Method and device for generating an adversarial sample, electronic device and readable storage medium

Abstract

The present application provides a method and device for generating an adversarial sample, an electronic device, and a readable storage medium, which relate to the field of computers; wherein, the method includes: performing gradient descent processing on the first sample to obtain the first gradient of the first sample , wherein, the sample data in the first sample is binary data, and the data in the first gradient is continuous numerical value; convert the first gradient to the second gradient, wherein, the data in the second gradient are three-valued data; The sample data in the first sample is combined with the data in the second gradient to generate a target adversarial sample; wherein, the sample data in the target adversarial sample is binary data. This application solves the problem that in the prior art, some pulse signals of the input samples are randomly flipped, and then the result of the random flip is searched, but the large search space leads to a low attack success rate of the spiking neural network.

Description

technical field [0001] The present application relates to the field of computers, and in particular to a method and device for generating an adversarial sample, electronic equipment, and a readable storage medium. Background technique [0002] At present, for the way of generating adversarial samples by the spiking neural network, since the input of the spiking neural network is a binary pulse signal, it uses a part of the pulse signal that randomly flips the input sample, and achieves the purpose of adversarial attack through trial and error. However, in the method of generating impulsive adversarial samples by trial and error, due to the huge search space, it is difficult to find accurate adversarial samples, resulting in a low attack success rate. Contents of the invention [0003] The embodiment of the present application provides a method and device for generating an adversarial sample, an electronic device, and a readable storage medium to solve the problem of random...

AI Technical Summary

Problems solved by technology

[0003] The embodiment of the present application provides a method and device for generating an adversarial sample, an electronic device, and a readable storage medium to solve the problem of randomly flipping some pulse signals of the input samples in the prior art, and then searching for the random flip result, but this The problem that the search space assembly leads to a low attack success rate of spiking neural networks

Images