Abstract:With the increasing attention to deep neural network (DNN) models, attacks are also upcoming for such models. For example, an attacker may carefully construct images in specific ways (also referred to as adversarial examples) aiming to mislead the DNN models to output incorrect classification results. Similarly, many efforts are proposed to detect and mitigate adversarial examples, usually for certain dedicated attacks. In this paper, we propose a novel digital watermark-based method to generate image adversarial examples to fool DNN models. Specifically, partial main features of the watermark image are embedded into the host image almost invisibly, aiming to tamper with and damage the recognition capabilities of the DNN models. We devise an efficient mechanism to select host images and watermark images and utilize the improved discrete wavelet transform (DWT) based Patchwork watermarking algorithm with a set of valid hyperparameters to embed digital watermarks from the watermark image dataset into original images for generating image adversarial examples. The experimental results illustrate that the attack success rate on common DNN models can reach an average of 95.47% on the CIFAR-10 dataset and the highest at 98.71%. Besides, our scheme is able to generate a large number of adversarial examples efficiently, concretely, an average of 1.17 seconds for completing the attacks on each image on the CIFAR-10 dataset. In addition, we design a baseline experiment using the watermark images generated by Gaussian noise as the watermark image dataset that also displays the effectiveness of our scheme. Similarly, we also propose the modified discrete cosine transform (DCT) based Patchwork watermarking algorithm. To ensure repeatability and reproducibility, the source code is available on GitHub.

Improving Visual Quality of Unrestricted Adversarial Examples with Wavelet-VAE

Targeted Adversarial Examples Generating Method Based on cVAE in Black Box Settings

Learning from Attacks: Attacking Variational Autoencoder for Improving Image Classification

DCVAE-adv: A Universal Adversarial Example Generation Method for White and Black Box Attacks

Wavelets to the Rescue: Improving Sample Quality of Latent Variable Deep Generative Models

Fine-grained Synthesis of Unrestricted Adversarial Examples

Towards Transferable Unrestricted Adversarial Examples with Minimum Changes

Wasserstein Adversarial Examples on Univariant Time Series Data

Wavelet Regularization Benefits Adversarial Training

Perception Improvement for Free: Exploring Imperceptible Black-box Adversarial Attacks on Image Classification

Unrevealed Threats: A Comprehensive Study of the Adversarial Robustness of Underwater Image Enhancement Models

Content-based Unrestricted Adversarial Attack

Break the Visual Perception: Adversarial Attacks Targeting Encoded Visual Tokens of Large Vision-Language Models

ADSAttack: an Adversarial Attack Algorithm Via Searching Adversarial Distribution in Latent Space

Exploring aesthetic procedural noise for crafting model-agnostic universal adversarial perturbations

Towards Imperceptible and Robust Adversarial Example Attacks Against Neural Networks

Generating Adversarial Samples by Manipulating Image Features with Auto-Encoder

Generating Image Adversarial Examples by Embedding Digital Watermarks

Generate Adversarial Examples Combined with Image Entropy Distribution

Adversarial Attacks on Video Quality Assessment Models

Efficient Generation of Targeted and Transferable Adversarial Examples for Vision-Language Models Via Diffusion Models