高级检索

    基于双重信息对齐的多目标生成式对抗攻击

    Multi-Target Generative Adversarial Attacks Based on Dual-Information Alignment

    • 摘要: 深度神经网络作为人工智能领域的前沿技术,在各个领域取得了显著成功。然而,近年来的研究表明,这些网络易受到对抗攻击的威胁,尤其是有目标的对抗攻击能够精确控制未知模型的输出,对数据隐私和系统安全构成严重挑战。生成式攻击方法因其高效生成对抗样本的能力,近年来逐渐应用于有目标攻击的研究中。然而,现有的生成式攻击方法通常针对单一目标类别生成对抗样本,在多目标任务中表现出计算效率低下、灵活性不足和扩展性有限等问题。针对这些不足,本文提出了一种基于双重信息的多目标生成式攻击方法(Multi-Target Generative Attack based on Dual-Information, MTGA-DI)。该方法通过设计一个条件生成模型,充分融合目标类别的语义和视觉信息,不仅具备多目标攻击能力,还显著提升了对抗样本的迁移性和鲁棒性。实验结果表明,与现有多目标攻击方法相比,MTGA-DI在标准训练模型和鲁棒模型上的性能更优,在应对基于输入预处理的防御模型时也展现出更强的适应能力。

       

      Abstract: Deep neural networks, as a frontier technology in the field of artificial intelligence, have achieved remarkable success across various domains. However, recent studies have revealed their susceptibility to adversarial attacks, especially targeted attacks that can precisely control the output of unknown models, posing significant threats to data privacy and system security. Generative attack methods, known for efficiently crafting adversarial examples, have increasingly been employed in targeted attack research. Nevertheless, existing generative attack methods primarily focus on adversarial examples for single target classes, leading to inefficiencies, limited flexibility, and poor scalability in multi-target tasks. To address these challenges, this paper proposes a Multi-Target Generative Attack based on Dual-Information (MTGA-DI). This method leverages a conditional generative model to simultaneously utilize the semantic and visual information of target classes, enabling effective multi-target attack capabilities while significantly improving the transferability and robustness of adversarial examples. Experimental results demonstrate that MTGA-DI outperforms previous multi-target attack methods on both standard and robustly trained models, and achieves superior performance against models employing input preprocessing defenses.

       

    /

    返回文章
    返回