高级检索

    基于双重信息对齐的多目标生成式对抗攻击

    Multi-Target Generative Adversarial Attacks Based on Dual-Information Alignment

    • 摘要: 深度神经网络在很多应用领域取得了显著成功. 然而,近年来的研究表明,它们容易受到对抗攻击的威胁. 尤其是有目标的对抗攻击,能够精确控制未知模型的输出,对数据隐私和系统安全构成严重挑战. 生成式攻击方法因其高效生成对抗样本的能力,近年来逐渐应用于有目标攻击的研究中. 然而,现有的生成式攻击方法通常针对单一目标类别生成对抗样本,在多目标任务中表现出计算效率低下、灵活性不足和扩展性有限等问题. 针对这些不足,提出了一种基于双重信息的多目标生成式攻击方法(multi-target generative attack based on dual-information,MTGA-DI). 该方法通过设计一个条件生成模型,充分融合目标类别的语义和视觉信息,不仅具备多目标攻击能力,还显著提升了对抗样本的迁移性和鲁棒性. 实验结果表明,与现有多目标攻击方法相比,MTGA-DI在标准训练模型和鲁棒模型上的性能更优,在应对基于输入预处理的防御模型时也展现出更强的适应能力.

       

      Abstract: Deep neural networks (DNNs) have demonstrated remarkable success in numerous application areas, including computer vision, natural language processing, and speech recognition. However, recent studies have revealed that DNNs are vulnerable to adversarial attacks, particularly targeted attacks capable of precisely manipulating the outputs of unknown models, which poses significant risks to data privacy, model trustworthiness, and system security. Generative attack methods, which can efficiently create adversarial examples, have become a critical tool in advancing targeted attack techniques due to their ability to automate the generation process and reduce manual effort. Despite their potential, most existing generative attack approaches mainly focus on crafting adversarial examples for a single target class. This design results in clear limitations, such as low efficiency, restricted flexibility, and poor scalability in multi-target tasks, making them difficult to apply in complex scenarios where multiple targets must be addressed simultaneously. To address these challenges, this paper proposes a Multi-Target Generative Attack based on Dual-Information (MTGA-DI). MTGA-DI employs a conditional generative model that integrates both semantic and visual information from multiple target classes, enabling efficient and adaptable multi-target attacks. Furthermore, the method significantly improves the transferability and stability of generated adversarial examples across different models and defense settings. Experimental results demonstrate that MTGA-DI surpasses previous methods on standard models as well as models enhanced with robust training and input preprocessing defenses, achieving higher attack success rates and better generalization.

       

    /

    返回文章
    返回