Residential College | false |
Status | 已發表Published |
Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks | |
Yu, Yunrui; Xu, Cheng Zhong | |
2023 | |
Conference Name | 2023 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION, CVPR |
Source Publication | Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition |
Volume | 2023-June |
Pages | 4056-4066 |
Conference Date | JUN 17-24, 2023 |
Conference Place | Vancouver, CANADA |
Country | CANADA |
Abstract | Attackers can deceive neural networks by adding human imperceptive perturbations to their input data; this reveals the vulnerability and weak robustness of current deep-learning networks. Many attack techniques have been proposed to evaluate the model's robustness. Gradient-based attacks suffer from severely overestimating the robustness. This paper identifies that the relative error in calculated gradients caused by floating-point errors, including floating-point underflow and rounding errors, is a fundamental reason why gradient-based attacks fail to accurately assess the model's robustness. Although it is hard to eliminate the relative error in the gradients, we can control its effect on the gradient-based attacks. Correspondingly, we propose an efficient loss function by minimizing the detrimental impact of the floating-point errors on the attacks. Experimental results show that it is more efficient and reliable than other loss functions when examined across a wide range of defence mechanisms. |
Keyword | Adversarial Attack And Defense |
DOI | 10.1109/CVPR52729.2023.00395 |
URL | View the original |
Indexed By | CPCI-S |
Language | 英語English |
WOS Research Area | Computer Science |
WOS Subject | Computer Science, Artificial intelligenceComputer Science, Interdisciplinary Applications ; Computer Science, Software Engineering ; Computer Science, Theory & Methods |
WOS ID | WOS:001058542604038 |
Scopus ID | 2-s2.0-85173966029 |
Fulltext Access | |
Citation statistics | |
Document Type | Conference paper |
Collection | DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE Faculty of Science and Technology THE STATE KEY LABORATORY OF INTERNET OF THINGS FOR SMART CITY (UNIVERSITY OF MACAU) |
Corresponding Author | Xu, Cheng Zhong |
Affiliation | University of Macau, State Key Lab of Iotsc, Department of Computer Science, Macao |
First Author Affilication | University of Macau |
Corresponding Author Affilication | University of Macau |
Recommended Citation GB/T 7714 | Yu, Yunrui,Xu, Cheng Zhong. Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks[C], 2023, 4056-4066. |
APA | Yu, Yunrui., & Xu, Cheng Zhong (2023). Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks. Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition, 2023-June, 4056-4066. |
Files in This Item: | There are no files associated with this item. |
Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.
Edit Comment