Abstract:Deep Neural Networks (DNNs) have been shown to be vulnerable to adversarial examples. The existence of adversarial examples significantly hinders the development of deep learning technologies in domains with high-security requirements. However, current defense methods often lack universality, being effective only against specific adversarial attacks. This study focuses on analyzing adversarial examples through changes in model attention, classifying attack algorithms into attention-shifting and attention-attenuation categories. To counter attention-shifting attacks, a defense module named Feature Pyramid-based Attention Space-guided (FPAS) is proposed, which spatially retracts the shifting attention in adversarial examples, thereby enhancing the model's overall defense capability. Attention-based Non-Local (ANL) is a proposed defense module to counter attention-attenuation attacks. This module enhances the model's focus on critical features, efficiently constructing a robust defense model with low implementation cost and minimal intrusion into the original model. By integrating FPAS and ANL into the Wide-ResNet model within a boosting framework, the study demonstrates their synergistic defense capability. Even with eight adversarial samples embedded with adversarial patches, our FPAS_at and ANL_at models demonstrated significant improvements over the baseline, enhancing the average defense rate by 5.47% and 7.74%, respectively. Extensive experiments confirm that this universal defense strategy offers comprehensive protection against adversarial attacks at a lower implementation cost compared to current mainstream defense methods, while also being adaptable for integration with existing defense strategies to further enhance adversarial robustness.

RegionSparse: Leveraging Sparse Coding and Object Localization to Counter Adversarial Attacks

An Adversarial Attack Via Feature Contributive Regions

Sparse Coding Frontend for Robust Neural Networks

Transformation-Based Adversarial Defense Via Sparse Representation.

Mitigating Adversarial Perturbations Via Weakly Supervised Object Location and Regions Recombination

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

Sparse and Imperceivable Adversarial Attacks

Low Frequency Sparse Adversarial Attack

Robust Sparse Regularization: Defending Adversarial Attacks Via Regularized Sparse Network

Defense Against Adversarial Attacks Using Image Label and Pixel Guided Sparse Denoiser

SparseTT: Visual Tracking with Sparse Transformers

Adversarial Attacks on Video Object Segmentation with Hard Region Discovery

Adaptive momentum variance for attention-guided sparse adversarial attacks

Defense against adversarial attacks based on color space transformation

Object-Attentional Untargeted Adversarial Attack

Defending Adversarial Patches via Joint Region Localizing and Inpainting

A Sparsity-Limitation-Based High-Dimensional Distribution Searching Algorithm for Adversarial Attack

Sparse Adversarial Video Attacks Via Superpixel-Based Jacobian Computation

Trust Region Based Adversarial Attack on Neural Networks

Structure-Preserving Progressive Low-rank Image Completion for Defending Adversarial Attacks

Reinforcement Learning Based Sparse Black-box Adversarial Attack on Video Recognition Models