arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2401.14031cs.LGcs.CRcs.CV
收藏

稀疏且可迁移的通用奇异向量攻击

Sparse and Transferable Universal Singular Vectors Attack

Sber AI Lab(Sber AI实验室);Skolkovo Institute of Science and Technology(斯科尔科沃科学技术学院);Moscow Institute of Physics and Technology(莫斯科物理技术学院);Artificial Intelligence Research Institute (AIRI)(人工智能研究院(AIRI))

Kseniia Kuvshinova, Olga Tsymboi, Ivan Oseledets

AI总结:

提出基于截断幂迭代与 $(p,q)$-奇异向量的稀疏通用白盒攻击,在 ImageNet 上以 5% 像素达到逾 50% 愚弄率,并展现高跨模型可迁移性。

摘要:

对抗攻击与模型脆弱性领域的研究是现代机器学习的基础方向之一。近期研究揭示了脆弱性现象,理解其背后机制对于改善神经网络特性和可解释性至关重要。本文提出一种新颖的稀疏通用白盒对抗攻击。该方法基于截断幂迭代,使雅可比矩阵隐藏层的 $(p,q)$-奇异向量具备稀疏性。利用 ImageNet 基准验证子集,我们在多种设置下分析所提方法,仅损坏 5% 的像素并使用 256 个样本进行扰动拟合,便取得与稠密基线相当的结果,愚弄率超过 50%。我们还表明,该算法允许更高的攻击幅度,同时不影响人类完成任务的能力。此外,我们研究发现所构造的扰动在不同模型之间具有高度可迁移性,且愚弄率不会显著下降。研究结果证明了最先进模型对稀疏攻击的脆弱性,并强调了开发鲁棒机器学习系统的重要性。

英文摘要:

The research in the field of adversarial attacks and models' vulnerability is one of the fundamental directions in modern machine learning. Recent studies reveal the vulnerability phenomenon, and understanding the mechanisms behind this is essential for improving neural network characteristics and interpretability. In this paper, we propose a novel sparse universal white-box adversarial attack. Our approach is based on truncated power iteration providing sparsity to $(p,q)$-singular vectors of the hidden layers of Jacobian matrices. Using the ImageNet benchmark validation subset, we analyze the proposed method in various settings, achieving results comparable to dense baselines with more than a 50% fooling rate while damaging only 5% of pixels and utilizing 256 samples for perturbation fitting. We also show that our algorithm admits higher attack magnitude without affecting the human ability to solve the task. Furthermore, we investigate that the constructed perturbations are highly transferable among different models without significantly decreasing the fooling rate. Our findings demonstrate the vulnerability of state-of-the-art models to sparse attacks and highlight the importance of developing robust machine learning systems.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑