Abstract:Recently, it was found that deep neural networks (DNNs) are susceptible to adversarial input perturbations. Most defense strategies adopt the denoising method based on preprocessing, which mitigates the impacts of adversarial perturbations on DNNs by learning the distributions of nonadversarial datasets and projecting adversarial inputs into the learned nonadversarial manifolds. However, existing defense strategies commonly focus on reconstructing clean images while ignoring the role of adversarial perturbations, which results in the reconstructed images failing to achieve the visual quality and classification accuracy of the original clean images, and the induced adversarial robustness improvement is limited. This paper proposes a feature decoupling-interaction network (FDIN), which introduces the concepts of clean features and adversarial features to separate the two kinds of features from the input adversarial examples (AEs) in a feature decoupling-interaction manner. The clean features are used to reconstruct the input image so that it is infinitely close to the original clean image, and the adversarial features are used to reconstruct the adversarial perturbations. Adversarial perturbations are removed from the adversarial examples across multiple cross cycles to improve further the reconstructed image's visual quality and classification accuracy. The features of the original clean image are used as prior knowledge to guide the network to learn the clean features of the adversarial examples and improve the classification accuracy of the model on the clean examples. In addition, a classification loss function based on the Carlini & Wagner (CW) attack algorithm is used instead of the conventional cross-entropy loss function to improve the adversarial robustness of the FDIN. The experimental results show that the proposed method achieves better defense performance than the current state-of-the-art methods on both standard tests and various attack tests and even exceeds the test accuracy of the target classifier on the original test set.

Feature Decoupling Based Adversarial Examples Detection Method for Remote Sensing Scene Classification

Reconstruction-Assisted and Distance-Optimized Adversarial Training: A Defense Framework for Remote Sensing Scene Classification

Assessing the Threat of Adversarial Examples on Deep Neural Networks for Remote Sensing Scene Classification: Attacks and Defenses

An Empirical Study of Adversarial Examples on Remote Sensing Image Scene Classification

Generating Adversarial Examples Against Remote Sensing Scene Classification Via Feature Approximation

Dual-Branch Sparse Self-Learning with Instance Binding Augmentation for Adversarial Detection in Remote Sensing Images

Universal Adversarial Defense in Remote Sensing Based on Pre-trained Denoising Diffusion Models

Adversarial Example Generation Method for Object Detection in Remote Sensing Images

Adversarial Defense Method Based on Latent Representation Guidance for Remote Sensing Image Scene Classification.

Feature decoupling and interaction network for defending against adversarial examples

Attack Selectivity Of Adversarial Examples In Remote Sensing Image Scene Classification

Learning Adversarially Robust Object Detector with Consistency Regularization in Remote Sensing Images

Project Gradient Descent Adversarial Attack Against Multisource Remote Sensing Image Scene Classification

Attention-Aware Deep Feature Embedding for Remote Sensing Image Scene Classification

Adversarial Examples Detection with Enhanced Image Difference Features based on Local Histogram Equalization

Adversarial Examples in Remote Sensing

Detecting Adversarial Examples from Sensitivity Inconsistency of Spatial-Transform Domain

D3R-Net: Denoising Diffusion-Based Defense Restore Network for Adversarial Defense in Remote Sensing Scene Classification

Omni-detection of Adversarial Examples with Diverse Magnitudes

Adversarial Example in Remote Sensing Image Recognition

Feature Autoencoder for Detecting Adversarial Examples