Abstract:Compared with traditional machine learning models, deep neural networks perform better, especially in image classification tasks. However, they are vulnerable to adversarial examples. Adding small perturbations on examples causes a good-performance model to misclassify the crafted examples, without category differences in the human eyes, and fools deep models successfully. There are two requirements for generating adversarial examples: the attack success rate and image fidelity metrics. Generally, the magnitudes of perturbation are increased to ensure the adversarial examples’ high attack success rate; however, the adversarial examples obtained have poor concealment. To alleviate the tradeoff between the attack success rate and image fidelity, we propose a method named AdvJND, adding visual model coefficients, just noticeable difference, in the constraint of a distortion function when generating adversarial examples. In fact, the visual subjective feeling of the human eyes is added as a priori information, which decides the distribution of perturbations, to improve the image quality of adversarial examples. We tested our method on the FashionMNIST, CIFAR10, and MiniImageNet datasets. Our adversarial examples keep high image quality under slightly decreasing attack success rate. Since our AdvJND algorithm yield gradient distributions that are similar to those of the original inputs, the crafted noise can be hidden in the original inputs, improving the attack concealment significantly.

Improved Forward-Backward Propagation To Generate Adversarial Examples

Towards Robust DNNs: an Taylor Expansion-Based Method for Generating Powerful Adversarial Examples.

An Adversarial Attack Via Feature Contributive Regions

Adv-BDPM: Adversarial Attack Based on Boundary Diffusion Probability Model.

Adversarial Transformation Network with Adaptive Perturbations for Generating Adversarial Examples.

Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction

Hlr: Generating Adversarial Examples By High-Level Representations

Robust Attack with Adaptive Compress Adversarial Perturbations

Research on an Adaptive Neural Network K-Pixel Adversarial Example Generation Algorithm.

An efficient adversarial example generation algorithm based on an accelerated gradient iterative fast gradient

Enhancing the Transferability of Adversarial Examples with Noise Reduced Gradient

Improving the Transferability of Adversarial Examples with New Iteration Framework and Input Dropout

Are You Confident That You Have Successfully Generated Adversarial Examples?

Boosting the Transferability of Adversarial Examples Via Adaptive Attention and Gradient Purification Methods

AdvJND: Generating Adversarial Examples with Just Noticeable Difference

Image Adversarial Example Generation Method Based on Adaptive Parameter Adjustable Differential Evolution

Mitigating Adversarial Perturbations Via Weakly Supervised Object Location and Regions Recombination

Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks

An Effective Way to Boost Black-Box Adversarial Attack.

Compound Adversarial Examples in Deep Neural Networks

Improving Adversarial Transferability with Neighbourhood Gradient Information