HAL will be down for maintenance from Friday, June 10 at 4pm through Monday, June 13 at 9am. More information
Skip to Main content Skip to Navigation
Conference papers

Forensics Through Stega Glasses: the Case of Adversarial Images

Abstract : This paper explores the connection between forensics, counterforensics, steganography and adversarial images. On the one hand, forensicsbased and steganalysis-based detectors help in detecting adversarial perturbations. On the other hand, steganography can be used as a counterforensics strategy and helps in forging adversarial perturbations that are not only invisible to the human eye but also less statistically detectable. This work explains how to use these information hiding tools for attacking or defending computer vision image classification. We play this cat and mouse game using both recent deep-learning content-based classifiers, forensics detectors derived from steganalysis, and steganographic distortions dedicated to color quantized images. It turns out that crafting adversarial perturbations relying on steganographic perturbations is an effective counter-forensics strategy.
Document type :
Conference papers
Complete list of metadata

Contributor : Patrick Bas Connect in order to contact the contributor
Submitted on : Wednesday, December 9, 2020 - 9:49:34 AM
Last modification on : Friday, April 8, 2022 - 4:08:03 PM
Long-term archiving on: : Wednesday, March 10, 2021 - 6:34:32 PM


Files produced by the author(s)


  • HAL Id : hal-03047954, version 1


Benoît Bonnet, Teddy Furon, Patrick Bas. Forensics Through Stega Glasses: the Case of Adversarial Images. ICPR-MMForWILD 2020 - Workshop MultiMedia FORensics in the WILD, Jan 2021, Milan, Italy. pp.1-17. ⟨hal-03047954⟩



Record views


Files downloads