Skip to Main content Skip to Navigation
Journal articles

Walking on the Edge: Fast, Low-Distortion Adversarial Examples

Hanwei Zhang 1 Yannis Avrithis 1 Teddy Furon 1 Laurent Amsaleg 1
1 LinkMedia - Creating and exploiting explicit links between multimedia fragments
Inria Rennes – Bretagne Atlantique , IRISA-D6 - MEDIA ET INTERACTIONS
Abstract : Adversarial examples of deep neural networks are receiving ever increasing attention because they help in understanding and reducing the sensitivity to their input. This is natural given the increasing applications of deep neural networks in our everyday lives. When white-box attacks are almost always successful, it is typically only the distortion of the perturbations that matters in their evaluation. In this work, we argue that speed is important as well, especially when considering that fast attacks are required by adversarial training. Given more time, iterative methods can always find better solutions. We investigate this speed-distortion trade-off in some depth and introduce a new attack called boundary projection (BP) that improves upon existing methods by a large margin. Our key idea is that the classification boundary is a manifold in the image space: we therefore quickly reach the boundary and then optimize distortion on this manifold.
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-02931493
Contributor : Laurent Amsaleg <>
Submitted on : Tuesday, December 8, 2020 - 3:43:14 PM
Last modification on : Tuesday, December 8, 2020 - 4:55:28 PM
Long-term archiving on: : Tuesday, March 9, 2021 - 7:42:23 PM

File

bp.pdf
Files produced by the author(s)

Identifiers

Citation

Hanwei Zhang, Yannis Avrithis, Teddy Furon, Laurent Amsaleg. Walking on the Edge: Fast, Low-Distortion Adversarial Examples. IEEE Transactions on Information Forensics and Security, Institute of Electrical and Electronics Engineers, 2020, 16, pp.701 - 713. ⟨10.1109/TIFS.2020.3021899⟩. ⟨hal-02931493⟩

Share

Metrics

Record views

121

Files downloads

130