<abstract xmlns="http://www.w3.org/1999/xhtml">

<p>Deep neural networks based image classification systems could suffer from adversarial attack algorithms, which generate input examples by adding deliberately crafted yet imperceptible noise to original input images. These crafted examples can fool systems and further threaten their security. In this paper, we propose to use latent space protect image classification. Specifically, we train a feature searching network to make up the difference between adversarial examples and clean examples with label guided loss function. We name it DefenseFea(input transformation based defense with label guided loss function), experimental result shows that DefenseFea can improve the rate of adversarial examples that achieved a success rate of about 99% on a specific set of 5000 images from ILSVRC 2012. This study plays a positive role in the further investigation of the relationship between adversarial examples and clean examples.</p>
</abstract>

Deep neural networks based image classification systems could suffer from adversarial attack algorithms, which generate input examples by adding deliberately crafted yet imperceptible noise to original input images. These crafted examples can fool systems and further threaten their security. In this paper, we propose to use latent space protect image classification. Specifically, we train a feature searching network to make up the difference between adversarial examples and clean examples with label guided loss function. We name it DefenseFea(input transformation based defense with label guided loss function), experimental result shows that DefenseFea can improve the rate of adversarial examples that achieved a success rate of about 99% on a specific set of 5000 images from ILSVRC 2012. This study plays a positive role in the further investigation of the relationship between adversarial examples and clean examples.

DefenseFea: An Input Transformation Feature Searching Algorithm Based Latent Space for Adversarial Defense

Department of Computer Science and Engineering

Foundations of Computing and Decision Sciences

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Deep neural networks based image classification systems could suffer from adversarial attack algorithms, which generate input examples by adding deliberately...

DefenseFea: An Input Transformation Feature Searching Algorithm Based Latent Space for Adversarial Defense

Published Online: Feb 16, 2024

Page range: 21 - 36

Received: Jan 13, 2023

Accepted: May 16, 2023

DOI: https://doi.org/10.2478/fcds-2024-0002

Keywords
Adversarial Attack, Adversarial Defense, Latent space, Adversarial Training

© 2024 Zhang Pan et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

DefenseFea: An Input Transformation Feature Searching Algorithm Based Latent Space for Adversarial Defense

Published Online: Feb 16, 2024

Page range: 21 - 36

Received: Jan 13, 2023

Accepted: May 16, 2023

DOI: https://doi.org/10.2478/fcds-2024-0002

KeywordsAdversarial Attack, Adversarial Defense, Latent space, Adversarial Training

© 2024 Zhang Pan et al., published by Sciendo

This work is licensed under the Creative Commons Attribution-NonCommercial-NoDerivatives 3.0 License.

Keywords
Adversarial Attack, Adversarial Defense, Latent space, Adversarial Training