Abstract:Extensive studies have revealed that the prevalent deep neural networks (DNNs) are vulnerable to adversarial examples in image recognition tasks. However, previous adversarial example attacks always work in either the global semantic space or local semantic attributes, resulting that these attacks may violate the sophisticated attackers' least-effort intentions, whereas adversarial perturbations due to the explicit semantic variations are probably perceived by human vision. In this paper, we propose a two-phase optimization modeling framework to devise a novel Critical Semantic Fusion guided least-effort Adversarial example attack (CSFAdv). Specifically, the first phase fuses the coarse-&fine-grained semantic maps to localize the latent critical semantic attention region (CSAR) from genuine image. Under the friendly guidance of CSAR-feasibility, the second phase absorbs the ReLU-penalization, -regularization and -limitation to formulate a Top-1&Top-2 misclassification optimization problem, which can characterize the holistic least-effort tampering behaviors embodied in localizing the most critical semantic space, doctoring the least amounts of pixels, injecting the limited amplitudes of perturbations and launching the most readily adversarial attacks. Further, to solve this NP-hard problem mildly, we adapt the gradient renewal by means of merging the momentum (past gradient), present gradient and Hessian (future gradient) to formalize a generalized gradient descent algorithm for generating an optimal adversarial image. Finally, we perform numerical experiments to verify the validity of our CSFAdv against seven types of DNN-based image classifiers on three public ImageNet, MNIST and CIFAR10. Empirical illustrations from ten evaluations indices shed light on the superiority of CSFAdv over eight kinds of state-of-the-art attacks and also offer key clues in reinforcing the DNNs' robustness.

ASP:A Fast Adversarial Attack Example Generation Framework based on Adversarial Saliency Prediction

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Sample-analysis Based Adversarial Attack with Saliency Map

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

Improving Query Efficiency of Black-box Adversarial Attack

ADSAttack: an Adversarial Attack Algorithm Via Searching Adversarial Distribution in Latent Space

A Fast Adversarial Sample Detection Approach for Industrial Internet-of-Things Applications.

Image Adversarial Example Generation Method Based on Adaptive Parameter Adjustable Differential Evolution

An efficient adversarial example generation algorithm based on an accelerated gradient iterative fast gradient

Efficient Adversarial Attack Based on Moment Estimation and Lookahead Gradient

Discriminator-free Generative Adversarial Attack

Query-Efficient Generation of Adversarial Examples for Defensive DNNs via Multi-Objective Optimization

Detection defense against adversarial attacks with saliency map

Robust Superpixel-Guided Attentional Adversarial Attack

Detecting Adversarial Image Examples in Deep Neural Networks with Adaptive Noise Reduction

SemanticAdv: Generating Adversarial Examples via Attribute-conditional Image Editing

CSFAdv: Critical Semantic Fusion Guided Least-Effort Adversarial Example Attacks

AdvJND: Generating Adversarial Examples with Just Noticeable Difference

Adversarial Examples Detection Beyond Image Space.

Invisible Adversarial Attack Against Deep Neural Networks: an Adaptive Penalization Approach

AutoAdversary: A Pixel Pruning Method for Sparse Adversarial Attack