Abstract:Deep convolutional neural networks have achieved great success in recent years. They have been widely used in various applications such as optical and SAR image scene classification, object detection and recognition, semantic segmentation, and change detection. However, deep neural networks rely on large-scale high-quality training data, and can only guarantee good performance when the training and test data are independently sampled from the same distribution. Deep convolutional neural networks are found to be vulnerable to subtle adversarial perturbations. This adversarial vulnerability prevents the deployment of deep neural networks in security-sensitive applications such as medical, surveillance, autonomous driving and military scenarios. This paper first presents a holistic view of security issues for deep convolutional neural network-based image recognition systems. The entire information processing chain is analyzed regarding safety and security risks. In particular, poisoning attacks and evasion attacks on deep convolutional neural networks are analyzed in detail. The root causes of adversarial vulnerabilities of deep recognition models are also discussed. Then, we give a formal definition of adversarial robustness and present a comprehensive review of adversarial attacks, adversarial defense, and adversarial robustness evaluation. Rather than listing existing research, we focus on the threat models for the adversarial attack and defense arms race. We perform a detailed analysis of several representative adversarial attacks on SAR image recognition models and provide an example of adversarial robustness evaluation. Finally, several open questions are discussed regarding recent research progress from our workgroup. This paper can be further used as a reference to develop more robust deep neural network-based image recognition models in dynamic adversarial scenarios.

On Adversarial Robustness of Deep Image Deblurring

Watch out! Motion is Blurring Blurring the Vision of Your Deep Neural Networks

Watch out! Motion is Blurring the Vision of Your Deep Neural Networks

Ambiguity in solving imaging inverse problems with deep learning based operators

Watch out! motion is blluurrrri inngg the vision of your deep neural networks

Adversarial Robustness of Deep Convolutional Neural Network-based Image Recognition Models: A Review

ABBA: Saliency-Regularized Motion-Based Adversarial Blur Attack.

A Black-box Adversarial Attack Strategy with Adjustable Sparsity and Generalizability for Deep Image Classifiers

Exploring the Robustness of Deep Image Despeckling Models in an Adversarial Perspective

AdvBokeh: Learning to Adversarially Defocus Blur

Deep Image Destruction: Vulnerability of Deep Image-to-Image Models against Adversarial Attacks

Blurring Fools the Network - Adversarial Attacks by Feature Peak Suppression and Gaussian Blurring

Training on Foveated Images Improves Robustness to Adversarial Attacks

Evaluating the Robustness of Deep Learning Models against Adversarial Attacks: An Analysis with FGSM, PGD and CW

Deep Robust Image Deblurring Via Blur Distilling and Information Comparison in Latent Space.

Adversarial Purification and Fine-tuning for Robust UDC Image Restoration

Evaluating Similitude and Robustness of Deep Image Denoising Models via Adversarial Attack

Local Competition and Uncertainty for Adversarial Robustness in Deep Learning

Image Deblurring Using Robust Sparsity Priors

Detecting and Mitigating Adversarial Perturbations for Robust Face Recognition