arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2409.04208cs.CV

学习可迁移的生成式攻击以提升行人重识别模型鲁棒性

Learning to Learn Transferable Generative Attack for Person Re-Identification

Yuan Bian, Min Liu, Xueping Wang, Yunfeng Ma, Yaonan Wang

AI总结:

针对行人重识别模型的对抗攻击迁移性不足问题,提出元迁移生成攻击(MTGA)方法,通过元学习模拟跨模型、数据集、测试黑盒攻击任务,提升对抗样本迁移性,实验表明其在跨场景攻击中显著优于现有方法。

摘要:

基于深度学习的行人重识别(re-id)模型广泛应用于监控系统,不可避免地继承了深度网络对对抗攻击的脆弱性。现有攻击仅考虑跨数据集和跨模型迁移性,忽略了扰动不同领域训练模型的跨测试能力。为有效检验实际re-id模型的鲁棒性,提出元迁移生成攻击(MTGA)方法,通过元学习优化,让生成式攻击者通过学习全面模拟的跨模型、数据集、测试黑盒元攻击任务,产生高迁移性对抗样本。具体而言,首先通过选择不同re-id模型和数据集模拟跨模型、数据集黑盒攻击任务;由于不同模型可能关注不同特征区域,设计扰动随机擦除模块防止攻击者仅破坏模型特定特征;为提升跨测试迁移性,引入归一化混合策略,通过混合目标模型的多域统计信息模拟多样特征嵌入空间。大量实验表明MTGA的优越性,尤其在跨模型、数据集和跨模型、数据集、测试攻击中,MTGA在平均mAP下降率上分别超过SOTA方法21.5%和11.3%。代码将在论文接受后发布。

英文摘要:

Deep learning-based person re-identification (re-id) models are widely employed in surveillance systems and inevitably inherit the vulnerability of deep networks to adversarial attacks. Existing attacks merely consider cross-dataset and cross-model transferability, ignoring the cross-test capability to perturb models trained in different domains. To powerfully examine the robustness of real-world re-id models, the Meta Transferable Generative Attack (MTGA) method is proposed, which adopts meta-learning optimization to promote the generative attacker producing highly transferable adversarial examples by learning comprehensively simulated transfer-based cross-model\&dataset\&test black-box meta attack tasks. Specifically, cross-model\&dataset black-box attack tasks are first mimicked by selecting different re-id models and datasets for meta-train and meta-test attack processes. As different models may focus on different feature regions, the Perturbation Random Erasing module is further devised to prevent the attacker from learning to only corrupt model-specific features. To boost the attacker learning to possess cross-test transferability, the Normalization Mix strategy is introduced to imitate diverse feature embedding spaces by mixing multi-domain statistics of target models. Extensive experiments show the superiority of MTGA, especially in cross-model\&dataset and cross-model\&dataset\&test attacks, our MTGA outperforms the SOTA methods by 21.5\% and 11.3\% on mean mAP drop rate, respectively. The code of MTGA will be released after the paper is accepted.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑