基于RSA的图像可识别对抗攻击方法

张宇; 李海良

doi:10.11959/j.issn.2096-109x.2021065

您当前的位置：

首页 >

文章列表页 >

基于RSA的图像可识别对抗攻击方法

专栏Ⅰ：语音图像与音视频处理 | 更新时间：2024-06-03

- 基于RSA的图像可识别对抗攻击方法
- RSA-based image recognizable adversarial attack method
- 网络与信息安全学报 2021年7卷第5期页码：40-48
- 作者机构：
- 作者简介：
  
  [ "张宇（1995− ），男，河南许昌人，暨南大学博士生，主要研究方向为深度学习安全、对抗样本" ]
  [ "李海良（1981− ），男，河南商丘人，暨南大学副教授，主要研究方向为图像识别与网络安全" ]
- 基金信息：
  
  广东省重点研发计划;Key Research and Development Program of Guangdong Province(2020B0101090004);广东省科技创新战略专项资金;Special Funds for the Cultivation of Guangdong College Students’ Scientific and Technological Innovation(pdjh2021b0058)
- DOI：10.11959/j.issn.2096-109x.2021065
  中图分类号： TP181
- 网络首发：2021-10，
  
  纸质出版：2021-10-15
- 稿件说明：
移动端阅览
张宇, 李海良. 基于RSA的图像可识别对抗攻击方法[J]. 网络与信息安全学报, 2021,7(5):40-48.

Yu ZHANG, Hailiang LI. RSA-based image recognizable adversarial attack method[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 40-48.
张宇, 李海良. 基于RSA的图像可识别对抗攻击方法[J]. 网络与信息安全学报, 2021,7(5):40-48. DOI： 10.11959/j.issn.2096-109x.2021065.

Yu ZHANG, Hailiang LI. RSA-based image recognizable adversarial attack method[J]. Chinese Journal of Network and Information Security, 2021, 7(5): 40-48. DOI： 10.11959/j.issn.2096-109x.2021065.

摘要

基于密码学中的RSA签名方案与RSA加密方案，提出了一种能够让特定分类器输出对抗样本正确分类的对抗攻击方法。通过单像素攻击的思想使正常图像在嵌入附加信息的同时能够具有让其余分类器发生错误分类的能力。所提方法可以应用在分类器授权管理与在线图像防伪等领域。实验结果表明，所提方法生成的对抗样本对于人眼难以察觉，并能被特定分类器识别。

Abstract

Adversarial attack is an important part of deep learning security research.Relying on the RSA signature schemes and RSA encryption schemes in cryptography

an adversarial attack method that adversarial examples can be recognized by a specific classifier is proposed.Through the idea of one pixel attack

the normal image can have the ability to make other classifier misclassify while embedding additional information.It can be used in classifier authorization management

online image anti-counterfeiting

etc.The experiment show that the adversarial examples can be recognized under the specific classifier

and the disturbance noise is difficult to detect by the human eye.

关键词

Keywords

references

LE-CUN Y , BENGIO Y , HINTON G . Deep learning [J ] . Nature , 2015 , 521 ( 7553 ): 436 - 444 .

HE K , ZHANG X , REN S , et al . Deep residual learning for image recognition [C ] // Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition . 2016 : 770 - 778 .

GUO G , ZHANG N . A survey on deep learning based face recognition [J ] . Computer Vision and Image Understanding , 2019 ,189:102805.

DENG L , HINTON G , KINGSBURY B . New types of deep neural network learning for speech recognition and related applications:an overview [C ] // 2013 IEEE International Conference on Acoustics,Speech and Signal Processing . 2013 : 8599 - 8603 .

YOUNG T , HAZARIKA D , PORIA S , et al . Recent trends in deep learning based natural language processing [J ] . IEEE Computational Intelligence Magazine , 2018 , 13 ( 3 ): 55 - 75 .

GOODFELLOW I J , SHLENS J , SZEGEDY C . Explaining and harnessing adversarial examples [J ] . arXiv preprint arXiv:1412.6572 , 2014 .

DENG J , DONG W , SOCHER R , et al . Imagenet:a large-scale hierarchical image database [C ] // 2009 IEEE Conference on Computer Vision and Pattern Recognition . 2009 : 248 - 255 .

何英哲 , 胡兴波 , 何锦雯 , 等 . 机器学习系统的隐私和安全问题综述 [J ] . 计算机研究与发展 , 2019 , 56 ( 10 ): 2049 .

HE Y Z , HU X B , HE J W , et al . Overview of the privacy and security issues of machine learning systems [J ] . Computer Research and Development , 2019 , 56 ( 10 ): 2049 .

ZHENG T , CHEN C , REN K . Distributionally adversarial attack [C ] // Proceedings of the AAAI Conference on Artificial Intelligence . 2019 : 2253 - 2260 .

XIAO C , LI B , ZHU J Y , et al . Generating adversarial examples with adversarial networks [J ] . arXiv preprint arXiv:1801.02610 , 2018 .

QIU S , LIU Q , ZHOU S , et al . Review of artificial intelligence adversarial attack and defense technologies [J ] . Applied Sciences , 2019 , 9 ( 5 ): 909 .

AKHTAR N , MIAN A . Threat of adversarial attacks on deep learning in computer vision:a survey [J ] . IEEE Access , 2018 , 6 : 14410 - 14430 .

KURAKIN A , GOODFELLOW I , BENGIO S , et al . Adversarial attacks and defences competition [M ] // The NIPS'17 Competition:Building Intelligent Systems . 2018 : 195 - 231 .

TRAMÈR F , KURAKIN A , PAPERNOT N , et al . Ensemble adversarial training:attacks and defenses [J ] . arXiv preprint arXiv:1705.07204 , 2017 .

MADRY A , MAKELOV A , SCHMIDT L , et al . Towards deep learning models resistant to adversarial attacks [J ] . arXiv preprint arXiv:1706.06083 , 2017 .

LIANG B , LI H , SU M , et al . Detecting adversarial image examples in deep neural networks with adaptive noise reduction [J ] . IEEE Transactions on Dependable and Secure Computing , 2018 : 1 - 10 .

PAPERNOT N , MCDANIEL P , WU X , et al . Distillation as a defense to adversarial perturbations against deep neural networks [C ] // 2016 IEEE Symposium on Security and Privacy (SP) . 2016 : 582 - 597 .

JIA X , WEI X , CAO X , et al . Comdefend:an efficient image compression model to defend adversarial examples [C ] // Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition . 2019 : 6084 - 6092 .

SZEGEDY C , ZAREMBA W , SUTSKEVER I , et al . Intriguing properties of neural networks [J ] . arXiv preprint arXiv:1312.6199 , 2013 .

张思思 , 左信 , 刘建伟 . 深度学习中的对抗样本问题 [J ] . 计算机学报 , 2019 , 42 ( 8 ): 1886 - 1904 .

ZHANG S S , ZUO X , LIU J W . The problem of adversarial examples in deep learning [J ] . Chinese Journal of Computers , 2019 , 42 ( 8 ): 1886 - 1904 .

段广晗 , 马春光 , 宋蕾 , 等 . 深度学习中对抗样本的构造及防御研究 [J ] . 网络与信息安全学报 , 2020 , 6 ( 2 ): 1 - 11 .

DUAN G H , MA C G , SONG L , et al . Research on structure and defense of adversarial example in deep learning [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 2 ): 1 - 11 .

刘西蒙 , 谢乐辉 , 王耀鹏 , 等 . 深度学习中的对抗攻击与防御 [J ] . 网络与信息安全学报 , 2020 , 6 ( 5 ): 36 - 53 .

LIU X M , XIE L H , WANG Y P , et al . Adversarial attacks and defenses in deep learning [J ] . Chinese Journal of Network and Information Security , 2020 , 6 ( 5 ): 36 - 53 .

薛锐 . 公钥加密理论 [M ] . 北京 : 科学出版社 , 2016 .

XUE R . Public key encryption theory [M ] . Beijing : Science Press , 2016 .

DIFFIE W , HELLMAN M . New directions in cryptography [J ] . IEEE Transactions on Information Theory , 1976 , 22 ( 6 ): 644 - 654 .

RIVEST R L , SHAMIR A , ADLEMAN L . A method for obtaining digital signatures and public-key cryptosystems [J ] . Communications of the ACM , 1978 , 21 ( 2 ): 120 - 126 .

DONG Y , FU Q A , YANG X , et al . Benchmarking adversarial robustness on image classification [C ] // Proceedings of the IEEE/CVF Conference on Computer Vision and Pattern Recognition . 2020 : 321 - 331 .

MADRY A , MAKELOV A , SCHMIDT L , et al . Towards deep learning models resistant to adversarial attacks [J ] . arXiv preprint arXiv:1706.06083 , 2017 .

HYUN K , KIM Y , PARK K W , et al . Friend-safe evasion attack:an adversarial example that is correctly recognized by a friendly classifier [J ] . Computers ＆ Security , 2018 , 78 : 380 - 397 .

SU J , VARGAS D V , SAKURAI K . One pixel attack for fooling deep neural networks [J ] . IEEE Transactions on Evolutionary Computation , 2019 , 23 ( 5 ): 828 - 841 .

浏览量

301

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

基于光学的物理域对抗攻防综述

针对车牌识别系统的双重对抗攻击

纵向联邦学习方法及其隐私和安全综述

面向图像识别的卷积神经网络鲁棒性研究进展

面向图神经网络的对抗攻击与防御综述