Encoding Generative Adversarial Networks for Defense Against Image Classification Attacks
-
José M. Pérez-Bravo [1] ; José A. Rodríguez-Rodríguez [1] ; Jorge García-González [1] ; Miguel A. Molina-Cabello [1] ; Karl Thurnhofer-Hemsi [1] ; Ezequiel López-Rubio [1]
-
[1] Universidad de Málaga
Universidad de Málaga
Málaga, España
-
- Localización: Bio-inspired Systems and Applications: from Robotics to Ambient Intelligence: 9th International Work-Conference on the Interplay Between Natural and Artificial Computation, IWINAC 2022, Puerto de la Cruz, Tenerife, Spain, May 31 – June 3, 2022, Proceedings, Part II / José Manuel Ferrández Vicente (dir. congr.)
, José Ramón Álvarez Sánchez (dir. congr.) , Félix de la Paz López (dir. congr.) , Hojjat Adeli (aut.), 2022, ISBN 978-3-031-06527-9, págs. 163-172 - Idioma: inglés
- Texto completo no disponible (Saber más ...)
-
Resumen
Image classification has undergone a revolution in recent years due to the high performance of new deep learning models. However, severe security issues may impact the performance of these systems. In particular, adversarial attacks are based on modifying input images in a way that is imperceptible for human vision, so that deep learning image classifiers are deceived. This work proposes a new deep neural network model composed of an encoder and a Generative Adversarial Network (GAN). The former encodes a possibly malformed input image into a latent vector, while the latter generates a reconstructed image from the latent vector. Then the reconstructed image can be reliably classified because our model removes the deleterious effects of the attack. The experiments carried out were designed to test the proposed approach against the Fast Gradient Signed Method attack. The obtained results demonstrate the suitability of our approach in terms of an excellent balance between classification accuracy and computational cost.
