Abstract:Deep neural network-based video classification models enjoy widespread use because of their superior performance on visual tasks. However, with its broad-based application comes a deep-rooted concern about its security aspect. Recent research signals highlight these models' high susceptibility to deception by adversarial examples. These adversarial examples, subtly laced with humanly imperceptible noise, escape the scope of human detection while posing a substantial risk to the integrity and security of these deep neural network constructs. Considerable research has been directed toward image-based adversarial examples, resulting in notable advances in understanding and combating such adversarial attacks within that scope. However, video-based adversarial attacks highlight a different landscape of complexities and challenges. The nuances of motion information, temporal coherence, and frame-to-frame correlation introduce a multidimensional battlefield, necessitating purpose-built solutions. The most straightforward implementation of adversarial attacks uses the fast gradient sign method (FGSM). Unfortunately, FGSM attacks lack several respects: the attack success rates are far from satisfactory, they are frequently easily identifiable, and their stealth measures do not pass muster in rigorous environments. Therefore, this study introduces a novel nonlinear conjugate gradient attack method inspired by the nonlinear conjugate gradient descent method. By relaxing the search step size constraints to comply with the strong Wolfe conditions, we aimed to maintain pace with the increasing loss value of our objective function. This critical enhancement helps maintain the trajectory of each iteration's search direction and the simultaneous increase in the loss value, thereby yielding more consistent results, which ensures that our attack method can achieve a high attack success rate and concealment after each iteration. Further invigorating testament to our approach's efficacy came through experimental results on the UCF101 dataset, underlining an impressive 91％ attack success rate when the perturbation upper limit is 3/255. Our method consistently and markedly outshone the FGSM in attack success rates across various perturbation thresholds—even as it offered superior stealth. More critically, it allowed us to strike an effective balance between the attack success rate and runtime, a potent recipe for a disruptive contribution to the fraternity of adversarial attacks in video classification models. This adversarial attack method considers generating video adversarial examples from an optimization perspective. This represents a step forward in the ongoing drive to develop robust, reliable, and efficient techniques to understand adversarial attacks, specifically for deep neural network-based video classification models.

Motion-Excited Sampler: Video Adversarial Attack with Sparked Prior

DVS-Attacks: Adversarial Attacks on Dynamic Vision Sensors for Spiking Neural Networks

Sparse Adversarial Video Attacks Via Superpixel-Based Jacobian Computation

Reinforcement Learning Based Sparse Black-box Adversarial Attack on Video Recognition Models

Sparse Adversarial Perturbations for Videos

Exploring Vulnerabilities in Spiking Neural Networks: Direct Adversarial Attacks on Raw Event Data

Enhancing robustness in video recognition models: Sparse adversarial attacks and beyond

Adversarial Attacks on Videos Based on the Conjugate Gradient Method

Heuristic Black-box Adversarial Attacks on Video Recognition Models

Adversarial Attacks on Video Quality Assessment Models

SVASTIN: Sparse Video Adversarial Attack via Spatio-Temporal Invertible Neural Networks

Efficient Sparse Attacks on Videos Using Reinforcement Learning.

SPARK: Spatial-Aware Online Incremental Attack Against Visual Tracking

Adaptive momentum variance for attention-guided sparse adversarial attacks

Adaptive Temporal Grouping for Black-box Adversarial Attacks on Videos

Black-box Adversarial Attacks on Video Recognition Models

Bullet-Screen-Emoji Attack with Temporal Difference Noise for Video Action Recognition

A Motional but Temporally Consistent Physical Video Examples

Finding Achilles' Heel

Adversarial attacks on spiking convolutional neural networks for event-based vision

Defense for adversarial videos by self-adaptive JPEG compression and optical texture.