Geometry-Inspired Top-k Adversarial Perturbations
arXiv:2006.15669 · doi:10.1109/WACV51458.2022.00411
Abstract
The brittleness of deep image classifiers to small adversarial input perturbations has been extensively studied in the last several years. However, the main objective of existing perturbations is primarily limited to change the correctly predicted Top-1 class by an incorrect one, which does not intend to change the Top-k prediction. In many digital real-world scenarios Top-k prediction is more relevant. In this work, we propose a fast and accurate method of computing Top-k adversarial examples as a simple multi-objective optimization. We demonstrate its efficacy and performance by comparing it to other adversarial example crafting techniques. Moreover, based on this method, we propose Top-k Universal Adversarial Perturbations, image-agnostic tiny perturbations that cause the true class to be absent among the Top-k prediction for the majority of natural images. We experimentally show that our approach outperforms baseline methods and even improves existing techniques of finding Universal Adversarial Perturbations.
arXiv commentWACV 2022
References in corpus (14)
- Very Deep Convolutional Networks for Large-Scale Image Recognition
- Towards Deep Learning Models Resistant to Adversarial Attacks
- Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
- BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain
- AdvHat: Real-world adversarial attack on ArcFace Face ID system
- Did you hear that? Adversarial Examples Against Automatic Speech Recognition
- On Adaptive Attacks to Adversarial Example Defenses
- Fast Feature Fool: A data independent approach to universal adversarial perturbations
- Smooth Loss Functions for Deep Top-k Classification
- Learning with Average Top-k Loss
- Universal Adversarial Audio Perturbations
- Art of singular vectors and universal adversarial perturbations
- Adversarial Turing Patterns from Cellular Automata
- Adversarial Distillation for Ordered Top-k Attacks