Abstract:Deep convolutional neural networks have achieved great success in recent years. They have been widely used in various applications such as optical and SAR image scene classification, object detection and recognition, semantic segmentation, and change detection. However, deep neural networks rely on large-scale high-quality training data, and can only guarantee good performance when the training and test data are independently sampled from the same distribution. Deep convolutional neural networks are found to be vulnerable to subtle adversarial perturbations. This adversarial vulnerability prevents the deployment of deep neural networks in security-sensitive applications such as medical, surveillance, autonomous driving and military scenarios. This paper first presents a holistic view of security issues for deep convolutional neural network-based image recognition systems. The entire information processing chain is analyzed regarding safety and security risks. In particular, poisoning attacks and evasion attacks on deep convolutional neural networks are analyzed in detail. The root causes of adversarial vulnerabilities of deep recognition models are also discussed. Then, we give a formal definition of adversarial robustness and present a comprehensive review of adversarial attacks, adversarial defense, and adversarial robustness evaluation. Rather than listing existing research, we focus on the threat models for the adversarial attack and defense arms race. We perform a detailed analysis of several representative adversarial attacks on SAR image recognition models and provide an example of adversarial robustness evaluation. Finally, several open questions are discussed regarding recent research progress from our workgroup. This paper can be further used as a reference to develop more robust deep neural network-based image recognition models in dynamic adversarial scenarios.

Adversarial Attack and Defence on Handwritten Chinese Character Recognition

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

SmartHandwriting: Handwritten Chinese Character Recognition with Smartwatch.

Improved Deep Convolutional Neural Network For Online Handwritten Chinese Character Recognition using Domain-Specific Knowledge

Writing Style Adversarial Network for Handwritten Chinese Character Recognition

Attacking Optical Character Recognition (OCR) Systems with Adversarial Watermarks

A Modified Inception-ResNet Network with Discriminant Weighting Loss for Handwritten Chinese Character Recognition

Occluded offline handwritten Chinese character recognition using deep convolutional generative adversarial network and improved GoogLeNet

Offline Handwritten Chinese Character Using Convolutional Neural Network: State-of-the-Art Methods

Application of Convolutional Neural Network in Handwritten Chinese Character Recognition

Deep Matching Network for Handwritten Chinese Character Recognition

A Comprehensive Analysis of Misclassified Handwritten Chinese Character Samples by Incorporating Human Recognition

Adaptively Transfer Category-Classifier for Handwritten Chinese Character Recognition.

A Comprehensive Study of Hybrid Neural Network Hidden Markov Model for Offline Handwritten Chinese Text Recognition.

Deep Convolutional Neural Networks Based on Knowledge Distillation for Offline Handwritten Chinese Character Recognition

Zero-shot Generation of Training Data with Denoising Diffusion Probabilistic Model for Handwritten Chinese Character Recognition

Offline Handwritten Chinese Text Recognition with Convolutional Neural Networks

How Can We Deal with Adversarial Examples?

Towards a Robust Deep Neural Network Against Adversarial Texts: A Survey.

Deep Network with Pixel-Level Rectification and Robust Training for Handwriting Recognition

Adversarial Robustness of Deep Convolutional Neural Network-based Image Recognition Models: A Review