Carpet-bombing patch: attacking a deep network without usual requirements - Archive ouverte HAL
Pré-Publication, Document De Travail Année : 2022

Carpet-bombing patch: attacking a deep network without usual requirements

Résumé

Although deep networks have shown vulnerability to evasion attacks, such attacks have usually unrealistic requirements. Recent literature discussed the possibility to remove or not some of these requirements. This paper contributes to this literature by introducing a carpet-bombing patch attack which has almost no requirement. Targeting the feature representations, this patch attack does not require knowing the network task. This attack decreases accuracy on Imagenet, mAP on Pascal Voc, and IoU on Cityscapes without being aware that the underlying tasks involved classification, detection or semantic segmentation, respectively. Beyond the potential safety issues raised by this attack, the impact of the carpet-bombing attack highlights some interesting property of deep network layer dynamic.
Fichier principal
Vignette du fichier
carpet-bombing.pdf (1.01 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04264001 , version 1 (29-10-2023)

Identifiants

Citer

Pol Labarbarie, Adrien Chan-Hon-Tong, Stéphane Herbin, Milad Leyli-Abadi. Carpet-bombing patch: attacking a deep network without usual requirements. 2023. ⟨hal-04264001⟩
129 Consultations
35 Téléchargements

Altmetric

Partager

More