General adversarial disturbance generation method based on correlation class activation mapping

Abstract

The invention discloses a general adversarial disturbance generation method based on correlation class activation mapping, and belongs to the field of adversarial machine learning. At present, the key technical problem in the field is deep neural network decision interpretability and adversarial sample mobility enhancement. According to the method, the general adversarial disturbance is generated and optimized by utilizing an inter-layer correlation propagation and class activation mapping cascading mode, and then the focus of the deep neural network is understood. Firstly, a deep neural network classifier is utilized to calculate an original label class and other error label classes of a clean sample, then through forward propagation class activation mapping feature map and correlation coefficient linear weight combination, the contribution of a final thermodynamic diagram of the original label is minimum, the contribution of thermodynamic diagrams of other error classes is maximum, and finally, the error label class is obtained. And the general adversarial disturbance is iteratively updated by minimizing the correlation class activation mapping loss function, so that the general adversarial disturbance with strong mobility is formed, and the attack success rate of the adversarial sample is improved.

Description

technical field [0001] The invention relates to a general confrontation disturbance generation method based on correlation class activation mapping, and belongs to the field of confrontation machine learning. Background technique [0002] Machine learning techniques have made major breakthroughs in solving complex tasks. However, machine learning techniques (especially artificial neural networks and data-driven artificial intelligence) are extremely vulnerable to adversarial examples during training or testing, which can easily subvert machine learning models. the original output. Since the breakthrough of the AlexNet model in the Large-Scale Visual Recognition Challenge (ILSVRC), various image classification neural networks have been proposed to improve image classification techniques, and deep neural networks have shown amazing high performance in solving complex computer vision problems, including images Recognition, object detection, semantic segmentation and face recog...

AI Technical Summary

Problems solved by technology

Iterative attacks have a higher success rate than single-step attacks in white-box environments, but their transferability is not ideal in most cases because it is sensitive to network parameters

Furthermore, it is difficult for the attacker to obtain exact knowledge of the victim

Images