美文网首页
[论文阅读笔记]One pixel attack for foo

[论文阅读笔记]One pixel attack for foo

作者: wangxiaoguang | 来源:发表于2020-03-29 12:10 被阅读0次

论文题目:One pixel attack for fooling deep neural networks
论文地址:https://arxiv.org/abs/1710.08864

One-pixel

The goal of adversaries in the case of targeted attacks is to find the optimized solution e(x)^* for the following question:

where

  • \mathbf{x}=\left(x_{1}, \cdots, x_{n}\right), n-dimensional inputs
  • f, the target image classifier
  • f_t(\mathbf{x}), the probability of \mathbf{x} belonging to the class t
  • \left(e_{1}, \cdots, e_{n}\right), an additive adversarial perturbation according to \mathbf{x}
  • adv, the target class
  • L, the limitation of maximum modification

In our approach, the equation is slightly different:


where d is a small number. In the case of one-pixel attack d =1.
note: 0范数表示向量中非零元素的个数。

参考

One pixel 对抗攻击_学习笔记
修改一个像素,就能让神经网络识别图像出错
论文阅读笔记三十:One pixel attack for fooling deep neural networks(CVPR2017)

相关文章

网友评论

      本文标题:[论文阅读笔记]One pixel attack for foo

      本文链接:https://www.haomeiwen.com/subject/gfgeuhtx.html