Effective Universal Unrestricted Adversarial Attacks using a MOE Approach
Fuente:
arXiv
Salvato in:
| Autori principali: | , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2021
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866914342490865664 |
|---|---|
| author | Baia, A. E. Di Bari, G. Poggioni, V. |
| author_facet | Baia, A. E. Di Bari, G. Poggioni, V. |
| contents | Recent studies have shown that Deep Leaning models are susceptible to adversarial examples, which are data, in general images, intentionally modified to fool a machine learning classifier. In this paper, we present a multi-objective nested evolutionary algorithm to generate universal unrestricted adversarial examples in a black-box scenario. The unrestricted attacks are performed through the application of well-known image filters that are available in several image processing libraries, modern cameras, and mobile applications. The multi-objective optimization takes into account not only the attack success rate but also the detection rate. Experimental results showed that this approach is able to create a sequence of filters capable of generating very effective and undetectable attacks. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2103_00250 |
| institution | arXiv |
| publishDate | 2021 |
| record_format | arxiv |
| spellingShingle | Effective Universal Unrestricted Adversarial Attacks using a MOE Approach Baia, A. E. Di Bari, G. Poggioni, V. Machine Learning Cryptography and Security Recent studies have shown that Deep Leaning models are susceptible to adversarial examples, which are data, in general images, intentionally modified to fool a machine learning classifier. In this paper, we present a multi-objective nested evolutionary algorithm to generate universal unrestricted adversarial examples in a black-box scenario. The unrestricted attacks are performed through the application of well-known image filters that are available in several image processing libraries, modern cameras, and mobile applications. The multi-objective optimization takes into account not only the attack success rate but also the detection rate. Experimental results showed that this approach is able to create a sequence of filters capable of generating very effective and undetectable attacks. |
| title | Effective Universal Unrestricted Adversarial Attacks using a MOE Approach |
| topic | Machine Learning Cryptography and Security |
| url | https://arxiv.org/abs/2103.00250 |