arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2002.02196cs.LGcs.CRstat.ML
收藏

AI-GAN: Attack-Inspired Generation of Adversarial Examples

Nanyang Technological University(南洋理工大学);Huazhong University of Science and Technology(华中科技大学);University of Wisconsin-Madison(威斯康星大学麦迪逊分校);University of Illinois at Urbana-Champaign(伊利诺伊大学厄巴纳-香槟分校)

Tao Bai, Jun Zhao, Jinlin Zhu, Shoudong Han, Jiefeng Chen, Bo Li, Alex Kot

英文摘要:

Deep neural networks (DNNs) are vulnerable to adversarial examples, which are crafted by adding imperceptible perturbations to inputs. Recently different attacks and strategies have been proposed, but how to generate adversarial examples perceptually realistic and more efficiently remains unsolved. This paper proposes a novel framework called Attack-Inspired GAN (AI-GAN), where a generator, a discriminator, and an attacker are trained jointly. Once trained, it can generate adversarial perturbations efficiently given input images and target classes. Through extensive experiments on several popular datasets \eg MNIST and CIFAR-10, AI-GAN achieves high attack success rates and reduces generation time significantly in various settings. Moreover, for the first time, AI-GAN successfully scales to complicated datasets \eg CIFAR-100 with around $90\%$ success rates among all classes.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑