arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2305.08031cs.CVcs.AI

增强视觉Transformer鲁棒性:防御性扩散

On enhancing the robustness of Vision Transformers: Defensive Diffusion

MBZUAI(穆罕默德·本·扎耶德人工智能大学)

Raza Imam, Muhammad Huzaifa, Mohammed El-Amine Azz

AI总结:

本研究提出一种防御性扩散技术作为对抗性净化器,结合知识蒸馏增强视觉Transformer在医疗图像上的鲁棒性,在肺结核X射线数据集上优于SEViT基线。

摘要:

在医疗保健环境中,医疗数据的隐私和保密性至关重要。视觉Transformer(ViT)作为最先进的视觉模型,依赖大量患者数据进行训练,这引发了数据安全和未授权访问的担忧。攻击者可能利用ViT的漏洞提取敏感患者信息,从而危及患者隐私。本研究旨在解决这些漏洞,以确保ViT在医疗应用中的可信性和可靠性。在本工作中,我们引入了一种防御性扩散技术作为对抗性净化器,以消除攻击者在原始图像中引入的对抗性噪声。通过利用扩散模型的去噪能力,我们采用反向扩散过程有效消除攻击样本中的对抗性噪声,从而得到更干净的图像,并将其输入ViT模块。我们的研究结果表明,扩散模型在消除图像中与攻击无关的对抗性噪声方面具有有效性。此外,我们提出将知识蒸馏与我们的框架相结合,以获得一个轻量级学生模型,该模型既计算高效又对灰盒攻击具有鲁棒性。与最先进的基线方法SEViT相比,我们的方法表现出更优的性能。在公开可用的肺结核X射线数据集上进行的大量实验验证了我们所提出架构的计算效率和改进的鲁棒性。

英文摘要:

Privacy and confidentiality of medical data are of utmost importance in healthcare settings. ViTs, the SOTA vision model, rely on large amounts of patient data for training, which raises concerns about data security and the potential for unauthorized access. Adversaries may exploit vulnerabilities in ViTs to extract sensitive patient information and compromising patient privacy. This work address these vulnerabilities to ensure the trustworthiness and reliability of ViTs in medical applications. In this work, we introduced a defensive diffusion technique as an adversarial purifier to eliminate adversarial noise introduced by attackers in the original image. By utilizing the denoising capabilities of the diffusion model, we employ a reverse diffusion process to effectively eliminate the adversarial noise from the attack sample, resulting in a cleaner image that is then fed into the ViT blocks. Our findings demonstrate the effectiveness of the diffusion model in eliminating attack-agnostic adversarial noise from images. Additionally, we propose combining knowledge distillation with our framework to obtain a lightweight student model that is both computationally efficient and robust against gray box attacks. Comparison of our method with a SOTA baseline method, SEViT, shows that our work is able to outperform the baseline. Extensive experiments conducted on a publicly available Tuberculosis X-ray dataset validate the computational efficiency and improved robustness achieved by our proposed architecture.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑