Impact of reverberation through deep neural networks on adversarial perturbations - CEA - Commissariat à l’énergie atomique et aux énergies alternatives Access content directly
Conference Papers Year : 2021

Impact of reverberation through deep neural networks on adversarial perturbations

Abstract

The vulnerability of Deep Neural Network (DNN) models to maliciously crafted adversarial perturbations is a critical topic considering their ongoing large-scale deployment. In this work, we explore an interesting phenomenon that occurs when an image is reinjected multiple times into a DNN, according to a procedure (called reverberation) that has been first proposed in cognitive psychology to avoid the catastrophic forgetting issue, through its impact on adversarial perturbations. We describe reverberation in vanilla autoencoders and propose a new reverberant architecture combining a classifier and an autoencoder that allows the joint observation of the logits and reconstructed images. We experimentally measure the impact of reverberation on adversarial perturbations placing ourselves in a scenario of adversarial example detection. The results show that clean and adversarial examples even with small levels of perturbation behave very differently throughout reverberation. While computationally efficient (reverberation is only based on inferences), our approach yields promising results for adversarial examples detection, consistent across datasets, adversarial attacks and DNN architectures.
Fichier principal
Vignette du fichier
ICMLA2021_paper155_camera-ready.pdf (1.23 Mo) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

cea-03605422 , version 1 (11-03-2022)

Identifiers

  • HAL Id : cea-03605422 , version 1

Cite

Romain Cohendet, Miguel Angel Solinas, Rémi Bernhard, Marina Reyboz, Pierre-Alain Moellic, et al.. Impact of reverberation through deep neural networks on adversarial perturbations. ICMLA 2021 - 20th IEEE International Cconference on Machine Learning and Applications, Dec 2021, Pasadena (Virtual event), United States. ⟨cea-03605422⟩
30 View
28 Download

Share

Gmail Facebook Twitter LinkedIn More