UM  > Faculty of Science and Technology
Residential Collegefalse
Status已發表Published
DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection
Zhu, Jiajie1; Du, Xia1,2; Zhou, Jizhe2; Pun, Chi Man3; Xu, Qizhen1; Liu, Xiaoyuan1
2024-11
Conference Name32nd ACM International Conference on Multimedia, MM 2024
Source PublicationMM 2024 - Proceedings of the 32nd ACM International Conference on Multimedia
Pages671-680
Conference Date28 October 2024 - 1 November 2024
Conference PlaceMelbourne
CountryAustralia
PublisherAssociation for Computing Machinery, Inc
Abstract

In digital security, Reversible Adversarial Examples (RAE) blend adversarial attacks with Reversible Data Hiding (RDH) within images to thwart unauthorized access. Traditional RAE methods, however, compromise attack efficiency for the sake of perturbation concealment, diminishing the protective capacity of valuable perturbations and limiting applications to white-box scenarios. This paper proposes a novel Dual-Phase merging Reversible Adversarial Example (DP-RAE) generation framework, combining a heuristic black-box attack and RDH with Grayscale Invariance (RDH-GI) technology. This dual strategy not only evaluates and harnesses the adversarial potential of past perturbations more effectively but also guarantees flawless embedding of perturbation information and complete recovery of the original image. Experimental validation reveals our method's superiority, secured an impressive 96.9% success rate and 100% recovery rate in compromising black-box models. In particular, it achieved a 90% misdirection rate against commercial models under a constrained number of queries. This marks the first successful attempt at targeted black-box reversible adversarial attacks for commercial recognition models. This achievement highlights our framework's capability to enhance security measures without sacrificing attack performance. Moreover, our attack framework is flexible, allowing the interchangeable use of different attack and RDH modules to meet advanced technological requirements.

KeywordAdversarial Attack Black-box Attack Privacy Protection
DOI10.1145/3664647.3681291
URLView the original
Language英語English
Scopus ID2-s2.0-85209775289
Fulltext Access
Citation statistics
Document TypeConference paper
CollectionFaculty of Science and Technology
DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE
Affiliation1.School of Computer and Information Engineering, Xiamen University of Technology, Xiamen, China
2.School of Computer Science, Engineering Research Center of Machine Learning and Industry Intelligence, Sichuan University, Chengdu, China
3.Department of Computer and Information Science, University of Macau, Macao
Recommended Citation
GB/T 7714
Zhu, Jiajie,Du, Xia,Zhou, Jizhe,et al. DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection[C]:Association for Computing Machinery, Inc, 2024, 671-680.
APA Zhu, Jiajie., Du, Xia., Zhou, Jizhe., Pun, Chi Man., Xu, Qizhen., & Liu, Xiaoyuan (2024). DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection. MM 2024 - Proceedings of the 32nd ACM International Conference on Multimedia, 671-680.
Files in This Item:
There are no files associated with this item.
Related Services
Recommend this item
Bookmark
Usage statistics
Export to Endnote
Google Scholar
Similar articles in Google Scholar
[Zhu, Jiajie]'s Articles
[Du, Xia]'s Articles
[Zhou, Jizhe]'s Articles
Baidu academic
Similar articles in Baidu academic
[Zhu, Jiajie]'s Articles
[Du, Xia]'s Articles
[Zhou, Jizhe]'s Articles
Bing Scholar
Similar articles in Bing Scholar
[Zhu, Jiajie]'s Articles
[Du, Xia]'s Articles
[Zhou, Jizhe]'s Articles
Terms of Use
No data!
Social Bookmark/Share
All comments (0)
No comment.
 

Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.