Residential College | false |
Status | 已發表Published |
DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection | |
Zhu, Jiajie1; Du, Xia1,2; Zhou, Jizhe2; Pun, Chi Man3; Xu, Qizhen1; Liu, Xiaoyuan1 | |
2024-11 | |
Conference Name | 32nd ACM International Conference on Multimedia, MM 2024 |
Source Publication | MM 2024 - Proceedings of the 32nd ACM International Conference on Multimedia |
Pages | 671-680 |
Conference Date | 28 October 2024 - 1 November 2024 |
Conference Place | Melbourne |
Country | Australia |
Publisher | Association for Computing Machinery, Inc |
Abstract | In digital security, Reversible Adversarial Examples (RAE) blend adversarial attacks with Reversible Data Hiding (RDH) within images to thwart unauthorized access. Traditional RAE methods, however, compromise attack efficiency for the sake of perturbation concealment, diminishing the protective capacity of valuable perturbations and limiting applications to white-box scenarios. This paper proposes a novel Dual-Phase merging Reversible Adversarial Example (DP-RAE) generation framework, combining a heuristic black-box attack and RDH with Grayscale Invariance (RDH-GI) technology. This dual strategy not only evaluates and harnesses the adversarial potential of past perturbations more effectively but also guarantees flawless embedding of perturbation information and complete recovery of the original image. Experimental validation reveals our method's superiority, secured an impressive 96.9% success rate and 100% recovery rate in compromising black-box models. In particular, it achieved a 90% misdirection rate against commercial models under a constrained number of queries. This marks the first successful attempt at targeted black-box reversible adversarial attacks for commercial recognition models. This achievement highlights our framework's capability to enhance security measures without sacrificing attack performance. Moreover, our attack framework is flexible, allowing the interchangeable use of different attack and RDH modules to meet advanced technological requirements. |
Keyword | Adversarial Attack Black-box Attack Privacy Protection |
DOI | 10.1145/3664647.3681291 |
URL | View the original |
Language | 英語English |
Scopus ID | 2-s2.0-85209775289 |
Fulltext Access | |
Citation statistics | |
Document Type | Conference paper |
Collection | Faculty of Science and Technology DEPARTMENT OF COMPUTER AND INFORMATION SCIENCE |
Affiliation | 1.School of Computer and Information Engineering, Xiamen University of Technology, Xiamen, China 2.School of Computer Science, Engineering Research Center of Machine Learning and Industry Intelligence, Sichuan University, Chengdu, China 3.Department of Computer and Information Science, University of Macau, Macao |
Recommended Citation GB/T 7714 | Zhu, Jiajie,Du, Xia,Zhou, Jizhe,et al. DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection[C]:Association for Computing Machinery, Inc, 2024, 671-680. |
APA | Zhu, Jiajie., Du, Xia., Zhou, Jizhe., Pun, Chi Man., Xu, Qizhen., & Liu, Xiaoyuan (2024). DP-RAE: A Dual-Phase Merging Reversible Adversarial Example for Image Privacy Protection. MM 2024 - Proceedings of the 32nd ACM International Conference on Multimedia, 671-680. |
Files in This Item: | There are no files associated with this item. |
Items in the repository are protected by copyright, with all rights reserved, unless otherwise indicated.
Edit Comment