ANIS: attention and noise fusion to improve adversarial attack

Zhenyu Zhong; Jinghua Wang

doi:10.1117/12.3035110

19 July 2024 ANIS: attention and noise fusion to improve adversarial attack

Zhenyu Zhong, Jinghua Wang

Proceedings Volume 13213, International Conference on Image Processing and Artificial Intelligence (ICIPAl 2024); 132133F (2024) https://doi.org/10.1117/12.3035110
Event: International Conference on Image Processing and Artificial Intelligence (ICIPAl2024), 2024, Suzhou, China

Abstract

In recent years, adversarial attacks have attracted more and more concentration, and various attack methods have made them a significant threat to deep neural network (DNN) security. However, most of the current research focuses on the attack algorithm without paying awareness to the critical information of the image itself. This paper proposes ANIS, a flexible, attention-guided noise injection system. The system combines image processing techniques with adversarial examples to inject different types of noise into areas of varying importance. It is an architecture that integrates easily with other attack algorithms. After testing, we confirmed that ANIS could improve the success rate of attacks, making it more difficult for defense systems to defend. We also compared the performance of different adversarial attack algorithms combined with ANIS and found FGSM with the most noticeable improvement in attack effect.

(2024) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Zhenyu Zhong and Jinghua Wang "ANIS: attention and noise fusion to improve adversarial attack", Proc. SPIE 13213, International Conference on Image Processing and Artificial Intelligence (ICIPAl 2024), 132133F (19 July 2024); https://doi.org/10.1117/12.3035110

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available