Abstract:Deep convolutional neural networks have achieved great success in recent years. They have been widely used in various applications such as optical and SAR image scene classification, object detection and recognition, semantic segmentation, and change detection. However, deep neural networks rely on large-scale high-quality training data, and can only guarantee good performance when the training and test data are independently sampled from the same distribution. Deep convolutional neural networks are found to be vulnerable to subtle adversarial perturbations. This adversarial vulnerability prevents the deployment of deep neural networks in security-sensitive applications such as medical, surveillance, autonomous driving and military scenarios. This paper first presents a holistic view of security issues for deep convolutional neural network-based image recognition systems. The entire information processing chain is analyzed regarding safety and security risks. In particular, poisoning attacks and evasion attacks on deep convolutional neural networks are analyzed in detail. The root causes of adversarial vulnerabilities of deep recognition models are also discussed. Then, we give a formal definition of adversarial robustness and present a comprehensive review of adversarial attacks, adversarial defense, and adversarial robustness evaluation. Rather than listing existing research, we focus on the threat models for the adversarial attack and defense arms race. We perform a detailed analysis of several representative adversarial attacks on SAR image recognition models and provide an example of adversarial robustness evaluation. Finally, several open questions are discussed regarding recent research progress from our workgroup. This paper can be further used as a reference to develop more robust deep neural network-based image recognition models in dynamic adversarial scenarios.

Uncovering Hidden Vulnerabilities in Convolutional Neural Networks through Graph-based Adversarial Robustness Evaluation

Robustness of Deep Learning Models on Graphs: A Survey

Unsupervised Adversarially-Robust Representation Learning on Graphs

Improving Adversarial Robustness of 3D Point Cloud Classification Models

Graph Robustness Benchmark: Rethinking and Benchmarking Adversarial Robustness of Graph Neural Networks

Abstract Interpretation Based Robustness Certification For Graph Convolutional Networks

Robust Graph Convolutional Networks Against Adversarial Attacks

Explainable AI Security: Exploring Robustness of Graph Neural Networks to Adversarial Attacks

Understanding Structural Vulnerability in Graph Convolutional Networks

A Comprehensive Evaluation Framework for Deep Model Robustness

Comprehensive Analysis of Network Robustness Evaluation Based on Convolutional Neural Networks with Spatial Pyramid Pooling

Visual Analytics of Neuron Vulnerability to Adversarial Attacks on Convolutional Neural Networks

ERGCN: Data Enhancement-Based Robust Graph Convolutional Network Against Adversarial Attacks.

Robust Graph Convolutional Networks with Directional Graph Adversarial Training.

Expressivity of Graph Neural Networks Through the Lens of Adversarial Robustness

GraphDefense: Towards Robust Graph Convolutional Networks

Graph Robustness Benchmark: Benchmarking the Adversarial Robustness of Graph Machine Learning.

Vulnerable Point Detection and Repair Against Adversarial Attacks for Convolutional Neural Networks

Adversarial Robustness of Deep Convolutional Neural Network-based Image Recognition Models: A Review

Deep Insights into Graph Adversarial Learning: An Empirical Study Perspective.

Adversarial Defense Framework for Graph Neural Network