Residential Collegefalse
Status已發表Published
Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks
Yu, Yunrui; Xu, Cheng Zhong
2023
Conference Name2023 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION, CVPR
Source PublicationProceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition
Volume2023-June
Pages4056-4066
Conference DateJUN 17-24, 2023
Conference PlaceVancouver, CANADA
CountryCANADA
Abstract

Attackers can deceive neural networks by adding human imperceptive perturbations to their input data; this reveals the vulnerability and weak robustness of current deep-learning networks. Many attack techniques have been proposed to evaluate the model's robustness. Gradient-based attacks suffer from severely overestimating the robustness. This paper identifies that the relative error in calculated gradients caused by floating-point errors, including floating-point underflow and rounding errors, is a fundamental reason why gradient-based attacks fail to accurately assess the model's robustness. Although it is hard to eliminate the relative error in the gradients, we can control its effect on the gradient-based attacks. Correspondingly, we propose an efficient loss function by minimizing the detrimental impact of the floating-point errors on the attacks. Experimental results show that it is more efficient and reliable than other loss functions when examined across a wide range of defence mechanisms.

KeywordAdversarial Attack And Defense
DOI10.1109/CVPR52729.2023.00395
URLView the original
Indexed ByCPCI-S
Language英語English
WOS Research AreaComputer Science
WOS SubjectComputer Science, Artificial intelligenceComputer Science, Interdisciplinary Applications ; Computer Science, Software Engineering ; Computer Science, Theory & Methods
WOS IDWOS:001058542604038
Scopus ID2-s2.0-85173966029
Fulltext Access
Citation statistics
Document TypeConference paper
CollectionDEPARTMENT OF COMPUTER AND INFORMATION SCIENCE
Faculty of Science and Technology
THE STATE KEY LABORATORY OF INTERNET OF THINGS FOR SMART CITY (UNIVERSITY OF MACAU)
Corresponding AuthorXu, Cheng Zhong
AffiliationUniversity of Macau, State Key Lab of Iotsc, Department of Computer Science, Macao
First Author AffilicationUniversity of Macau
Corresponding Author AffilicationUniversity of Macau
Recommended Citation
GB/T 7714
Yu, Yunrui,Xu, Cheng Zhong. Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks[C], 2023, 4056-4066.
APA Yu, Yunrui., & Xu, Cheng Zhong (2023). Efficient Loss Function by Minimizing the Detrimental Effect of Floating-Point Errors on Gradient-Based Attacks. Proceedings of the IEEE Computer Society Conference on Computer Vision and Pattern Recognition, 2023-June, 4056-4066.
Files in This Item:
There are no files associated with this item.
Related Services
Recommend this item
Bookmark
Usage statistics
Export to Endnote
Google Scholar
Similar articles in Google Scholar
[Yu, Yunrui]'s Articles
[Xu, Cheng Zhong]'s Articles
Baidu academic
Similar articles in Baidu academic
[Yu, Yunrui]'s Articles
[Xu, Cheng Zhong]'s Articles
Bing Scholar
Similar articles in Bing Scholar
[Yu, Yunrui]'s Articles
[Xu, Cheng Zhong]'s Articles
Terms of Use
No data!
Social Bookmark/Share
All comments (0)
No comment.
 

Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.