The invention discloses a hidden space adversarial sample generation method and
system based on multi-scale feature separation, and the method comprises the steps: employing a neural network quantization training method based on straight-through
estimation, and training a hierarchical
vector quantization variational auto-
encoder; carrying out differentiable
Haar wavelet transformation on the input image by adopting a
wavelet packet
transformation algorithm, decomposing the input image into a low-frequency component and a high-frequency component, and realizing multi-scale feature separation; inputting the high-frequency component into a hierarchical
vector quantization variational auto-
encoder, and extracting and quantizing global high-frequency features and local high-frequency detail features; in the
potential space, a learnable disturbance variable is introduced, a potential vector after disturbance is constructed, and the potential vector is reconstructed into an adversarial sample through a decoder; and based on a preset disturbance target, carrying out iterative optimization on the disturbance vector until a confrontation sample which satisfies an
attack success condition and is optimized in visual quality is generated. According to the method, a
wavelet domain variational auto-
encoder and a hidden space iterative
attack algorithm are fused, and an adversarial sample with
high fidelity and clear interpretation is generated.