such attacks. An influx of defense strategies have thus been proposed to improve the robustness of CNNs. Current attack methods, however, may fail to accurately or efficiently evaluate the robustness of defending models. In this paper, we thus propose a unified ℓ p ℓp white-box attack strategy, LAFIT, to harness the defender's latent features in its gradient descent steps, and further employ a new loss function to normalize logits to overcome floating-point-based gradient masking. We show that not only is it more efficient, but it is also a stronger adversary than the current state-of-the-art when examined across a wide range of defense mechanisms. This suggests that adversarial attacks/defenses could be contingent on the effective use of the defender's hidden components, and robustness evaluation should no longer view models holistically. |
Keyword | Adversarial Robustness Latent Feature Attack White-box Attacks |
DOI | 10.1109/TPAMI.2023.3323698 |
URL | View the original |
Indexed By | SCIE |
Language | 英語English |
WOS Research Area | Computer Science ; Engineering |
WOS Subject | Computer Science, Artificial Intelligence ; Engineering, Electrical & Electronic |
WOS ID | WOS:001123923900001 |
Scopus ID | 2-s2.0-85174850841 |
Fulltext Access | |
Citation statistics | |
Document Type | Journal article |
Collection | Faculty of Science and Technology DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE |
Corresponding Author | Xu, Cheng Zhong |
Affiliation | 1.University of Macau, State Key Lab of Iotsc, Macau, Taipa, 999078, Macao 2.Chinese Academy of Sciences, Shenzhen Institute of Advanced Technology, Shenzhen, 518055, China |
First Author Affilication | University of Macau |
Corresponding Author Affilication | University of Macau |
Recommended Citation GB/T 7714 | Yu, Yunrui,Gao, Xitong,Xu, Cheng Zhong. LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features[J]. IEEE Transactions on Pattern Analysis and Machine Intelligence, 2024, 46(1), 354-369. |
APA | Yu, Yunrui., Gao, Xitong., & Xu, Cheng Zhong (2024). LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features. IEEE Transactions on Pattern Analysis and Machine Intelligence, 46(1), 354-369. |
MLA | Yu, Yunrui,et al."LAFIT: Efficient and Reliable Evaluation of Adversarial Defenses With Latent Features".IEEE Transactions on Pattern Analysis and Machine Intelligence 46.1(2024):354-369. |
Files in This Item: | There are no files associated with this item. |
Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.
Edit Comment