A Generative Model based Adversarial Security of Deep Learning and Linear Classifier Models

Abstract

In recent years, machine learning algorithms have been applied widely in various fields such as health, transportation, and the autonomous car. With the rapid developments of deep learning techniques, it is critical to take the security concern into account for the application of the algorithms. While machine learning offers significant advantages in terms of the application of algorithms, the issue of security is ignored. Since it has many applications in the real world, security is a vital part of the algorithms. In this paper, we have proposed a mitigation method for adversarial attacks against machine learning models with an autoencoder model that is one of the generative ones. The main idea behind adversarial attacks against machine learning models is to produce erroneous results by manipulating trained models. We have also presented the performance of autoencoder models to various attack methods from deep neural networks to traditional algorithms by using different methods such as non-targeted and targeted attacks to multi-class logistic regression, a fast gradient sign method, a targeted fast gradient sign method and a basic iterative method attack to neural networks for the MNIST dataset.

arXiv comment33 pages

References in corpus (12)

• Deep Learning in Neural Networks: An Overview
• Deep Learning using Rectified Linear Units (ReLU)
• Fast and Accurate Deep Network Learning by Exponential Linear Units (ELUs)
• Activation Functions: Comparison of trends in Practice and Research for Deep Learning
• Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examples
• Robust Adversarial Reinforcement Learning
• Emergent Tool Use From Multi-Agent Autocurricula
• Training for Faster Adversarial Robustness Verification via Inducing ReLU Stability
• Assessing four Neural Networks on Handwritten Digit Recognition Dataset (MNIST)
• Adversarial Attacks on Variational Autoencoders
• Interpreting Adversarial Robustness: A View from Decision Surface in Input Space
• Adversarial Security Attacks and Perturbations on Machine Learning and Deep Learning Methods