Abstract:Deep neural networks (DNNs) are widely used to handle many difficult tasks, such as image classification and malware detection, and achieve outstanding performance. However, recent studies on adversarial examples, which have maliciously undetectable perturbations added to their original samples that are indistinguishable by human eyes but mislead the machine learning approaches, show that machine learning models are vulnerable to security attacks. Though various adversarial retraining techniques have been developed in the past few years, none of them is scalable. In this paper, we propose a new iterative adversarial retraining approach to robustify the model and to reduce the effectiveness of adversarial inputs on DNN models. The proposed method retrains the model with both Gaussian noise augmentation and adversarial generation techniques for better generalization. Furthermore, the ensemble model is utilized during the testing phase in order to increase the robust test accuracy. The results from our extensive experiments demonstrate that the proposed approach increases the robustness of the DNN model against various adversarial attacks, specifically, fast gradient sign attack, Carlini and Wagner (C&W) attack, Projected Gradient Descent (PGD) attack, and DeepFool attack. To be precise, the robust classifier obtained by our proposed approach can maintain a performance accuracy of 99% on average on the standard test set. Moreover, we empirically evaluate the runtime of two of the most effective adversarial attacks, i.e., C&W attack and BIM attack, to find that the C&W attack can utilize GPU for faster adversarial example generation than the BIM attack can. For this reason, we further develop a parallel implementation of the proposed approach. This parallel implementation makes the proposed approach scalable for large datasets and complex models.

Defending Edge Computing Based Metaverse AI Against Adversarial Attacks.

EI-MTD: Moving Target Defense for Edge Intelligence Against Adversarial Attacks

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

Defed: an Edge-Feature-Enhanced Image Denoised Network Against Adversarial Attacks for Secure Internet of Things

Adversarial Attack and Defense: A Survey

An adversarial defense algorithm based on robust U-net

Defense Against Adversarial Attacks Using Image Label and Pixel Guided Sparse Denoiser

A Secure Data Interaction Method Based on Edge Computing

EdgeShield: A Universal and Efficient Edge Computing Framework for Robust AI

Mitigating Adversarial Attacks for Deep Neural Networks by Input Deformation and Augmentation

Defending Against Adversarial Attacks Using Digital Image Processing

DSCAE: a Denoising Sparse Convolutional Autoencoder Defense Against Adversarial Examples

Designing defensive techniques to handle adversarial attack on deep learning based model

A Robust Adversary Detection-Deactivation Method for Metaverse-oriented Collaborative Deep Learning

Super-Efficient Super Resolution for Fast Adversarial Defense at the Edge

Secure Machine Learning Against Adversarial Samples at Test Time

Defense against adversarial attacks on deep convolutional neural networks through nonlocal denoising

Meta Invariance Defense Towards Generalizable Robustness to Unknown Adversarial Attacks

A Framework for Robust Deep Learning Models Against Adversarial Attacks Based on a Protection Layer Approach

Detection defense against adversarial attacks with saliency map