Abstract:Some recent studies have demonstrated that the deep neural network (DNN) is vulnerable to adversarial examples, which contain some subtle and human-imperceptible perturbations. Although numerous countermeasures have been proposed and play a significant role, most of them all have some flaws and are only effective for certain types of adversarial examples. In the paper, we present a novel and universal countermeasure to recover multiple types of adversarial examples to benign examples before they are fed into the deep neural network. The idea is to model the mapping between adversarial examples and benign examples using a generative adversarial network (GAN). Its GAN architecture consists of a generator based on UNET, a discriminator based on ACGAN, and a newly added third-party classifier. The UNET can enhance the capacity of the generator to recover adversarial examples to benign examples. The loss function makes full use of the advantages of ACGAN and WGAN-GP to ensure the stability of the training process and accelerate its convergence. Besides, a classification loss and a perceptual loss, all from the third-party classifier, are employed to improve further the generator's capacity to eliminate adversarial perturbations. Experiments are conducted on the MNIST, CIFAR10, and IMAGENET datasets. First, we perform ablation experiments to prove the proposed countermeasure's validity. Then, we defend against seven types of state-of-the-art adversarial examples on four deep neural networks and compare them with six existing countermeasures. Finally, the experimental results demonstrate that the proposed countermeasure is universal and has a more excellent performance than other countermeasures. The experimental code is available at https://github.com/Afreadyang/IAED-GAN.

Self-Recoverable Adversarial Examples: A New Effective Protection Mechanism in Social Networks

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Towards Efficient Data Free Blackbox Adversarial Attack

Recessive Social Networking: Preventing Privacy Leakage against Reverse Image Search

Improving Model Robustness Against Adversarial Examples with Redundant Fully Connected Layer.

RA-RevGAN: Region-Aware Reversible Adversarial Example Generation Network for Privacy-Preserving Applications

Trustworthy adaptive adversarial perturbations in social networks

Are You Confident That You Have Successfully Generated Adversarial Examples?

SocialGuard: An adversarial example based privacy-preserving technique for social images

A novel and universal GAN-based countermeasure to recover adversarial examples to benign examples

Dual Protection for Image Privacy and Copyright Via Traceable Adversarial Examples

GCSA: A New Adversarial Example-Generating Scheme Towards Black-Box Adversarial Attacks

Improved Forward-Backward Propagation To Generate Adversarial Examples

Understanding and Enhancing the Transferability of Adversarial Examples

Reversible Attack based on Local Visual Adversarial Perturbation

Adversarial Examples on Object Recognition: A Comprehensive Survey

An efficient adversarial example generation algorithm based on an accelerated gradient iterative fast gradient

Defending Against Adversarial Examples Using Perceptual Image Hashing

Protecting Privacy in Shared Photos Via Adversarial Examples Based Stealth

Generating Adversarial Examples with Adversarial Networks

Generating Robust Adversarial Examples against Online Social Networks (OSNs)