Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | https://arxiv.org/abs/2403.06430 |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866917980106915840 |
|---|---|
| author | Song, Zhenbo Gao, Wenhao Zhang, Zhenyuan Lu, Jianfeng |
| author_facet | Song, Zhenbo Gao, Wenhao Zhang, Zhenyuan Lu, Jianfeng |
| contents | Deep learning-based face restoration models, increasingly prevalent in smart devices, have become targets for sophisticated backdoor attacks. These attacks, through subtle trigger injection into input face images, can lead to unexpected restoration outcomes. Unlike conventional methods focused on classification tasks, our approach introduces a unique degradation objective tailored for attacking restoration models. Moreover, we propose the Adaptive Selective Frequency Injection Backdoor Attack (AS-FIBA) framework, employing a neural network for input-specific trigger generation in the frequency domain, seamlessly blending triggers with benign images. This results in imperceptible yet effective attacks, guiding restoration predictions towards subtly degraded outputs rather than conspicuous targets. Extensive experiments demonstrate the efficacy of the degradation objective on state-of-the-art face restoration models. Additionally, it is notable that AS-FIBA can insert effective backdoors that are more imperceptible than existing backdoor attack methods, including WaNet, ISSBA, and FIBA. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2403_06430 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | AS-FIBA: Adaptive Selective Frequency-Injection for Backdoor Attack on Deep Face Restoration Song, Zhenbo Gao, Wenhao Zhang, Zhenyuan Lu, Jianfeng Computer Vision and Pattern Recognition Deep learning-based face restoration models, increasingly prevalent in smart devices, have become targets for sophisticated backdoor attacks. These attacks, through subtle trigger injection into input face images, can lead to unexpected restoration outcomes. Unlike conventional methods focused on classification tasks, our approach introduces a unique degradation objective tailored for attacking restoration models. Moreover, we propose the Adaptive Selective Frequency Injection Backdoor Attack (AS-FIBA) framework, employing a neural network for input-specific trigger generation in the frequency domain, seamlessly blending triggers with benign images. This results in imperceptible yet effective attacks, guiding restoration predictions towards subtly degraded outputs rather than conspicuous targets. Extensive experiments demonstrate the efficacy of the degradation objective on state-of-the-art face restoration models. Additionally, it is notable that AS-FIBA can insert effective backdoors that are more imperceptible than existing backdoor attack methods, including WaNet, ISSBA, and FIBA. |
| title | AS-FIBA: Adaptive Selective Frequency-Injection for Backdoor Attack on Deep Face Restoration |
| topic | Computer Vision and Pattern Recognition |
| url | https://arxiv.org/abs/2403.06430 |