Residential College | false |
Status | 已發表Published |
Attack-invariant attention feature for adversarial defense in hyperspectral image classification | |
Shi, Cheng1; Liu, Ying1; Zhao, Minghua1; Pun, Chi Man2; Miao, Qiguang3 | |
2024 | |
Source Publication | Pattern Recognition |
ISSN | 0031-3203 |
Volume | 145Pages:109955 |
Abstract | Although deep neural networks (DNNs) have achieved excellent performance on hyperspectral image (HSI) classification tasks, their robustness is threatened by carefully created adversarial examples. Therefore, adversarial defense methods have provided an effective defense strategy to protect HSI classification networks. However, most defense models are highly dependent on known types of adversarial examples, which leads to poor generalization to defend against unknown attacks. In this study, we propose an attack-invariant attention feature-based defense (AIAF-Defense) model to improve the generalization ability of the defense model. Specifically, the AIAF-Defense model has an encoder–decoder structure to remove the perturbations from the HSI adversarial examples. We design a feature-disentanglement network as the encoder structure to decouple the attack-invariant spectral–spatial feature and attack-variant feature in the adversarial example and apply a decoder structure to reconstruct the legitimate HSI example. In addition, an attention-guided reconstruction loss is proposed to address the attention-shift problem caused by perturbation and provide an attention constraint for the extraction of attack-invariant attention features. Extensive experiments are conducted on three benchmark hyperspectral image datasets, the PaviaU, HoustonU 2018, and Salinas datasets, and the obtained results show that the proposed AIAF-Defense model improves the defense ability on both known and unknown adversarial attacks. The code is available at https://github.com/AAAA-CS/AIAF_HyperspectralAdversarialDefense. |
Keyword | Adversarial Attack Adversarial Defense Attack-invariant Attention Feature Hyperspectral Image Classification |
DOI | 10.1016/j.patcog.2023.109955 |
URL | View the original |
Indexed By | SCIE |
Language | 英語English |
WOS Research Area | Computer Science ; Engineering |
WOS Subject | Computer Science, Artificial Intelligence ; Engineering, Electrical & Electronic |
WOS ID | WOS:001083786000001 |
Scopus ID | 2-s2.0-85171994571 |
Fulltext Access | |
Citation statistics | |
Document Type | Journal article |
Collection | DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE |
Corresponding Author | Shi, Cheng |
Affiliation | 1.School of Computer Science and Engineering, Xi'an University of Technology, Xi'anShannxi, 710048, China 2.Department of Computer and Information Science, University of Macau, 999078, China 3.School of Computer Science and Technology, Xidian University, Xi'an, 710071, Shannxi, China |
Recommended Citation GB/T 7714 | Shi, Cheng,Liu, Ying,Zhao, Minghua,et al. Attack-invariant attention feature for adversarial defense in hyperspectral image classification[J]. Pattern Recognition, 2024, 145, 109955. |
APA | Shi, Cheng., Liu, Ying., Zhao, Minghua., Pun, Chi Man., & Miao, Qiguang (2024). Attack-invariant attention feature for adversarial defense in hyperspectral image classification. Pattern Recognition, 145, 109955. |
MLA | Shi, Cheng,et al."Attack-invariant attention feature for adversarial defense in hyperspectral image classification".Pattern Recognition 145(2024):109955. |
Files in This Item: | There are no files associated with this item. |
Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.
Edit Comment