Sigma-UAP: An Invisible Semi-Universal Adversarial Attack Against Deep Neural Networks

Feiyang Qin,Wenqi Na,Song Gao,Shaowen Yao
DOI: https://doi.org/10.1109/PRMVIA58252.2023.00012
2023-01-01
Abstract:Although deep neural networks (DNNs) have achieved exceptional performance, they are shown to be fragile to universal adversarial perturbations (UAP), which can be applied to any images to fool a well-trained DNN. Several methods have been proposed to design universal perturbations. However, these methods often leave visible traces in natural images. In this paper, we propose Sigma-UAP, a semi-universal adversarial attack, to enhance the quasi-imperceptibility of universal adversarial perturbations, in which the Sigma-map algorithm is leveraged to hide perturbations by identifying the low-frequency region of the image and eliminating the perturbations in that region. Then, we use a simple matrix calculation to augment the perturbation in the high-frequency region to ensure the attack effectiveness of the perturbation. The extensive empirical experiments show that, compared with the state-of-the-art universal adversarial attacks, Sigma-UAP method obtains excellent attack capabilities in visual effect and attack success rate.
What problem does this paper attempt to address?