Adversarial Sample Generation and Training using Neural Network

• 발행기관: 한국스마트미디어학회
• 저자명: Ho Yub Jung
• 간행물 정보: 『스마트미디어저널』Vol13, No.10, 43~49쪽, 전체 7쪽
• 주제분류: 공학 > 컴퓨터학
• 파일형태: PDF
• 발행일자: 2024.10.31

국문 초록

The neural network classifier is known to be susceptible to adversarial attacks, where projected gradient descent-like noise is added to the data, causing misclassification. These attacks can be prevented by min-max training, where the neural network is trained to handle adversarial attack data. Although min-max training is very effective, it requires a large amount of training time because each adversarial attack data generation requires several iterations of gradient back-propagation to produce. In this paper, convolutional layers are used to replace the projected gradient descent-based production of adversarial attack data in an attempt to reduce the training time. By replacing the adversarial noise generation with the output of convolutional layers, the training time becomes comparable to that of a simple neural network classifier with a few additional layers. The proposed approach significantly reduced the effects of smaller-scale adversarial attacks, and under certain circumstances, was shown to be as effective as min-max training. However, for severe attacks, the proposed approach was not able to compete with modern min-max-based remedies.

목차

Ⅰ. INTRODUCTION

Ⅱ. Background

Ⅲ. Proposed Method

Ⅳ. Evaluation

Ⅴ. Conclusion

REFERENCES

키워드

adversarial attack min-max training adversarial training neural network