arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2007.09763cs.CVcs.LG

Connecting the Dots: Detecting Adversarial Perturbations Using Context Inconsistency

University of California, Riverside(加州大学河滨分校);US Army CCDC Army Research Lab(美国陆军作战能力发展司令部陆军研究实验室)

Shasha Li, Shitong Zhu, Sudipta Paul, Amit Roy-Chowdhury, Chengyu Song, Srikanth Krishnamurthy, Ananthram Swami, Kevin S Chan

英文摘要:

There has been a recent surge in research on adversarial perturbations that defeat Deep Neural Networks (DNNs) in machine vision; most of these perturbation-based attacks target object classifiers. Inspired by the observation that humans are able to recognize objects that appear out of place in a scene or along with other unlikely objects, we augment the DNN with a system that learns context consistency rules during training and checks for the violations of the same during testing. Our approach builds a set of auto-encoders, one for each object class, appropriately trained so as to output a discrepancy between the input and output if an added adversarial perturbation violates context consistency rules. Experiments on PASCAL VOC and MS COCO show that our method effectively detects various adversarial attacks and achieves high ROC-AUC (over 0.95 in most cases); this corresponds to over 20% improvement over a state-of-the-art context-agnostic method.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑