Method for defense of attack of adversarial examples based on convolutional denoising auto-encoder

An adversarial sample and self-encoding technology, applied in the field of information security, can solve the problems of difficulty in fitting adversarial samples and clean samples at the same time, lack of interpretability, poor efficiency performance, etc., to reduce computational overhead, good interpretability, The effect of improving the classification accuracy
CN108537271AActive Publication Date: 2018-09-14CHONGQING UNIV
3 Cites 52 Cited by

Patent Information

Authority / Receiving Office
CN Β· China
Patent Type
Applications(China)
Current Assignee / Owner
CHONGQING UNIV
Publication Date
2018-09-14

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The present invention relates to a method for defense of attack of adversarial examples based on a convolutional denoising auto-encoder. Adversarial image examples x* (output tags identified by an image classification device is y*) are constructed by manual addition of adversarial disturbance on clean image samples x without modification (output tags identified by the image classification device is y), the fraud purpose that y* is not equal to y can be achieved, even though the image classification device classifies two images essentially showing the same meaning to two classes by mistake. Thepresent invention designs an integration defense model connected with a target image classifier based on a convolutional denoising auto-encoder (CDAE), namely input samples are subjected to coding and decoding at the internal portion of a well trained CDAE to remove most of adversarial disturbances in the input samples so as to output denoising samples close to original clean samples, and then are transmitted to the target image classifier so as to improve the classification correction of the target classifier and have an effect for defense of attack of adversarial examples.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the technical field of information security, and relates to a method for defending against an adversarial sample attack based on a convolution denoising autoencoder. Background technique

[0002] As machine learning technology is widely used in various fields, including identity verification, automatic driving, speech recognition and other fields, its security has also attracted everyone's attention. Nguyen et al. found in 2014 that deep neural networks are easily fooled by adversarial examples. In 2015, Goodfellow et al. showed that any machine learning classifier can be fooled by adversarial examples, not limited to deep learning networks. The attacker slightly modifies the input data source so that the user cannot perceive it, and realizes that the machine learning system accepts the data and makes wrong follow-up operations, that is, in the unmodified clean sample x (image classifier recognition output The adversarial ima...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More