Abstract:Extensive studies have revealed that the prevalent deep neural networks (DNNs) are vulnerable to adversarial examples in image recognition tasks. However, previous adversarial example attacks always work in either the global semantic space or local semantic attributes, resulting that these attacks may violate the sophisticated attackers' least-effort intentions, whereas adversarial perturbations due to the explicit semantic variations are probably perceived by human vision. In this paper, we propose a two-phase optimization modeling framework to devise a novel Critical Semantic Fusion guided least-effort Adversarial example attack (CSFAdv). Specifically, the first phase fuses the coarse-&fine-grained semantic maps to localize the latent critical semantic attention region (CSAR) from genuine image. Under the friendly guidance of CSAR-feasibility, the second phase absorbs the ReLU-penalization, -regularization and -limitation to formulate a Top-1&Top-2 misclassification optimization problem, which can characterize the holistic least-effort tampering behaviors embodied in localizing the most critical semantic space, doctoring the least amounts of pixels, injecting the limited amplitudes of perturbations and launching the most readily adversarial attacks. Further, to solve this NP-hard problem mildly, we adapt the gradient renewal by means of merging the momentum (past gradient), present gradient and Hessian (future gradient) to formalize a generalized gradient descent algorithm for generating an optimal adversarial image. Finally, we perform numerical experiments to verify the validity of our CSFAdv against seven types of DNN-based image classifiers on three public ImageNet, MNIST and CIFAR10. Empirical illustrations from ten evaluations indices shed light on the superiority of CSFAdv over eight kinds of state-of-the-art attacks and also offer key clues in reinforcing the DNNs' robustness.

Robust Source Camera Identification Against Adversarial Attacks

Improving Adversarial Robustness of 3D Point Cloud Classification Models

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

A Deep Learning Framework for Image Authentication: An Automatic Source Camera Identification Deep-Net

Adversarial Analysis for Source Camera Identification

SCA: Highly Efficient Semantic-Consistent Unrestricted Adversarial Attack

Source Camera Identification with Multi-Scale Feature Fusion Network

D2Defend: Dual-Domain based Defense against Adversarial Examples

DeepDefense: Training Deep Neural Networks with Improved Robustness.

CAP: Robust Point Cloud Classification Via Semantic and Structural Modeling.

Robust Convolutional Neural Networks Against Adversarial Attacks on Medical Images

CamoNet: A Target Camouflage Network for Remote Sensing Images Based on Adversarial Attack

Exploring Robust Features for Improving Adversarial Robustness

Generalizing Source Camera Identification Based on Integral Image Optimization and Constrained Neural Network

Privacy-preserving Universal Adversarial Defense for Black-box Models

SPN-CNN: Boosting Sensor-Based Source Camera Attribution With Deep Learning

Attacking Important Pixels for Anchor-free Detectors

Detect and defense against adversarial examples in deep learning using natural scene statistics and adaptive denoising

Adversarial Robustness of Deep Learning Methods for SAR Image Classification: an Explainability View

CSFAdv: Critical Semantic Fusion Guided Least-Effort Adversarial Example Attacks