Abstract:Deep neural networks (DNNs) are widely used to handle many difficult tasks, such as image classification and malware detection, and achieve outstanding performance. However, recent studies on adversarial examples, which have maliciously undetectable perturbations added to their original samples that are indistinguishable by human eyes but mislead the machine learning approaches, show that machine learning models are vulnerable to security attacks. Though various adversarial retraining techniques have been developed in the past few years, none of them is scalable. In this paper, we propose a new iterative adversarial retraining approach to robustify the model and to reduce the effectiveness of adversarial inputs on DNN models. The proposed method retrains the model with both Gaussian noise augmentation and adversarial generation techniques for better generalization. Furthermore, the ensemble model is utilized during the testing phase in order to increase the robust test accuracy. The results from our extensive experiments demonstrate that the proposed approach increases the robustness of the DNN model against various adversarial attacks, specifically, fast gradient sign attack, Carlini and Wagner (C&W) attack, Projected Gradient Descent (PGD) attack, and DeepFool attack. To be precise, the robust classifier obtained by our proposed approach can maintain a performance accuracy of 99% on average on the standard test set. Moreover, we empirically evaluate the runtime of two of the most effective adversarial attacks, i.e., C&W attack and BIM attack, to find that the C&W attack can utilize GPU for faster adversarial example generation than the BIM attack can. For this reason, we further develop a parallel implementation of the proposed approach. This parallel implementation makes the proposed approach scalable for large datasets and complex models.

Hardening Deep Neural Networks in Condition Monitoring Systems against Adversarial Example Attacks

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Adversarial Attacks on Neural-Network-Based Soft Sensors: Directly Attack Output

Robust Adversarial Attacks on Imperfect Deep Neural Networks in Fault Classification

DeepDefense: Training Deep Neural Networks with Improved Robustness.

Adversarial Attack? Don't Panic

Deep Defense: Training DNNs with Improved Adversarial Robustness

Complete Defense Framework to Protect Deep Neural Networks Against Adversarial Examples

Adversarial Examples: Attacks and Defenses for Deep Learning

Mitigating Adversarial Attacks for Deep Neural Networks by Input Deformation and Augmentation

Secure Machine Learning Against Adversarial Samples at Test Time

The Vulnerability of the Neural Networks Against Adversarial Examples in Deep Learning Algorithms

Practical Black-Box Attacks against Deep Learning Systems using Adversarial Examples

Assessing the Threat of Adversarial Examples on Deep Neural Networks for Remote Sensing Scene Classification: Attacks and Defenses

Adversarial Attacks and Defenses in Fault Detection and Diagnosis: A Comprehensive Benchmark on the Tennessee Eastman Process

Hybrid Defense for Deep Neural Networks: an Integration of Detecting and Cleaning Adversarial Perturbations.

Adversarial Attacks and Defenses in Deep Learning: From a Perspective of Cybersecurity

Are You Confident That You Have Successfully Generated Adversarial Examples?

Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks

Mitigating Deep Learning Vulnerabilities from Adversarial Examples Attack in the Cybersecurity Domain