DefenseFea: An Input Transformation Feature Searching Algorithm Based Latent Space for Adversarial Defense

Autor: Pan Zhang, Yangjie Cao, Chenxi Zhu, Yan Zhuang, Haobo Wang, Jie Li
Jazyk: angličtina
Rok vydání: 2024
Předmět:
Zdroj: Foundations of Computing and Decision Sciences, Vol 49, Iss 1, Pp 21-36 (2024)
Druh dokumentu: article
ISSN: 2300-3405
DOI: 10.2478/fcds-2024-0002
Popis: Deep neural networks based image classification systems could suffer from adversarial attack algorithms, which generate input examples by adding deliberately crafted yet imperceptible noise to original input images. These crafted examples can fool systems and further threaten their security. In this paper, we propose to use latent space protect image classification. Specifically, we train a feature searching network to make up the difference between adversarial examples and clean examples with label guided loss function. We name it DefenseFea(input transformation based defense with label guided loss function), experimental result shows that DefenseFea can improve the rate of adversarial examples that achieved a success rate of about 99% on a specific set of 5000 images from ILSVRC 2012. This study plays a positive role in the further investigation of the relationship between adversarial examples and clean examples.
Databáze: Directory of Open Access Journals