A neural network model for adversarial defense based on deep learning

Zhiying Wang; Yong Wang

doi:10.1117/12.3000789

9 August 2023 A neural network model for adversarial defense based on deep learning

Zhiying Wang, Yong Wang

Proceedings Volume 12782, Third International Conference on Image Processing and Intelligent Control (IPIC 2023); 127820N (2023) https://doi.org/10.1117/12.3000789
Event: Third International Conference on Image Processing and Intelligent Control (IPIC 2023), 2023, Kuala Lumpur, Malaysia

Abstract

Deep learning has achieved great success in many fields, such as image classification and target detection. Adding small disturbance which is hard to be detected by the human eyes to original images can make the neural network output error results with high confidence. An image after adding small disturbance is an adversarial example. The existence of adversarial examples brings a huge security problem to deep learning. In order to effectively defend against adversarial examples attacks, an adversarial example defense method based on image reconstruction is proposed by analyzing the existing adversarial examples attack methods and defense methods. Our data set is based on ImageNet 1k data set, and some filtering and expansion are carried out. Four attack modes, FGSM, BIM, DeepFool and C&W are selected to test the defense method. Based on the EDSR network, multi-scale feature fusion module and subspace attention module are added. By capturing the global correlation information of the image, the disturbance can be removed, while the image texture details can be better preserved, and the defense performance can be improved. The experimental results show that the proposed method has good defense effect.

(2023) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Zhiying Wang and Yong Wang "A neural network model for adversarial defense based on deep learning", Proc. SPIE 12782, Third International Conference on Image Processing and Intelligent Control (IPIC 2023), 127820N (9 August 2023); https://doi.org/10.1117/12.3000789

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available