Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2402.17104 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911784813723648 |
|---|---|
| author | Bassett, Robert L. Van Dellen, Austin Austin, Anthony P. |
| author_facet | Bassett, Robert L. Van Dellen, Austin Austin, Anthony P. |
| contents | We investigate the vulnerability of computer-vision-based signal classifiers to adversarial perturbations of their inputs, where the signals and perturbations are subject to physical constraints. We consider a scenario in which a source and interferer emit signals that propagate as waves to a detector, which attempts to classify the source by analyzing the spectrogram of the signal it receives using a pre-trained neural network. By solving PDE-constrained optimization problems, we construct interfering signals that cause the detector to misclassify the source even though the perturbations to the spectrogram of the received signal are nearly imperceptible. Though such problems can have millions of decision variables, we introduce methods to solve them efficiently. Our experiments demonstrate that one can compute effective and physically realizable adversarial perturbations for a variety of machine learning models under various physical conditions. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2402_17104 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Adversarial Perturbations of Physical Signals Bassett, Robert L. Van Dellen, Austin Austin, Anthony P. Machine Learning Cryptography and Security Signal Processing Optimization and Control 65K05, 90C30, 65M60 We investigate the vulnerability of computer-vision-based signal classifiers to adversarial perturbations of their inputs, where the signals and perturbations are subject to physical constraints. We consider a scenario in which a source and interferer emit signals that propagate as waves to a detector, which attempts to classify the source by analyzing the spectrogram of the signal it receives using a pre-trained neural network. By solving PDE-constrained optimization problems, we construct interfering signals that cause the detector to misclassify the source even though the perturbations to the spectrogram of the received signal are nearly imperceptible. Though such problems can have millions of decision variables, we introduce methods to solve them efficiently. Our experiments demonstrate that one can compute effective and physically realizable adversarial perturbations for a variety of machine learning models under various physical conditions. |
| title | Adversarial Perturbations of Physical Signals |
| topic | Machine Learning Cryptography and Security Signal Processing Optimization and Control 65K05, 90C30, 65M60 |
| url | https://arxiv.org/abs/2402.17104 |