测量虚假的安全感

摘要：

最近，几篇论文已经证明了梯度掩蔽在提出的对抗性防御中的广泛性。依靠这种现象的防御被认为是失败的，很容易被打破。尽管如此，很少有人研究如何测量梯度掩蔽现象，并比较不同网络之间的梯度掩蔽程度。在这项工作中，我们调查梯度掩蔽下的镜头，其可测性，离开的想法，它是一个二元现象。我们提出并激励它的几个指标，进行广泛的实证测试怀疑表现出不同程度的梯度掩蔽防御。这些比强攻击在计算上更便宜，能够在模型之间进行比较，并且不需要为特定模型量身定制攻击的大量时间投资。我们的研究结果揭示了成功测量不同网络中梯度掩蔽程度的指标

英文摘要：

Recently, several papers have demonstrated how widespread gradient masking is amongst proposed adversarial defenses. Defenses that rely on this phenomenon are considered failed, and can easily be broken. Despite this, there has been little investigation into ways of measuring the phenomenon of gradient masking and enabling comparisons of its extent amongst different networks. In this work, we investigate gradient masking under the lens of its mensurability, departing from the idea that it is a binary phenomenon. We propose and motivate several metrics for it, performing extensive empirical tests on defenses suspected of exhibiting different degrees of gradient masking. These are computationally cheaper than strong attacks, enable comparisons between models, and do not require the large time investment of tailor-made attacks for specific models. Our results reveal metrics that are successful in measuring the extent of gradient masking across different networks

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。