Abstract:Deep convolutional neural networks have achieved great success in recent years. They have been widely used in various applications such as optical and SAR image scene classification, object detection and recognition, semantic segmentation, and change detection. However, deep neural networks rely on large-scale high-quality training data, and can only guarantee good performance when the training and test data are independently sampled from the same distribution. Deep convolutional neural networks are found to be vulnerable to subtle adversarial perturbations. This adversarial vulnerability prevents the deployment of deep neural networks in security-sensitive applications such as medical, surveillance, autonomous driving and military scenarios. This paper first presents a holistic view of security issues for deep convolutional neural network-based image recognition systems. The entire information processing chain is analyzed regarding safety and security risks. In particular, poisoning attacks and evasion attacks on deep convolutional neural networks are analyzed in detail. The root causes of adversarial vulnerabilities of deep recognition models are also discussed. Then, we give a formal definition of adversarial robustness and present a comprehensive review of adversarial attacks, adversarial defense, and adversarial robustness evaluation. Rather than listing existing research, we focus on the threat models for the adversarial attack and defense arms race. We perform a detailed analysis of several representative adversarial attacks on SAR image recognition models and provide an example of adversarial robustness evaluation. Finally, several open questions are discussed regarding recent research progress from our workgroup. This paper can be further used as a reference to develop more robust deep neural network-based image recognition models in dynamic adversarial scenarios.

Preemptive Image Robustification for Protecting Users against Man-in-the-Middle Adversarial Attacks

An adversarial defense algorithm based on robust U-net

Robust Image Classification: Defensive Strategies against FGSM and PGD Adversarial Attacks

Towards Robustifying Image Classifiers against the Perils of Adversarial Attacks on Artificial Intelligence Systems

Towards Robustness against Unsuspicious Adversarial Examples

Exploiting vulnerabilities of deep neural networks for privacy protection

Adversarial Robust Safeguard for Evading Deep Facial Manipulation

Toward Robust Image Classification

Defense Against Adversarial Attacks Using Image Label and Pixel Guided Sparse Denoiser

Robust width: A lightweight and certifiable adversarial defense

Image Super-Resolution as a Defense Against Adversarial Attacks

Analyzing Adversarial Robustness of Deep Neural Networks in Pixel Space: a Semantic Perspective

Adversarial Robustness of Deep Convolutional Neural Network-based Image Recognition Models: A Review

Defending Against Physically Realizable Attacks on Image Classification

Not So Robust After All: Evaluating the Robustness of Deep Neural Networks to Unseen Adversarial Attacks

Towards Deep Learning Models Resistant to Adversarial Attacks

Detecting and Mitigating Adversarial Perturbations for Robust Face Recognition

Evaluating the Robustness of Deep Learning Models against Adversarial Attacks: An Analysis with FGSM, PGD and CW

A New Defense Against Adversarial Images: Turning a Weakness into a Strength

Robust Pre-Processing: A Robust Defense Method Against Adversary Attack

DeepDefense: Training Deep Neural Networks with Improved Robustness.