Residential Collegefalse
Status已發表Published
Attack-invariant attention feature for adversarial defense in hyperspectral image classification
Shi, Cheng1; Liu, Ying1; Zhao, Minghua1; Pun, Chi Man2; Miao, Qiguang3
2024
Source PublicationPattern Recognition
ISSN0031-3203
Volume145Pages:109955
Abstract

Although deep neural networks (DNNs) have achieved excellent performance on hyperspectral image (HSI) classification tasks, their robustness is threatened by carefully created adversarial examples. Therefore, adversarial defense methods have provided an effective defense strategy to protect HSI classification networks. However, most defense models are highly dependent on known types of adversarial examples, which leads to poor generalization to defend against unknown attacks. In this study, we propose an attack-invariant attention feature-based defense (AIAF-Defense) model to improve the generalization ability of the defense model. Specifically, the AIAF-Defense model has an encoder–decoder structure to remove the perturbations from the HSI adversarial examples. We design a feature-disentanglement network as the encoder structure to decouple the attack-invariant spectral–spatial feature and attack-variant feature in the adversarial example and apply a decoder structure to reconstruct the legitimate HSI example. In addition, an attention-guided reconstruction loss is proposed to address the attention-shift problem caused by perturbation and provide an attention constraint for the extraction of attack-invariant attention features. Extensive experiments are conducted on three benchmark hyperspectral image datasets, the PaviaU, HoustonU 2018, and Salinas datasets, and the obtained results show that the proposed AIAF-Defense model improves the defense ability on both known and unknown adversarial attacks. The code is available at https://github.com/AAAA-CS/AIAF_HyperspectralAdversarialDefense.

KeywordAdversarial Attack Adversarial Defense Attack-invariant Attention Feature Hyperspectral Image Classification
DOI10.1016/j.patcog.2023.109955
URLView the original
Indexed BySCIE
Language英語English
WOS Research AreaComputer Science ; Engineering
WOS SubjectComputer Science, Artificial Intelligence ; Engineering, Electrical & Electronic
WOS IDWOS:001083786000001
Scopus ID2-s2.0-85171994571
Fulltext Access
Citation statistics
Document TypeJournal article
CollectionDEPARTMENT OF COMPUTER AND INFORMATION SCIENCE
Corresponding AuthorShi, Cheng
Affiliation1.School of Computer Science and Engineering, Xi'an University of Technology, Xi'anShannxi, 710048, China
2.Department of Computer and Information Science, University of Macau, 999078, China
3.School of Computer Science and Technology, Xidian University, Xi'an, 710071, Shannxi, China
Recommended Citation
GB/T 7714
Shi, Cheng,Liu, Ying,Zhao, Minghua,et al. Attack-invariant attention feature for adversarial defense in hyperspectral image classification[J]. Pattern Recognition, 2024, 145, 109955.
APA Shi, Cheng., Liu, Ying., Zhao, Minghua., Pun, Chi Man., & Miao, Qiguang (2024). Attack-invariant attention feature for adversarial defense in hyperspectral image classification. Pattern Recognition, 145, 109955.
MLA Shi, Cheng,et al."Attack-invariant attention feature for adversarial defense in hyperspectral image classification".Pattern Recognition 145(2024):109955.
Files in This Item:
There are no files associated with this item.
Related Services
Recommend this item
Bookmark
Usage statistics
Export to Endnote
Google Scholar
Similar articles in Google Scholar
[Shi, Cheng]'s Articles
[Liu, Ying]'s Articles
[Zhao, Minghua]'s Articles
Baidu academic
Similar articles in Baidu academic
[Shi, Cheng]'s Articles
[Liu, Ying]'s Articles
[Zhao, Minghua]'s Articles
Bing Scholar
Similar articles in Bing Scholar
[Shi, Cheng]'s Articles
[Liu, Ying]'s Articles
[Zhao, Minghua]'s Articles
Terms of Use
No data!
Social Bookmark/Share
All comments (0)
No comment.
 

Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.