Abstract:Despite of its tremendous popularity and success in computer vision (CV) and natural language processing, deep learning is inherently vulnerable to adversarial attacks in which adversarial examples (AEs) are carefully crafted by imposing imperceptible perturbations on the clean examples to deceive the target deep neural networks (DNNs). Many defense solutions in CV have been proposed. However, most of them, e.g., adversarial training, suffer from a low generality due to the reliance on limited AEs. Moreover, some solutions even have a non-negligible negative impact on the classification accuracy of clean examples. Last but not least, they are impotent against the unconstrained attacks in which the attackers optimize the perturbation direction and size by additionally taking the defense methods into accounts. In this article, we propose GRIP-GAN to learn a general robust inverse perturbation (GRIP), which is not only able to offset any potential adversarial perturbations but also strengthen the target class-related features, purely from the clean images via a generative adversarial network (GAN). By feeding a random noise, GRIP-GAN is able to generate a dynamic GRIP for each input image to defend against unconstrained attacks. To further improve the defense performance, we also enable GRIP-GAN to generate a GRIP tailored to each input image via feeding input image specific noise to GRIP-GAN. Extensive experiments are carried out on MNIST, CIFAR10, and ImageNet datasets against 17 adversarial attacks. The results show that GRIP-GAN outperforms all the baselines. We further share insights on the success of GRIP-GAN and provide visualized proofs.

Deep Reverse Attack on SIFT Features With a Coarse-to-Fine GAN Model

The Secret Revealer: Generative Model-Inversion Attacks Against Deep Neural Networks

NetGuard: Protecting Commercial Web APIs from Model Inversion Attacks Using GAN-generated Fake Samples

No One Can Escape: A General Approach to Detect Tampered and Generated Image

A GAN-Based Defense Framework Against Model Inversion Attacks.

An Adversarial Attack Via Feature Contributive Regions

Exploiting Defenses against GAN-Based Feature Inference Attacks in Federated Learning

A Closer Look at GAN Priors: Exploiting Intermediate Features for Enhanced Model Inversion Attacks

GIFD: A Generative Gradient Inversion Method with Feature Domain Optimization

ConfounderGAN: Protecting Image Data Privacy with Causal Confounder

Reconstruct Face from Features Using GAN Generator as a Distribution Constraint

APE-GAN: Adversarial Perturbation Elimination with GAN.

GRIP-GAN: an Attack-Free Defense Through General Robust Inverse Perturbation

Learning to Disentangle GAN Fingerprint for Fake Image Attribution

An Improved GAN-based Depth Estimation Network for Face Anti-Spoofing.

Reconstruct Face from Features Based on Genetic Algorithm Using GAN Generator As a Distribution Constraint

ExS-GAN: Synthesizing Anti-Forensics Images via Extra Supervised GAN

Defending against GAN-based Deepfake Attacks via Transformation-aware Adversarial Faces

Exploring Adversarial Fake Images on Face Manifold

DA-HFNet: Progressive Fine-Grained Forgery Image Detection and Localization Based on Dual Attention

Privacy preservation for image data: A GAN‐based method