Backdoor attack method of video analysis neural network model

Abstract

The invention belongs to the technical field of neural network security, and particularly relates to a backdoor attack method of a video analysis neural network model. For more severe backdoor attackimplementation environments such as a high sample dimension, a high frame resolution and a sparse data set of a video, a video backdoor pollution sample construction framework is used for carrying outbackdoor attack on a video analysis neural network model. The video backdoor pollution sample construction framework comprises three parts: a task-oriented model high-sensitivity video backdoor modegeneration algorithm, a feature fuzzy model low-sensitivity anti-noise video sample generation algorithm and a pollution sample generation and attack algorithm; gradient information is introduced fromtwo aspects of a backdoor mode and an original sample to establish association between an attack target value and the backdoor mode. The method provided by the invention has the advantages of high attack success rate, high secrecy, good robustness, good expansibility and the like, and has very good generalization in a video analysis neural network model.

Description

technical field [0001] The invention belongs to the technical field of neural network security, and in particular relates to a backdoor attack method of a video analysis neural network model. Background technique [0002] Deep neural networks are currently widely used in image recognition, natural language processing, video analysis and other fields. Despite the great success, in recent years, studies have found that neural networks are extremely vulnerable to neural network backdoor attacks due to their low transparency and poor interpretability, which will have serious consequences for face recognition, automatic driving, and medical diagnosis. A big security risk. Backdoor attack is a kind of data set pollution attack. The attacker inserts the backdoor pattern into the victim's training set samples in a specific way. When the victim is training, a connection will be established between the backdoor pattern and the attack target value, and the model will remember This ba...

AI Technical Summary

Problems solved by technology

In the current backdoor attack method, under these harsh conditions, the original features of the video will greatly interfere with the model, making it difficult for the model to capture the information of the backdoor pattern, which greatly reduces the impact of backdoor neural network attacks on video. success rate on

Images