Removing Adversarial Noise via Low-Rank Completion of High-Sensitivity Points | IEEE Journals & Magazine | IEEE Xplore

Removing Adversarial Noise via Low-Rank Completion of High-Sensitivity Points


Abstract:

Deep neural networks are fragile under adversarial attacks. In this work, we propose to develop a new defense method based on image restoration to remove adversarial atta...Show More

Abstract:

Deep neural networks are fragile under adversarial attacks. In this work, we propose to develop a new defense method based on image restoration to remove adversarial attack noise. Using the gradient information back-propagated over the network to the input image, we identify high-sensitivity keypoints which have significant contributions to the image classification performance. We then partition the image pixels into the two groups: high-sensitivity and low-sensitivity points. For low-sensitivity pixels, we use a total variation (TV) norm-based image smoothing method to remove adversarial attack noise. For those high-sensitivity keypoints, we develop a structure-preserving low-rank image completion method. Based on matrix analysis and optimization, we derive an iterative solution for this optimization problem. Our extensive experimental results on the CIFAR-10, SVHN, and Tiny-ImageNet datasets have demonstrated that our method significantly outperforms other defense methods which are based on image de-noising or restoration, especially under powerful adversarial attacks.
Published in: IEEE Transactions on Image Processing ( Volume: 30)
Page(s): 6485 - 6497
Date of Publication: 10 June 2021

ISSN Information:

PubMed ID: 34110994

Funding Agency:


References

References is not available for this document.