Deep neural network adversarial sample scoring method

A deep neural network, adversarial sample technology, applied in the field of deep neural network, can solve problems such as remote assessment of the harmfulness of adversarial samples

Pending Publication Date: 2022-07-29
CHONGQING UNIV OF POSTS & TELECOMM
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

At present, there is no systematic and intuitive indicator to reflect the attack effect of adversarial samples on deep neura

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Deep neural network adversarial sample scoring method
  • Deep neural network adversarial sample scoring method
  • Deep neural network adversarial sample scoring method

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0022] The technical solutions in the embodiments of the present invention will be described clearly and in detail below with reference to the accompanying drawings in the embodiments of the present invention. The described embodiments are only some of the embodiments of the invention.

[0023] The technical scheme that the present invention solves the above-mentioned technical problems is:

[0024] refer to Figure 1-Figure 4 The specific embodiment of the present invention includes an adversarial sample transferability calculation module, an adversarial sample imperceptibility calculation module, an adversarial sample attack success rate calculation module, an adversarial sample label offset calculation module, and an adversarial sample score calculation module. Among them, the adversarial sample transferability calculation module, the adversarial sample imperceptibility calculation module, the adversarial sample attack success rate calculation module, and the adversarial s...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention discloses a deep neural network adversarial sample scoring method, and provides a new method for evaluating an adversarial sample attack effect in a black box mode, a fuzzy comprehensive evaluation method is adopted, and the adversarial sample attack effect is evaluated and quantified by taking a name as an adversarial sample score (AES) index. The method specifically comprises the steps of calculating the mobility, the imperceptibility, the attack success rate and the label offset degree of an adversarial sample, determining a membership degree subset table, determining the evaluation weight A of each aspect and a fuzzy comprehensive evaluation matrix by using an analytic hierarchy process, and obtaining an adversarial sample scoring index. The output of the AES index is a score for measuring the attack effect of the adversarial sample, and can be used for evaluating the harmfulness of the adversarial sample to the deep neural network.

Description

technical field [0001] The invention relates to the field of deep neural networks, in particular to a deep neural network confrontation sample scoring method. Background technique [0002] More and more governments and business organizations around the world are gradually realizing the economic and strategic importance of artificial intelligence. Deep neural network is one of the core research fields of artificial intelligence. The application of deep learning has spread to various branches of artificial intelligence, such as expert systems, cognitive simulation, planning and problem solving, data mining, network information services, image recognition, fault diagnosis, natural language understanding, robotics and games. Deep neural network technology has penetrated into all areas of people's daily life, and is gradually integrated into national infrastructure construction. Therefore, the security of deep neural network models is related to people's livelihood security and ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06V10/774G06K9/62G06N3/04G06N3/08
CPCG06N3/08G06N3/045G06F18/24G06F18/214
Inventor 陈龙艾锐欧阳柳
Owner CHONGQING UNIV OF POSTS & TELECOMM
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products