Adversarial examples, adversarial models and deep learning based security - Archive ouverte HAL
Pré-Publication, Document De Travail Année : 2018

Adversarial examples, adversarial models and deep learning based security

Résumé

Cyber security system could benefit from the deep learning breakthrough. However, there are, today, critical issues with deep learning. The major issue is the lack of robustness of classical deep networks. This lack of robustness allows to compute well documented adversarial examples: confusing a network with just the addition of a low amplitude perturbation. Here, I show that this lack of robustness also allows adversarial model: possibility to change the global model behaviour with just the addition of a low amplitude perturbation to the train set. This property could be a real security faults for continuously trained system. Evaluation of the efficiency of adversarial model is provided on image classification datasets.
Fichier principal
Vignette du fichier
hal.pdf (581.58 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01676691 , version 1 (05-01-2018)
hal-01676691 , version 2 (17-01-2018)
hal-01676691 , version 3 (24-01-2018)
hal-01676691 , version 4 (30-01-2018)
hal-01676691 , version 5 (28-03-2018)
hal-01676691 , version 6 (02-10-2019)
hal-01676691 , version 7 (19-11-2019)

Identifiants

Citer

Adrien Chan-Hon-Tong. Adversarial examples, adversarial models and deep learning based security. 2018. ⟨hal-01676691v5⟩

Collections

UNIV-PARIS-SACLAY
379 Consultations
435 Téléchargements

Altmetric

Partager

More