4results about How to "Improve attack success rate" patented technology

This invention relates to an active learning-based data-free black-box attack method and system based on multidimensional value assessment, belonging to the field of artificial intelligence security technology. This method constructs a pre-emptive "sample screening funnel," utilizing a local substitution model to perform multidimensional assessments of sample boundary approximation, information uncertainty, and geometric diversity before sending images to a commercial cloud API. Only high-value samples are selected for querying, thereby achieving low-cost, high-efficiency model theft and adversarial attacks. This invention ensures the diversity and training stability of data-free generated samples, significantly improves the transfer success rate of adversarial examples, and achieves "low-cost, low-risk" economical attacks. It has strong versatility and can be seamlessly integrated into various existing data-free attack frameworks, facilitating deployment and implementation in practical security assessment systems.

This invention relates to the field of artificial intelligence security and discloses a method for generating adversarial examples for voiceprint recognition. It integrates multiple existing voiceprint recognition models to generate a substitute model to replace the target black-box voiceprint recognition model. Adversarial examples are generated by attacking the substitute model, thereby attacking the target black-box model. This overcomes the difficulty of obtaining model information from a black-box model and improves the low success rate of attacks. In generating adversarial examples, a Nesterov-based accelerated gradient method is used, which can find adversarial examples with better attack effects more quickly. During the generation of adversarial examples, the target black-box model is queried a small number of times to correct the direction of adversarial example generation, thus improving the success rate of the attack.

This invention discloses a backdoor attack method, system, and medium based on multi-object semantic coexistence in text-to-image diffusion models. This method utilizes the perspective of multi-object semantic coexistence in text-to-image diffusion models to develop MOBA backdoor attack schemes. First, by constructing a trigger alignment dataset and optimizing backdoor implantation and semantic preservation in parallel, the attack success rate and visual concealment are effectively improved, reducing the impact of semantic corruption on attack effectiveness. Second, during model training, an attention-based decoupling backdoor enhancement mechanism is adopted. By decoupling the attention regions of different objects, the semantic integrity of the input prompt is maintained while the backdoor is activated and the attention distribution is reasonably adjusted to reduce the impact of generation bias on attack concealment. The method of this invention ensures both visual concealment and model performance under benign input while achieving efficient backdoor attacks.

This invention relates to a white-box adversarial example generation method and system for liquid state machines, belonging to the field of neural network security. It aims to address the problem that existing methods cannot effectively handle non-differentiable cyclic components and gradient calculation failures caused by random pulse coding in liquid state machines. The method constructs a computable and stable gradient propagation path from model loss to the original input through gradient splitting and time-averaged gradient approximation. It includes a cyclic process of forward propagation and backward gradient calculation. The corresponding system includes a data input and preprocessing module, a target model loading and inference module, a gradient calculation module, an attack algorithm integration module, and an adversarial example synthesis and feedback module. This invention achieves an effective white-box attack on liquid state machines for the first time, with advantages such as high attack success rate, good perturbation concealment, and strong scalability, providing a powerful tool for evaluating the security of spiking neural networks.